last executing test programs:

15m23.892096558s ago: executing program 4 (id=118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000003000f000000000000b600010008000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

15m23.404420881s ago: executing program 4 (id=120):
gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

15m22.48021073s ago: executing program 4 (id=123):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)='hfsplus\x00', 0x2, 0x0)
r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00')
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000002ec0)=[{{&(0x7f00000003c0)=@abs={0x3, 0x0, 0x4e21}, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000480)="2f70d03950a4bc8627da98b9783958333ee5570490911405bf8b9e29eae08d06093d973f28ae159f6f46ab6ca35f2f678a57571ab662fcf048bdaebf4d1556cd65602943af1c541ef46b6a47a7e80e045c69fe278d453f48bcaa4d974dbfdc3dc58037ad"}, {&(0x7f0000000900)="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"}, {&(0x7f0000001900)="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"}, {&(0x7f0000002900)="6dca476da649a3195b3144b500a89e98e33879638b4e49b5b69b242702c01fd94d7b8255576324d8830da96ecc28a2d7601e232450f7eafa7583edc86bba39b9714e7d53b18cbc364e63214b29fc2fb320123bcdebe8cf48e5ecfa30c62681ff32db37dd826789a959e8ad2a99f699a68746ba834e0787ea4ceeb965711daae59f66302687673618fd8ec1baa548b1ca83dbf039c4289e06b7d340fca58d4981f3a92821e4a36a6d49f6ebb760587c179b6cbc90e2174e2acf73f2598ef9eadeb0f2e9b8f1beed5a0edbc606f783e3a6010002930121"}], 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002ac0)="cec2102dbcbb5942195ee1ba59ecd219325f7a9012055c14ee53cae28098205a58a5213b2e746a1db7ca1dcd71b9c1fb2281fae4d8b633294d42cf7de26fbb3871e8ee8957f4952cbbc1cadbfd613d8c14e85a3a667da66bc54344d6f51e8b84cbd7bf4c83fd0bcc1b2fe561a13b0d359de97eae156c060fe0590d62569b20b20befae32543203cb99ae27493e09c7aefc106eb54f9638f24ca9d744f2e3464a71d5bc3a321fde0cef76bf782684f2841839a2e97fed37ba3833ed785df46ed2e33b2410f28b58fd31636433227e5615ea7884de180e98085827f56b82befcc80467a5cebb5854c1f20b2565591b6ad587"}, {&(0x7f0000002bc0)="c094d07e32dea66c37c08d7740c73c7c255cddf1c991434cdae17f75c0941e3dfda1421e8f316ae2a2467a344f2f684c5713886c3505479a006ee08a4d88e3ac81f4a9fb70baa1fa0e24f2ea3e70c8e23fd99e962cac6566ce33a8a5db8d93b095ce469ee7d13013a77768832d7d07d58e2732ec878b78b0694b5562f1951e2cf2cca124274d739b6149d9a619d563e23964b5bcc57b7d356516baf9008771048ab856dc4fa758961566ac9f0e1a33930546813268cf97a0b0ad1dffbcc0530fecbfdb155a53980ba122b3a5a42a756fd467bc80a0252e1d3e83766d04be7302925a1401571a108ecc1918fc9c3133072c2095825547e0"}, {&(0x7f0000002cc0)="68e1686b98cc55238f6cbe80cde00aa1cc355563a3d4bbe833d736051ea212c4090f6be9ef5e61c9c64b3bbf7dfbad325d97102c51ae1f14f06dee0224c4709c3158e44118213e1600e37b11cc4e92835187a3808a77ada2ea48e6fb3bc4531d189b3039672f154c6a95350569c78c9f257668ecba506bef115ffdc98c89ff7a909ae3a70e19daea3c2040516df8498aa5ad0813d14da15ce958ee451be554"}, {&(0x7f0000002d80)="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"}], 0x0, 0x0, 0x0, 0x10}}], 0x48a, 0x40810)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
sched_setscheduler(0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
kcmp(r3, r3, 0x1, r6, r5)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYRES16=r9, @ANYBLOB="0000000000000000b70500000801000085000000a500000095", @ANYRESOCT=r1, @ANYRES32=r7, @ANYRES8=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, &(0x7f0000000440)=0xc2, 0x0)

15m21.505426947s ago: executing program 4 (id=128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x84, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0)

15m21.220827911s ago: executing program 4 (id=130):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7fffd, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value=0x13}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4f, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

15m20.966792087s ago: executing program 4 (id=132):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x8, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x3, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x41f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x10000, 0x2, 0x8, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xffffffdc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0xffff, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x1, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x10000ab, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x1000, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x3ff, 0x7, 0x4, 0x0, 0xb, 0x400, 0x2008, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2000000, &(0x7f0000000280))

15m5.17165443s ago: executing program 32 (id=132):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x8a4, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x874, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x8, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x3, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x8a4}}, 0x800)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x41f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x10000, 0x2, 0x8, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xffffffdc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0xffff, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x1, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x10000ab, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x1000, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x3ff, 0x7, 0x4, 0x0, 0xb, 0x400, 0x2008, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2000000, &(0x7f0000000280))

10.468442389s ago: executing program 5 (id=4190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79e63}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040)
r4 = socket$inet6(0xa, 0x2, 0x0)
close(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r5, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x40010102, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000005600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0xffffffffffffffdc, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
syz_usb_connect(0x5, 0x46, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES32], 0x0)

8.843837878s ago: executing program 2 (id=4199):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4880)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x80ff}, 0x80)

7.511799225s ago: executing program 2 (id=4205):
r0 = socket(0x1d, 0xa, 0x6)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000200)={0x8, 0xc6, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"})
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x1)
fcntl$setlease(r3, 0x400, 0x1)
fcntl$getflags(r3, 0x401)
read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x2f)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7})
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000240))

6.492883629s ago: executing program 5 (id=4208):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x8, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xfffff424, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x83, 0x3, 0x1000, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x10001, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0x4eb, 0x802, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0x3, 0xc4, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x7, 0x100001ff, 0x40, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x0, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1000001, 0x6c1b, 0x2, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r5}, &(0x7f0000000300)=""/71, 0x47, 0x0)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0)
unshare(0x22020600)
r6 = open(0x0, 0x0, 0x0)
fcntl$lock(r6, 0x410, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3})
r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1)

5.018683809s ago: executing program 3 (id=4209):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.013267492s ago: executing program 0 (id=4210):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000200000300000000001f0000b600010008000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

5.010311037s ago: executing program 2 (id=4212):
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
r0 = openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2)
memfd_create(0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0/file1\x00', 0x0, 0x4000, r0}, 0x18)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000fff000002000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000109500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94)

4.660507368s ago: executing program 1 (id=4213):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000800000000000000003000000833b0200f0ffffff186700000800000001000000580a000095000000c6f85f00"], &(0x7f0000000540)='GPL\x00', 0x1, 0x10, &(0x7f0000000580)=""/16, 0x41000, 0x21, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x2, 0x7}, 0x10, 0x25b53, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x2, 0x5, 0x7}, {0x2, 0x2, 0x10, 0x6}, {0x4, 0x2, 0x8, 0x6}, {0x4, 0x5, 0xd, 0xa}], 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
remap_file_pages(&(0x7f0000662000/0x1000)=nil, 0x1000, 0x2000000, 0x1474, 0x40)
sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000130001000000000000000000786368616368613230000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006abbe23241b37aff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/206], 0xe0}}, 0x24018041)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001a40)=@svm={0x102, 0x1, 0x1080, {0x30000}, {"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"}})
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
fstat(r5, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$packet(0x11, 0x3, 0x300)

4.660066894s ago: executing program 5 (id=4214):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000090a010400000000000000000100080208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c018008000140"], 0x88}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000040)=0x79, 0x4)
sendmsg$nl_xfrm(r0, 0x0, 0x80)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x7, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000900), &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x77, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_newaddr={0x7c, 0x14, 0x400, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, r8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x0, 0x800, 0x2}}, @IFA_FLAGS={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80cd)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0)
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x4042810)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="6fd5025063341789f9b070698f6225da2aabd5e9a01028e8ea0410bb302c0e75de73551aa22cb883764f2057ae77972bde8e86fe7bd42113eff673b035d0e5157d3f4732f45fed1660aa5f7526ae0fc5b19f08ba751cdf8a04858e17fa60c3d7c37a4b4399cde7532829ff2c3e7bda1fbf1c02122d498bc0eb22bde8a459efbe1160aed7c9879dbbe4e0175f72e3e3763d5b673ab03e4d4bb78d2dc0c8d003ee10880ac1b53a323abb7645e70e7fef8cdbc7628d981310fda4baac2f8894bb2996cdda91c1063bc9bdd3949603f05081ec648212ac175810d534010c355ac98a6d45c001ec33b1623f08cf0afabb0a63ec368a9fa6bda75daa9d1087d8e9", 0xfe, 0x8010, &(0x7f0000000280)={0xa, 0x4e20, 0xf2, @mcast1, 0x7}, 0x1c)
getrandom(0x0, 0x0, 0xb00)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x24)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

4.637821321s ago: executing program 0 (id=4215):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
ioctl$BLKRRPART(r0, 0x125f, 0xfb)

4.525427498s ago: executing program 2 (id=4216):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f00000003c0)={0x2, 0x1, 0xc436})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, <r7=>r5, 0x2})
r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9, <r10=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000001c0)={r10})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x66642a85}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

4.460903281s ago: executing program 3 (id=4217):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@exit_looper], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000000c0)={{0x1, 0x2, 0x5, 0x3}, 0x51, 0x4})
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = syz_clone3(&(0x7f0000000680)={0x80050000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000540), {0xa}, &(0x7f0000000480)=""/137, 0x89, &(0x7f0000000700)=""/160, &(0x7f00000003c0)=[r5, r5, r5, r5, r5, r5, 0x0], 0x7, {r6}}, 0x58)
r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r9, 0x5609, &(0x7f0000000180)={0x0, 0x7, 0x3})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), 0x0)
prlimit64(r7, 0x0, &(0x7f0000000180)={0xdd, 0xb9f}, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0xa801}, 0x4000001)

4.460561896s ago: executing program 5 (id=4218):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602001200000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3.883646237s ago: executing program 5 (id=4219):
prctl$PR_SET_PDEATHSIG(0x1, 0x25) (async)
prctl$PR_SET_PDEATHSIG(0x1, 0x9) (async)
syz_usb_connect(0x5, 0x290, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2e, 0xcb, 0x44, 0x8, 0xbaf, 0xf8, 0x3889, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27e, 0x1, 0x1, 0x0, 0x10, 0x8, "", [{{0x9, 0x4, 0x3b, 0x3, 0xb, 0x28, 0x8c, 0x87, 0xfe, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0x4, 0x8, [@generic={0x73, 0xb, "983e16f55b70df999ee18068ed7b2cdf03f476e127034298522313a6f5a8c8356a1c72cc4838e5989b2b5e104884ea3dd6d3b5a0a3173e072719feea3ce4168c4dcb3cd4cc1f94af899c6e0a3b5c95c00b5012a163fb64d47a766baa6eb6cc9f70b28479268c0b2a3e81eec48589f4d4e2"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x2}]}}, {{0x9, 0x5, 0x90, 0x10, 0x0, 0x5, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x3, 0x1c, 0x0, 0x0, 0x2b, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xc7, 0x2d}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0x9, 0xd}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x4, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x47, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2, 0x6, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x3, 0x8}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0xc, 0x4, 0xcc}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x9, 0xb7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1ff}, @generic={0x96, 0x31, "a836c5e64f4df23d14fb0e244ddcf288c20ab3c03c99cd80b55f75f9317244ccb9ef9dc398ac7fefa0bff620b606cb9bf45d4fc62387096b02b010f022d1f95404f84e0e7506aff38237cba356cc8738b74b272c5df46bf52cfb9cd2a4db9615ce4f88f305fef949efa1134446d3f92b6954c9ff562200bffc86d62823ad6d4f395535b6c87c738438ac449b948580196f884689"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x10, 0x8, 0x2, [@generic={0xd6, 0x3, "b89896203e715aa4521478b024fb848599a5011b0d334c924c91b0b769cc1b1efadb14c4c7b654ededf92f47ba5bff8a89c0350e23f754614c4808de584eeb06cb01d2b7003017a51cb94fffe5f394d2a0c028f2afcd9ae5a7fc7dbae1268174493729d091c780ce0ad2bd24f0032de74cf1f3e6194c5380f7cfac805ac8423651b91c3a75770e448b8cc82a1e892192e2590cec18f55d3c1b294fb16b621332ec81d680834b47436cc190674fed6e085b91fbba5ab66c93c391693a4dd2d11b29166416715c841eae070e1d41dc52bc65a7fcc7"}]}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x33, &(0x7f0000000000)=@string={0x33, 0x3, "d29d885dc7228eeaba9a24be4693696ebed275414f0eae7be0bbe6e6017ed154eb3e562b2f39ffb10b836abc8232a38e2d"}}, {0xfffffffffffffdc2, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x419}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x82c}}]})

3.818900077s ago: executing program 0 (id=4220):
gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

3.696826087s ago: executing program 1 (id=4221):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d00, 0xed, 0xfffffffffffffffe}]})
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000016000b63d2472fcfd985afd77f739cbe9ec556504a8c535a80020425fdded563ab0a28a2f7491d", 0x2b}], 0x1}, 0x1)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x800}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000400000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
sched_getparam(0xffffffffffffffff, &(0x7f0000000000))

3.694007316s ago: executing program 2 (id=4222):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x2000c051)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) (async)
write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000001880))
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x0, 0x410, 0xffffffff, 0xf8, 0xf8, 0x548, 0x548, 0xffffffff, 0x548, 0x548, 0x5, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000, 0xf2304535d25d39dd], 'veth0_macvtap\x00', 'geneve1\x00', {0xff}, {0xff}, 0x2f, 0x8, 0x2, 0x3}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xffffffff, [0xf, 0x401], 0x9, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @private0, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty], 0x9}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e23, @gre_key=0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x16}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xff], 'ip6_vti0\x00', 'bridge_slave_1\x00', {}, {}, 0x6c, 0x0, 0x0, 0x9}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x2, 0x1, [0x0, 0x1ae2, 0x4, 0x3, 0x8000, 0x3, 0x6, 0x5, 0x3, 0x2, 0x0, 0x0, 0x52, 0x3ff, 0x7, 0x9], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@mcast1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @port=0x4e21, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) (async)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3)
syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)

3.239119813s ago: executing program 3 (id=4223):
syz_open_procfs(0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x141, 0x80000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x80000006, 0x8, 0xfd, 0xffffffff, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x4, 0x7a, 0x3, 0x40000003, 0x89, 0x15, 0x7f, 0x0, 0x5, 0xe66, 0x800, 0x3, 0xa6b5, 0x0, 0x9]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x42880, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xe1d1}, 0x8)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, 0x0)

3.188841513s ago: executing program 0 (id=4224):
syz_open_dev$radio(0x0, 0x2, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006"], 0x1c}, 0x14}, 0x0)

3.188390583s ago: executing program 2 (id=4225):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket(0x2, 0x80805, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x101, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x0, 0x5}, {0xfffa, 0xa}}, [""]}, 0x24}}, 0x4000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004)
ioprio_get$uid(0x3, 0x0)
r5 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180), &(0x7f0000000580), &(0x7f0000000000))
io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r6, 0xda90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000440)={r10, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x86}, &(0x7f0000000100)=0x90)

3.143342941s ago: executing program 0 (id=4226):
r0 = socket(0x1d, 0x80802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = msgget$private(0x0, 0x508)
msgsnd(r6, &(0x7f00000000c0)={0x1}, 0x8, 0x800)
msgrcv(r6, &(0x7f00000004c0)={0x0, ""/179}, 0xbb, 0x1, 0x0)
msgctl$IPC_RMID(r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x60000000)
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0)

1.975949042s ago: executing program 3 (id=4227):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50)
r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x600)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000200)={0x7fff, 0x4, [0x1]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x28, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000380))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x80ffffffffffffff)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

1.29291664s ago: executing program 1 (id=4228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x80)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48)

679.461482ms ago: executing program 3 (id=4229):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

337.415659ms ago: executing program 5 (id=4230):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a04"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x3, 0x5}, 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0}) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1)
r8 = creat(&(0x7f0000000500)='./file0\x00', 0x80)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0xe, @void}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYRES64=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x367081, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fremovexattr(0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f00000000c0)=0xe, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) (async, rerun: 32)
r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7a, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r11, 0xc0585609, &(0x7f0000000200)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x800, 0x80000001, {}, {0x6, 0x0, 0x1, 0x2, 0x4, 0xfb, "d3b0ab35"}, 0x2c, 0x3, {0x0}, 0x7})
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000e010000000000000000000005000017"], 0x14}, 0x1, 0x0, 0x0, 0x40440c0}, 0x10000000)

268.675638ms ago: executing program 1 (id=4231):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x30, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x2000}], 0x0, 0x0, 0x0})

253.513806ms ago: executing program 3 (id=4232):
r0 = openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2)
memfd_create(0x0, 0x1)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000300))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0/file1\x00', 0x0, 0x4000, r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00ffd00000000002000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000109500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)

233.899402ms ago: executing program 1 (id=4233):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (rerun: 32)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async, rerun: 32)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x82000, 0x0) (rerun: 32)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

51.041155ms ago: executing program 0 (id=4234):
syz_open_procfs(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x42880, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xe1d1}, 0x8)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, 0x0)

0s ago: executing program 1 (id=4235):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x7, 0x8, @vifc_lcl_ifindex=r2, @rand_addr=0x64010101}, 0x10)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x1b, &(0x7f0000000140), &(0x7f0000000340)=""/27, 0x96, 0x0, 0x3, 0xa0, &(0x7f00000005c0)="3aa1df", &(0x7f0000000600)="46c752cd465151bc38d55a843a4644297220be4ea6d5d92fc97b1a2000f8db7e540fa1a5e5753ff53f2f93d16d72fbc6b5380e2c0a7ca93cc927b965ff094a3245462349e2271de9d9610620c8580b2d080baf4b644bb38a1c76ed5add5b93270f66273d185e2e45e36e6162aff1ccb8653343a80d38ccc3ec53b5d85b904b5a0ae4c4b6e7e5bf9172307fa1cade3d6b887cf8255f1d956bd1d426ff2f542f85", 0x4, 0x0, 0x6}, 0x50) (async)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
lstat(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000240))
stat(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)) (async)
r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) (async)
r5 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x2, 0x2}, 0x10)

kernel console output (not intermixed with test programs):

ore: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.272647][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.320379][T18020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.417882][   T30] audit: type=1326 audit(1783151470.068:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17988 comm="syz.0.3389" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x0
[  872.556229][   T30] audit: type=1400 audit(1783151470.208:1588): avc:  denied  { write } for  pid=18005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  872.682068][ T5712] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  872.720625][ T5705] libceph: connect (1)[c::]:6789 error -101
[  872.935271][ T5712] usb 6-1: Using ep0 maxpacket: 16
[  872.941999][ T5705] libceph: mon0 (1)[c::]:6789 connect error
[  872.948992][ T5712] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  872.957136][ T5712] usb 6-1: config 0 has no interface number 0
[  872.964975][ T5712] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  872.976365][ T5712] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.986308][ T5712] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  873.211244][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.224526][ T5740] libceph: connect (1)[c::]:6789 error -101
[  873.235037][ T5740] libceph: mon0 (1)[c::]:6789 connect error
[  873.236047][ T5712] usb 6-1: config 0 descriptor??
[  873.328596][   T30] audit: type=1400 audit(1783151470.968:1589): avc:  denied  { write } for  pid=18038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  873.931258][ T5740] libceph: connect (1)[c::]:6789 error -101
[  873.954570][ T5740] libceph: mon0 (1)[c::]:6789 connect error
[  874.109480][ T5712] usbhid 6-1:0.1: can't add hid device: -71
[  874.123758][ T5712] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[  874.166091][ T5712] usb 6-1: USB disconnect, device number 64
[  874.288577][ T5740] usb 2-1: USB disconnect, device number 77
[  874.389653][   T30] audit: type=1400 audit(1783151472.038:1590): avc:  denied  { write } for  pid=18042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  874.423573][T18032] ceph: No mds server is up or the cluster is laggy
[  874.548318][   T30] audit: type=1400 audit(1783151472.198:1591): avc:  denied  { write } for  pid=18057 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  874.580758][ T5719] usbhid 1-1:0.1: can't add hid device: -71
[  874.595821][ T5719] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  874.653916][ T5719] usb 1-1: USB disconnect, device number 68
[  874.815820][ T5740] usb 2-1: new low-speed USB device number 78 using dummy_hcd
[  875.155630][ T5740] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  875.175430][ T5740] usb 2-1: config 0 has no interface number 0
[  875.194290][   T30] audit: type=1400 audit(1783151472.838:1592): avc:  denied  { write } for  pid=18059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  875.204455][T18080] binder: 18078:18080 ioctl 4b70 200000000280 returned -22
[  875.225348][ T5740] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  875.253733][ T5740] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.274215][ T5740] usb 2-1: config 0 interface 1 has no altsetting 0
[  875.368249][ T5740] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  875.378175][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.515042][ T5740] usb 2-1: config 0 descriptor??
[  876.147069][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'.
[  876.247007][   T30] audit: type=1400 audit(1783151473.838:1593): avc:  denied  { write } for  pid=18086 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  876.312497][T18084] tipc: Started in network mode
[  876.317422][T18084] tipc: Node identity bafa17783e98, cluster identity 4711
[  876.325962][T18084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  876.348566][T18083] tipc: Disabling bearer <eth:syzkaller0>
[  877.275592][ T5740] uclogic 0003:2179:0053.0026: pen parameters not found
[  877.291467][ T5740] uclogic 0003:2179:0053.0026: interface is invalid, ignoring
[  877.308375][ T5740] usb 2-1: USB disconnect, device number 78
[  877.360688][T18102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3411'.
[  877.732031][T18121] netlink: 'syz.3.3416': attribute type 10 has an invalid length.
[  877.740063][T18121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3416'.
[  877.752062][T18121] bridge0: port 3(dummy0) entered blocking state
[  877.759684][T18121] bridge0: port 3(dummy0) entered disabled state
[  877.768250][T18121] dummy0: entered allmulticast mode
[  877.786223][T18121] dummy0: entered promiscuous mode
[  877.795582][T18121] bridge0: port 3(dummy0) entered blocking state
[  877.802194][T18121] bridge0: port 3(dummy0) entered forwarding state
[  878.472501][T18138] FAULT_INJECTION: forcing a failure.
[  878.472501][T18138] name failslab, interval 1, probability 0, space 0, times 0
[  878.485280][T18138] CPU: 0 UID: 0 PID: 18138 Comm: syz.2.3421 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  878.485304][T18138] Tainted: [L]=SOFTLOCKUP
[  878.485308][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  878.485315][T18138] Call Trace:
[  878.485320][T18138]  <TASK>
[  878.485325][T18138]  dump_stack_lvl+0x100/0x190
[  878.485344][T18138]  should_fail_ex.cold+0x5/0xa
[  878.485359][T18138]  should_failslab+0xc2/0x120
[  878.485373][T18138]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  878.485385][T18138]  ? selinux_inode_alloc_security+0x109/0x290
[  878.485396][T18138]  ? __d_alloc+0x35/0xa50
[  878.485410][T18138]  __d_alloc+0x35/0xa50
[  878.485422][T18138]  path_from_stashed+0x427/0x750
[  878.485437][T18138]  pidfs_alloc_file+0xf8/0x290
[  878.485447][T18138]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  878.485461][T18138]  pidfd_prepare+0x107/0x1b0
[  878.485477][T18138]  __x64_sys_pidfd_open+0x105/0x1a0
[  878.485495][T18138]  ? __pfx___x64_sys_pidfd_open+0x10/0x10
[  878.485520][T18138]  do_syscall_64+0x115/0x870
[  878.485536][T18138]  ? clear_bhb_loop+0x40/0x90
[  878.485549][T18138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.485560][T18138] RIP: 0033:0x7f7cfe19de59
[  878.485570][T18138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.485581][T18138] RSP: 002b:00007f7cff0c6018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[  878.485593][T18138] RAX: ffffffffffffffda RBX: 00007f7cfe426090 RCX: 00007f7cfe19de59
[  878.485600][T18138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000a8
[  878.485606][T18138] RBP: 00007f7cff0c6090 R08: 0000000000000000 R09: 0000000000000000
[  878.485612][T18138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.485618][T18138] R13: 00007f7cfe426128 R14: 00007f7cfe426090 R15: 00007ffe6355c2b8
[  878.485632][T18138]  </TASK>
[  878.786136][T18143] netlink: 'syz.2.3421': attribute type 10 has an invalid length.
[  878.794193][T18143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3421'.
[  878.960523][T18136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  879.597613][T18151] netlink: 'syz.3.3422': attribute type 10 has an invalid length.
[  879.891633][T18143] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  880.343778][ T5704] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  880.401685][T18166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.427167][T18166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.499707][   T30] audit: type=1400 audit(1783151478.148:1594): avc:  denied  { mount } for  pid=18163 comm="syz.2.3428" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  880.584202][ T5704] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  880.595184][   T30] audit: type=1400 audit(1783151478.178:1595): avc:  denied  { search } for  pid=18163 comm="syz.2.3428" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  880.629559][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.658932][ T5704] usb 2-1: config 0 descriptor??
[  880.684226][ T5704] pwc: Samsung MPC-C10 USB webcam detected.
[  880.701021][   T30] audit: type=1400 audit(1783151478.178:1596): avc:  denied  { search } for  pid=18163 comm="syz.2.3428" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  880.721486][T18175] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  880.753334][   T30] audit: type=1400 audit(1783151478.178:1597): avc:  denied  { read } for  pid=18163 comm="syz.2.3428" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  880.776785][   T30] audit: type=1400 audit(1783151478.178:1598): avc:  denied  { read open } for  pid=18163 comm="syz.2.3428" path="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  881.026246][   T30] audit: type=1400 audit(1783151478.228:1599): avc:  denied  { mounton } for  pid=18172 comm="syz.3.3431" path="/file0" dev="ramfs" ino=61283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  881.218101][T18173] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  881.231990][T18173] overlayfs: failed to set xattr on upper
[  881.256565][T18173] overlayfs: ...falling back to redirect_dir=nofollow.
[  881.275415][T18173] overlayfs: ...falling back to index=off.
[  881.286372][T18173] overlayfs: ...falling back to uuid=null.
[  881.296336][T18173] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  881.369885][ T5704] pwc: send_video_command error -71
[  881.375534][ T5704] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  881.392357][ T5704] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  881.429980][ T5704] usb 2-1: USB disconnect, device number 79
[  881.442522][   T30] audit: type=1400 audit(1783151479.088:1600): avc:  denied  { ioctl } for  pid=18192 comm="syz.2.3435" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  881.930586][   T30] audit: type=1400 audit(1783151479.578:1601): avc:  denied  { write } for  pid=18165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  881.988290][T18193] netlink: 'syz.2.3435': attribute type 39 has an invalid length.
[  881.997542][T18202] binder: 18199:18202 ioctl 4080aebf 200000002280 returned -22
[  882.048275][T18207] binder: 18199:18207 ioctl 89f3 200000000300 returned -22
[  882.068731][   T30] audit: type=1400 audit(1783151479.718:1602): avc:  denied  { write } for  pid=18206 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  882.116581][T18202] binder: 18199:18202 ioctl c0306201 2000000000c0 returned -22
[  882.164721][ T5270] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  882.372028][ T5719] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  882.575458][ T5719] usb 6-1: Using ep0 maxpacket: 8
[  882.632162][T18216] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  882.634548][ T5719] usb 6-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  882.671890][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.682346][ T5719] usb 6-1: Product: syz
[  882.688430][ T5719] usb 6-1: Manufacturer: syz
[  882.688487][T18216] SELinux: failed to load policy
[  882.695489][ T5719] usb 6-1: SerialNumber: syz
[  884.215587][ T5719] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  884.279183][ T5719] usb 6-1: MIDIStreaming interface descriptor not found
[  884.297088][T18236] dummy0: left allmulticast mode
[  884.311556][T18236] dummy0: left promiscuous mode
[  884.342187][T18236] bridge0: port 3(dummy0) entered disabled state
[  884.830684][T18236] bridge_slave_1: left allmulticast mode
[  884.888327][T18236] bridge_slave_1: left promiscuous mode
[  884.909230][T18236] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.952833][T18236] bridge_slave_0: left allmulticast mode
[  885.012981][T18236] bridge_slave_0: left promiscuous mode
[  885.022125][T18236] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.353230][ T5719] usb 6-1: USB disconnect, device number 65
[  885.475926][T10816] udevd[10816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  886.091952][ T5719] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  886.265125][T18258] SELinux:  unknown common socke�
[  886.271826][T18258] SELinux:  invalid class
[  886.288648][T18258] SELinux: failed to load policy
[  886.315935][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  886.346657][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  886.379742][ T5719] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[  886.391349][   T30] audit: type=1400 audit(1783151484.038:1603): avc:  denied  { accept } for  pid=18262 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  886.417578][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.418461][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.438259][ T5719] usb 6-1: config 0 descriptor??
[  886.484574][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.622519][T18268] vivid-007: =================  START STATUS  =================
[  886.639053][T18268] vivid-007: Enable Output Cropping: true grabbed
[  886.648127][T18268] vivid-007: Enable Output Composing: true grabbed
[  886.656292][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.675205][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.706627][T18268] vivid-007: Enable Output Scaler: true grabbed
[  886.748990][T18268] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  886.773741][T18268] vivid-007: Transmit Mode: HDMI grabbed
[  886.792424][T18268] vivid-007: Hotplug Present: 0x00000000
[  886.808897][T18268] vivid-007: RxSense Present: 0x00000000
[  886.831848][T18268] vivid-007: EDID Present: 0x00000000
[  886.837420][T18268] vivid-007: ==================  END STATUS  ==================
[  887.031214][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.070111][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.162888][ T5719] usbhid 6-1:0.0: can't add hid device: -71
[  887.198799][ T5719] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  887.256758][ T5719] usb 6-1: USB disconnect, device number 66
[  887.422561][T18282] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  887.434254][T18282] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  887.943522][ T5705] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[  888.414215][T18292] netlink: 'syz.5.3463': attribute type 8 has an invalid length.
[  888.436352][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3463'.
[  888.699351][ T5712] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  888.997324][ T5705] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  889.116122][ T5712] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  889.166036][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.240047][ T5712] usb 2-1: Product: syz
[  889.258404][ T5712] usb 2-1: Manufacturer: syz
[  889.276782][ T5712] usb 2-1: SerialNumber: syz
[  889.400303][ T5712] usb 2-1: config 0 descriptor??
[  889.402026][T18298] netlink: 'syz.0.3465': attribute type 10 has an invalid length.
[  889.414690][T18298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3465'.
[  889.431931][T18298] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  889.437971][T18300] binder: 18299:18300 ioctl 80207011 200000000280 returned -22
[  889.712510][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3467'.
[  890.292720][ T5712] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  890.399208][ T5712] usb 2-1: Firmware version (0.0) predates our first public release.
[  890.479438][ T5712] usb 2-1: Please update to version 0.2 or newer
[  890.731621][ T5705] usb 4-1: config 0 has no interface number 0
[  890.741801][ T5705] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  890.755765][ T5705] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  890.766963][ T5705] usb 4-1: config 0 interface 1 has no altsetting 0
[  890.773698][ T5705] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  890.782958][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.855717][ T5705] usb 4-1: config 0 descriptor??
[  890.861249][ T5705] usb 4-1: can't set config #0, error -71
[  890.868876][ T5705] usb 4-1: USB disconnect, device number 88
[  891.027561][ T5712] usb 2-1: USB disconnect, device number 80
[  891.662242][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'.
[  892.124494][T18327] siw: device registration error -23
[  892.889899][   T24] IPVS: starting estimator thread 0...
[  892.924546][   T30] audit: type=1400 audit(1783151490.578:1604): avc:  denied  { ioctl } for  pid=18328 comm="syz.1.3476" path="socket:[62646]" dev="sockfs" ino=62646 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  893.068636][T18333] IPVS: using max 49 ests per chain, 117600 per kthread
[  894.128686][ T5705] lo speed is unknown, defaulting to 1000
[  894.221253][T18344] batman_adv: batadv0: Adding interface: ip6gretap1
[  894.228036][T18344] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.301671][T18344] batman_adv: batadv0: Interface activated: ip6gretap1
[  895.563720][T18362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3485'.
[  896.291831][ T5712] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  896.451885][ T5712] usb 6-1: Using ep0 maxpacket: 32
[  896.591955][   T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  896.607417][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  896.620718][ T5712] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  896.632212][ T5712] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  896.747864][ T5712] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  896.780593][   T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  896.799978][ T5712] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  896.809756][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.822714][   T24] usb 2-1: Product: syz
[  896.829983][ T5712] usb 6-1: config 1 interface 1 has no altsetting 0
[  896.839966][   T24] usb 2-1: Manufacturer: syz
[  896.852495][   T24] usb 2-1: SerialNumber: syz
[  896.858590][ T5712] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  896.871474][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.882278][   T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  896.908257][   T30] audit: type=1400 audit(1783151494.548:1605): avc:  denied  { firmware_load } for  pid=5719 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  896.945616][ T5712] usb 6-1: Product: syz
[  896.960013][ T5712] usb 6-1: Manufacturer: syz
[  896.977628][ T5712] usb 6-1: SerialNumber: syz
[  897.002773][ T5719] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  897.208561][ T5712] usb 6-1: selecting invalid altsetting 0
[  897.340578][T18383] netlink: 'syz.0.3492': attribute type 1 has an invalid length.
[  897.406353][T18364] netlink: 'syz.5.3486': attribute type 2 has an invalid length.
[  897.416160][ T5712] usb 6-1: 1:1: cannot get freq (v2/v3): err -32
[  897.503046][T18383] 8021q: adding VLAN 0 to HW filter on device bond2
[  897.650459][ T5712] usb 6-1: 1:1: cannot get freq (v2/v3): err -71
[  897.689657][T18373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3488'.
[  897.965649][ T5712] usb 6-1: USB disconnect, device number 67
[  898.094132][T18373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.128232][T18373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.752929][ T5719] usb 2-1: Service connection timeout for: 257
[  898.759475][ T5719] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  898.785042][ T5719] ath9k_htc: Failed to initialize the device
[  898.810139][ T5719] usb 2-1: ath9k_htc: USB layer deinitialized
[  898.940486][T18411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3498'.
[  899.578320][T18415] netlink: 'syz.5.3500': attribute type 32 has an invalid length.
[  899.871917][T18415] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3500'.
[  901.898567][T18433] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3505'.
[  902.636003][ T5611] Bluetooth: hci4: command 0x0406 tx timeout
[  903.175048][T18438] bond3: entered promiscuous mode
[  903.725933][ T5705] usb 2-1: USB disconnect, device number 81
[  903.820053][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'.
[  903.829191][T18444] netlink: 'syz.3.3512': attribute type 10 has an invalid length.
[  903.839294][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3512'.
[  903.857295][T18444] geneve2: entered promiscuous mode
[  903.862732][T18444] geneve2: entered allmulticast mode
[  905.100511][   T30] audit: type=1326 audit(1783151502.748:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.5.3510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd19de59 code=0x0
[  905.793851][T15527] usb 1-1: new low-speed USB device number 69 using dummy_hcd
[  905.973392][T15527] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  906.196153][T18477] overlayfs: failed to resolve './file2': -2
[  906.214260][T15527] usb 1-1: config 0 has no interface number 0
[  906.224394][T15527] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  906.311988][T15527] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.525741][T15527] usb 1-1: config 0 interface 1 has no altsetting 0
[  906.536337][T15527] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  906.549790][T15527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.596089][T15527] usb 1-1: config 0 descriptor??
[  907.759305][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3526'.
[  907.832632][T18501] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  907.967892][T18493] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  907.993817][T18493] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  908.013870][T18493] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  908.034234][T18493] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  908.167183][T18493] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  908.381975][T18493] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  908.408780][T18493] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  908.432038][T18493] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  908.455505][T18493] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  908.560510][T15527] uclogic 0003:2179:0053.0027: failed retrieving string descriptor #100: -71
[  908.610343][T15527] uclogic 0003:2179:0053.0027: failed retrieving pen parameters: -71
[  908.650406][T15527] uclogic 0003:2179:0053.0027: pen probing failed: -71
[  908.675638][T15527] uclogic 0003:2179:0053.0027: failed probing parameters: -71
[  908.692181][T15527] uclogic 0003:2179:0053.0027: probe with driver uclogic failed with error -71
[  908.738226][T18514] lo speed is unknown, defaulting to 1000
[  908.752360][T15527] usb 1-1: USB disconnect, device number 69
[  909.464852][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  909.893671][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3532'.
[  909.996233][  T188] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  910.041855][ T5611] Bluetooth: hci4: command 0x0406 tx timeout
[  910.048132][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout
[  910.156620][T18520] netlink: 'syz.5.3532': attribute type 10 has an invalid length.
[  910.165095][T18520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3532'.
[  910.174446][T18520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  910.211797][  T188] usb 4-1: Using ep0 maxpacket: 32
[  910.225397][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'.
[  910.235372][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'.
[  910.244978][  T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  910.257151][  T188] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  910.302314][  T188] usb 4-1: config 0 interface 0 has no altsetting 0
[  910.432144][  T188] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  910.442353][ T5620] Bluetooth: hci0: command 0x0405 tx timeout
[  910.474142][  T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.502885][  T188] usb 4-1: Product: syz
[  910.508240][  T188] usb 4-1: Manufacturer: syz
[  910.523615][  T188] usb 4-1: SerialNumber: syz
[  910.604992][  T188] usb 4-1: config 0 descriptor??
[  910.692741][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  910.944745][T18514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  910.955567][T18514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.054399][  T188] gs_usb 4-1:0.0: Couldn't get device config: (err=-110)
[  912.061476][  T188] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  912.133554][ T5611] Bluetooth: hci4: command 0x0406 tx timeout
[  912.139686][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout
[  912.425496][  T188] usb 4-1: USB disconnect, device number 89
[  912.525508][ T5620] Bluetooth: hci0: command 0x0405 tx timeout
[  912.533621][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3537'.
[  912.546601][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  912.555279][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.696924][T18560] ./file0: Can't open blockdev
[  912.706409][T18570] binder: 18559:18570 ioctl 8904 2000000002c0 returned -22
[  912.731166][T18560] binder: 18559:18560 ioctl c00c620f 200000000300 returned -22
[  913.075648][ T5712] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  913.206723][T18579] siw: device registration error -23
[  913.851849][  T188] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  913.905516][T18581] Bluetooth: MGMT ver 1.23
[  913.921550][T18583] fuse: Bad value for 'fd'
[  913.922123][ T5712] usb 1-1: Using ep0 maxpacket: 32
[  913.931186][   T30] audit: type=1400 audit(1783151511.568:1607): avc:  denied  { mounton } for  pid=18582 comm="syz.1.3547" path="/48/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  913.980003][ T5712] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[  913.989488][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  914.013380][ T5712] usb 1-1: config 0 has no interface number 0
[  914.039026][ T5712] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  914.052401][  T188] usb 6-1: Using ep0 maxpacket: 16
[  914.076804][ T5712] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  914.093507][  T188] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  914.104794][ T5712] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  914.131011][  T188] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  914.144282][ T5712] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  914.144897][  T188] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  914.173994][ T5712] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  914.176094][  T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.203119][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout
[  914.205303][  T188] usb 6-1: config 0 descriptor??
[  914.232547][ T5712] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  914.273096][  T188] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  914.320641][ T5712] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  914.355706][ T5712] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  914.395099][ T5712] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  914.498295][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.506988][ T5712] usb 1-1: Product: syz
[  914.511294][ T5712] usb 1-1: Manufacturer: syz
[  914.517960][ T5712] usb 1-1: SerialNumber: syz
[  914.527144][ T5712] usb 1-1: config 0 descriptor??
[  914.531024][T18593] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3551'.
[  914.533501][T18563] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  914.620048][T18597] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3549'.
[  915.059218][ T5620] Bluetooth: hci0: command 0x0405 tx timeout
[  915.155444][ T5712] usb 1-1: can only deal with bulk endpoints; endpoint 2 is not bulk.
[  915.164067][ T5712] usb 1-1: couldn't find two input bulk endpoints. Bailing out.
[  915.421963][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  915.434436][ T5712] usb 1-1: USB disconnect, device number 70
[  915.486647][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  915.780842][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3552'.
[  915.835474][T18602] bond0: (slave bond_slave_0): Releasing backup interface
[  915.851309][T18602] bond0: (slave bond_slave_1): Releasing backup interface
[  915.875290][T18602] team0: Port device team_slave_0 removed
[  915.904200][T18602] team0: Port device team_slave_1 removed
[  915.969462][T18602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  916.010882][T18602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  916.206944][T18602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  916.818828][T18602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  916.835972][T18622] binder: 18614:18622 ioctl 8904 2000000002c0 returned -22
[  916.911971][T18622] binder: 18614:18622 ioctl c00c620f 200000000300 returned -22
[  916.955435][T18615] ./file0: Can't open blockdev
[  916.987007][T18602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  917.076213][T18613] lo speed is unknown, defaulting to 1000
[  917.096738][   T30] audit: type=1400 audit(1783151514.748:1608): avc:  denied  { write } for  pid=18626 comm="syz.0.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  917.141652][   T30] audit: type=1400 audit(1783151514.788:1609): avc:  denied  { map } for  pid=18626 comm="syz.0.3558" path="/dev/sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  917.183866][   T30] audit: type=1400 audit(1783151514.788:1610): avc:  denied  { execute } for  pid=18626 comm="syz.0.3558" path="/dev/sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  917.532941][ T5712] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  917.669078][T18627] binder: 18626:18627 ioctl c0306201 2000000000c0 returned -14
[  917.713593][T18633] binder: 18626:18633 ioctl c0306201 200000000180 returned -14
[  917.753033][ T5719] usb 6-1: USB disconnect, device number 68
[  917.802777][ T5712] usb 4-1: Using ep0 maxpacket: 32
[  917.818060][ T5712] usb 4-1: config 11 has an invalid interface number: 161 but max is 0
[  917.836903][ T5712] usb 4-1: config 11 has no interface number 0
[  917.854814][ T5712] usb 4-1: config 11 interface 161 has no altsetting 0
[  917.970768][ T5712] usb 4-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  917.994620][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.039927][ T5712] usb 4-1: Product: syz
[  918.127425][ T5712] usb 4-1: Manufacturer: syz
[  918.187628][ T5712] usb 4-1: SerialNumber: syz
[  918.217394][   T30] audit: type=1326 audit(1783151515.848:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.401976][ T5719] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  918.431083][   T30] audit: type=1326 audit(1783151515.848:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.464914][   T30] audit: type=1326 audit(1783151515.868:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.507726][   T30] audit: type=1326 audit(1783151515.868:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.535252][   T30] audit: type=1326 audit(1783151515.868:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.576687][   T30] audit: type=1326 audit(1783151515.908:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  918.605630][ T5719] usb 6-1: Using ep0 maxpacket: 16
[  918.624564][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.675264][T18655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.685706][T18655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.777657][ T5719] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  918.954683][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.957031][ T5719] usb 6-1: config 0 descriptor??
[  919.002472][   T30] audit: type=1326 audit(1783151515.908:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.002688][   T30] audit: type=1326 audit(1783151515.868:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.003237][   T30] audit: type=1326 audit(1783151515.918:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.003415][   T30] audit: type=1326 audit(1783151515.918:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.003596][   T30] audit: type=1326 audit(1783151515.918:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.003833][   T30] audit: type=1326 audit(1783151515.918:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.004020][   T30] audit: type=1326 audit(1783151515.918:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.004276][   T30] audit: type=1326 audit(1783151515.928:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.004571][   T30] audit: type=1326 audit(1783151515.938:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.011108][   T30] audit: type=1326 audit(1783151515.938:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18640 comm="syz.2.3563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe19de59 code=0x7ffc0000
[  919.220929][ T5712] usblcd 4-1:11.161: USBLCD model not supported.
[  919.439991][ T5719] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  919.504527][ T5712] usb 4-1: USB disconnect, device number 90
[  919.771219][T18665] "syz.2.3570" (18665) uses obsolete ecb(arc4) skcipher
[  919.836567][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'.
[  919.851832][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'.
[  920.318245][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'.
[  921.242050][ T5712] usb 6-1: USB disconnect, device number 69
[  922.093353][T18698] binder: 18697:18698 ioctl 40109441 2000000003c0 returned -22
[  922.574130][T18698] binder: 18697:18698 ioctl c010640b 200000000240 returned -22
[  922.644072][T18698] binder_alloc: 18697: binder_alloc_buf, no vma
[  922.662474][ T5620] Bluetooth: hci4: unexpected event for opcode 0x0413
[  923.023146][T18707] siw: device registration error -23
[  923.370020][T18711] block nbd0: not configured, cannot reconfigure
[  923.625086][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'.
[  923.751357][T18721] ieee802154 phy1 wpan1: encryption failed: -22
[  924.265390][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3587'.
[  924.280154][T18725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  924.287324][T18723] netlink: 'syz.5.3587': attribute type 10 has an invalid length.
[  924.355184][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3587'.
[  924.511620][T18723] geneve2: entered promiscuous mode
[  924.534830][T18723] geneve2: entered allmulticast mode
[  924.639863][T18737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3590'.
[  925.123678][  T188] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  925.349513][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'.
[  925.482084][  T188] usb 1-1: device descriptor read/64, error -71
[  925.671897][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'.
[  925.775293][  T188] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  926.042314][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  926.071488][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  926.387875][  T188] usb 1-1: device descriptor read/64, error -71
[  926.555495][  T188] usb usb1-port1: attempt power cycle
[  926.682456][ T5620] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  926.750419][ T5620] Bluetooth: hci4: Injecting HCI hardware error event
[  926.772156][ T5620] Bluetooth: hci4: hardware error 0x00
[  926.937031][T18775] fuse: Bad value for 'group_id'
[  926.951232][T18775] fuse: Bad value for 'group_id'
[  927.053153][  T188] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  927.934473][T18791] hub 8-0:1.0: USB hub found
[  927.944124][T18791] hub 8-0:1.0: 1 port detected
[  927.987448][T18791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18791 comm=syz.3.3606
[  929.036640][ T5620] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  929.472328][  T188] usb 1-1: device not accepting address 73, error -71
[  929.682818][T18775] lo speed is unknown, defaulting to 1000
[  929.912553][T18809] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3611'.
[  930.453493][T18807] lo speed is unknown, defaulting to 1000
[  930.695150][T18815] netlink: 'syz.0.3614': attribute type 8 has an invalid length.
[  930.704592][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'.
[  930.920807][T18828] binder: 18820:18828 ioctl 40109441 2000000003c0 returned -22
[  930.974383][T18828] binder: 18820:18828 ioctl c010640b 200000000240 returned -22
[  931.252662][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  931.252698][   T30] audit: type=1400 audit(1783151528.858:1638): avc:  denied  { getopt } for  pid=18820 comm="syz.3.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  931.777085][T18838] binder: 18829:18838 ioctl 8904 2000000002c0 returned -22
[  931.968770][T18835] binder: 18829:18835 ioctl c00c620f 200000000300 returned -22
[  932.010068][T18830] ./file0: Can't open blockdev
[  932.180270][T18845] IPVS: Unknown mcast interface: vcan0
[  932.714074][T18852] netlink: 'syz.1.3623': attribute type 10 has an invalid length.
[  932.722129][T18852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3623'.
[  932.734423][T18852] A link change request failed with some changes committed already. Interface 
5
� may have been left with an inconsistent configuration, please check.
[  932.940772][T18853] overlayfs: workdir and upperdir must be separate subtrees
[  933.259196][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'.
[  933.622139][ T5712] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[  933.877911][ T5712] usb 4-1: config 0 has no interfaces?
[  933.983571][ T5712] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  934.136553][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  934.223501][  T188] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  934.257011][ T5712] usb 4-1: Product: syz
[  934.311947][ T5712] usb 4-1: Manufacturer: syz
[  934.335997][ T5712] usb 4-1: SerialNumber: syz
[  934.608387][ T5712] usb 4-1: config 0 descriptor??
[  935.161811][  T188] usb 1-1: Using ep0 maxpacket: 16
[  935.500365][  T188] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  935.526657][  T188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  935.566401][  T188] usb 1-1: config 0 has no interface number 0
[  935.594536][T18857] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.614568][  T188] usb 1-1: string descriptor 0 read error: -71
[  935.621058][  T188] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  935.651295][  T188] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  935.679518][  T188] usb 1-1: config 0 descriptor??
[  935.694588][  T188] usb 1-1: can't set config #0, error -71
[  935.715065][  T188] usb 1-1: USB disconnect, device number 75
[  936.145059][T18882] netlink: 'syz.0.3635': attribute type 2 has an invalid length.
[  936.176110][T18882] netlink: 'syz.0.3635': attribute type 8 has an invalid length.
[  936.189354][T18882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3635'.
[  936.204605][T18857] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.311039][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'.
[  936.333779][T18890] netlink: 'syz.0.3638': attribute type 10 has an invalid length.
[  936.351155][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'.
[  936.423722][T18857] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.449078][T18890] geneve2: entered promiscuous mode
[  936.464581][T18890] geneve2: entered allmulticast mode
[  936.637612][T18857] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.657994][   T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  936.871992][   T24] usb 2-1: Using ep0 maxpacket: 16
[  936.912838][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  936.956410][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  937.047271][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  937.140248][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  937.248844][   T24] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  937.319773][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.379526][   T24] usb 2-1: Product: syz
[  937.421084][   T24] usb 2-1: Manufacturer: syz
[  937.452265][   T24] usb 2-1: SerialNumber: syz
[  937.896521][   T24] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  938.024219][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  938.296316][   T24] usb 2-1: 2:1 : invalid Cluster Descriptor size
[  938.520014][T18911] netlink: 'syz.5.3644': attribute type 10 has an invalid length.
[  938.528650][T18911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3644'.
[  938.555659][T18911] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  940.089665][T12170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  940.155336][ T6887] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  940.326222][   T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  940.402171][   T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  940.484947][T12170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  941.126061][   T24] usb 1-1: device descriptor read/64, error -71
[  941.215261][T17632] usb 4-1: USB disconnect, device number 91
[  941.373138][   T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  941.522506][   T24] usb 1-1: device descriptor read/64, error -71
[  941.894326][   T24] usb usb1-port1: attempt power cycle
[  942.216247][  T805] usb 2-1: USB disconnect, device number 82
[  942.347240][   T30] audit: type=1400 audit(1783151539.998:1639): avc:  denied  { write } for  pid=18928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  942.468726][  T188] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  942.533743][   T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  942.562444][   T24] usb 1-1: device descriptor read/8, error -71
[  942.571933][   T30] audit: type=1400 audit(1783151540.218:1640): avc:  denied  { write } for  pid=18960 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  942.633645][  T188] usb 4-1: Using ep0 maxpacket: 32
[  942.667126][  T188] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  942.685557][  T188] usb 4-1: config 0 has no interface number 0
[  942.706105][  T188] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  942.729595][  T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.750110][  T188] usb 4-1: Product: syz
[  942.754781][  T188] usb 4-1: Manufacturer: syz
[  942.767865][  T188] usb 4-1: SerialNumber: syz
[  942.808995][  T188] usb 4-1: config 0 descriptor??
[  942.832950][   T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  942.872497][   T24] usb 1-1: device descriptor read/8, error -71
[  943.005104][   T24] usb usb1-port1: unable to enumerate USB device
[  943.104824][T18981] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3659'.
[  943.161914][   T30] audit: type=1400 audit(1783151540.808:1641): avc:  denied  { read } for  pid=18980 comm="syz.5.3659" path="socket:[66073]" dev="sockfs" ino=66073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  943.289624][  T188] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  943.312458][  T188] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  943.742937][T18992] netlink: 'syz.5.3661': attribute type 8 has an invalid length.
[  943.762341][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'.
[  943.800367][T18946] 9p: Could not find request transport: ��x�p�B���fd
[  943.816280][  T188] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  943.848879][  T188] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  943.870169][   T30] audit: type=1400 audit(1783151541.518:1642): avc:  denied  { write } for  pid=18971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  943.911141][  T188] usb 4-1: USB disconnect, device number 92
[  944.032565][   T30] audit: type=1400 audit(1783151541.688:1643): avc:  denied  { write } for  pid=18998 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  945.119296][T15527] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  945.468055][T15527] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  945.486408][T15527] usb 1-1: config 150 has an invalid descriptor of length 121, skipping remainder of the config
[  945.613582][T15527] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3
[  945.623314][T15527] usb 1-1: config 150 has no interface number 0
[  945.629667][T15527] usb 1-1: config 150 interface 204 has no altsetting 0
[  945.640047][T15527] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  945.649362][T15527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.657505][T15527] usb 1-1: Product: syz
[  945.657524][T15527] usb 1-1: Manufacturer: syz
[  945.657538][T15527] usb 1-1: SerialNumber: syz
[  946.068940][ T5712] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  946.222064][ T5712] usb 6-1: device descriptor read/64, error -71
[  946.633087][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3674'.
[  946.701784][ T5712] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  947.087190][ T5712] usb 6-1: device descriptor read/64, error -71
[  947.134566][T19043] netlink: 'syz.2.3675': attribute type 10 has an invalid length.
[  947.144427][T19040] 8021q: adding VLAN 0 to HW filter on device bond1
[  947.223757][ T5712] usb usb6-port1: attempt power cycle
[  947.307824][T15527] xr_serial 1-1:150.204: skipping garbage
[  947.343965][T15527] usb 1-1: USB disconnect, device number 80
[  947.532238][T16244] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  947.559155][T19062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3679'.
[  947.576301][ T5712] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  947.625122][ T5712] usb 6-1: device descriptor read/8, error -71
[  947.732562][T16244] usb 4-1: Using ep0 maxpacket: 16
[  947.780882][T16244] usb 4-1: unable to get BOS descriptor or descriptor too short
[  947.794239][T16244] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.811282][T16244] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  947.831459][T16244] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  947.851813][T16244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.863633][T16244] usb 4-1: Product: syz
[  947.868666][T16244] usb 4-1: Manufacturer: syz
[  947.874434][T16244] usb 4-1: SerialNumber: syz
[  947.902045][ T5712] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  947.913387][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3681'.
[  947.922912][ T5712] usb 6-1: device descriptor read/8, error -71
[  947.935092][   T30] audit: type=1400 audit(1783151545.588:1644): avc:  denied  { setopt } for  pid=19065 comm="syz.2.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  948.003862][T19068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  948.032018][ T5712] usb usb6-port1: unable to enumerate USB device
[  948.188403][T16244] usb 4-1: USB disconnect, device number 93
[  949.328356][   T30] audit: type=1400 audit(1783151546.978:1645): avc:  denied  { create } for  pid=19090 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  949.386483][T19093] lo speed is unknown, defaulting to 1000
[  949.395743][   T30] audit: type=1400 audit(1783151546.998:1646): avc:  denied  { read } for  pid=19090 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  949.416704][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  949.582129][   T30] audit: type=1400 audit(1783151547.088:1647): avc:  denied  { getopt } for  pid=19090 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  951.570669][   T30] audit: type=1400 audit(1783151549.218:1648): avc:  denied  { write } for  pid=19131 comm="syz.5.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  951.651871][ T5705] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  951.651949][  T805] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  951.764356][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0413
[  951.801893][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  951.818670][ T5705] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  951.847635][ T5705] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  951.857028][  T805] usb 4-1: device descriptor read/64, error -71
[  951.861462][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.913362][ T5705] usb 1-1: Product: syz
[  951.937294][ T5705] usb 1-1: Manufacturer: syz
[  951.954163][ T5705] usb 1-1: SerialNumber: syz
[  952.094635][ T5705] snd-ua101 1-1:1.1: invalid format type
[  952.100826][ T5705] snd-ua101 1-1:1.0: invalid num_altsetting
[  952.141862][  T805] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  952.225869][ T5705] usb 1-1: USB disconnect, device number 81
[  952.302009][  T805] usb 4-1: device descriptor read/64, error -71
[  952.434386][  T805] usb usb4-port1: attempt power cycle
[  952.801814][  T805] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  952.851593][  T805] usb 4-1: device descriptor read/8, error -71
[  952.853892][T19180] netlink: 'syz.0.3710': attribute type 8 has an invalid length.
[  952.882447][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'.
[  953.111791][  T805] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  953.201366][T19186] syz_tun: entered allmulticast mode
[  953.231007][  T805] usb 4-1: device descriptor read/8, error -71
[  953.395959][  T805] usb usb4-port1: unable to enumerate USB device
[  953.471568][T19186] overlayfs: failed to clone upperpath
[  953.857114][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'.
[  953.885222][T19200] 8021q: adding VLAN 0 to HW filter on device bond1
[  953.902842][T19204] fuse: Invalid rootmode
[  953.961138][T19208] netlink: 'syz.0.3719': attribute type 2 has an invalid length.
[  953.969115][T19208] netlink: 'syz.0.3719': attribute type 8 has an invalid length.
[  953.976962][T19208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3719'.
[  954.152177][  T805] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  954.538209][T19219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3726'.
[  954.623989][  T805] usb 6-1: Using ep0 maxpacket: 16
[  954.646533][  T805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  954.673133][  T805] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  954.717321][  T805] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  954.758310][  T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.809126][  T805] usb 6-1: config 0 descriptor??
[  954.836401][  T805] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  954.939631][T19245] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  954.967732][T19246] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3732'.
[  954.995074][   T30] audit: type=1400 audit(1783151552.648:1649): avc:  denied  { setattr } for  pid=19222 comm="syz.2.3724" name="NETLINK" dev="sockfs" ino=66719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  955.030844][T19235] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  955.068827][T19235] bond5: (slave macvlan2): making interface the new active one
[  955.086808][T19235] bond5: (slave macvlan2): Enslaving as an active interface with an up link
[  955.095792][  T805] bond_slave_0: entered promiscuous mode
[  955.099492][T19203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.102000][  T805] bond_slave_1: entered promiscuous mode
[  955.816778][ T5620] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  955.830688][ T5620] Bluetooth: hci3: Injecting HCI hardware error event
[  955.844086][ T5611] Bluetooth: hci3: hardware error 0x00
[  955.935471][T19203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.831977][ T5705] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  956.992513][ T5705] usb 4-1: Using ep0 maxpacket: 8
[  957.007121][ T5705] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  957.025841][ T5705] usb 4-1: config 0 has no interface number 0
[  957.041487][ T5705] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  957.057183][ T5705] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  957.085556][ T5705] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  957.108224][ T5705] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  957.168569][ T5705] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  957.230026][ T5705] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  957.344046][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.362371][T19260] lo speed is unknown, defaulting to 1000
[  957.365948][ T5705] usb 4-1: Product: syz
[  957.884239][ T5705] usb 4-1: Manufacturer: syz
[  957.888950][ T5705] usb 4-1: SerialNumber: syz
[  957.902914][ T5705] usb 4-1: config 0 descriptor??
[  957.962015][ T5611] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  957.980529][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.996521][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  958.029562][T16244] usb 6-1: USB disconnect, device number 74
[  958.151050][ T5705] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  958.297235][T19279] bond1 (unregistering): Released all slaves
[  958.403628][   T24] usb 4-1: USB disconnect, device number 98
[  958.451809][T16244] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  958.467653][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  958.601854][T16244] usb 6-1: Using ep0 maxpacket: 16
[  958.612415][T16244] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  958.631812][T16244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.639897][T16244] usb 6-1: Product: syz
[  958.862095][ T5727] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[  959.083063][ T5727] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  959.159567][ T5727] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  959.269887][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  959.357222][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  959.400174][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  959.445072][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  959.469480][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  959.502214][ T5727] usb 1-1: config 168 interface 0 has no altsetting 0
[  959.518560][ T5727] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  959.536893][ T5727] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  959.561538][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  959.584976][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  959.597816][T16244] usb 6-1: Manufacturer: syz
[  959.602501][T16244] usb 6-1: SerialNumber: syz
[  959.613319][T16244] usb 6-1: config 0 descriptor??
[  959.634601][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  959.635232][T16244] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  959.683172][   T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  959.698488][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  959.743109][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  959.773527][ T5727] usb 1-1: config 168 interface 0 has no altsetting 0
[  959.790319][ T5727] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  959.811539][ T5727] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  959.840835][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  959.861855][   T24] usb 4-1: device descriptor read/64, error -71
[  959.872848][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  959.889404][  T805] usb 6-1: USB disconnect, device number 75
[  959.896192][T12172] usb 6-1: Failed to submit usb control message: -71
[  959.914338][T12172] usb 6-1: unable to send the bmi data to the device: -71
[  959.924331][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  959.941220][T12172] usb 6-1: unable to get target info from device
[  959.950578][T12172] usb 6-1: could not get target info (-71)
[  959.956987][ T5727] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  959.974944][T12172] usb 6-1: could not probe fw (-71)
[  959.985109][ T5727] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  960.004344][ T5727] usb 1-1: config 168 interface 0 has no altsetting 0
[  960.051166][ T5727] usb 1-1: string descriptor 0 read error: -22
[  960.077819][ T5727] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  960.087007][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.111988][   T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  960.124918][ T5727] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  960.221611][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3752'.
[  960.251800][   T24] usb 4-1: device descriptor read/64, error -71
[  960.377856][   T24] usb usb4-port1: attempt power cycle
[  960.405873][T16244] usb 1-1: USB disconnect, device number 82
[  960.832001][   T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  960.862449][   T24] usb 4-1: device descriptor read/8, error -71
[  960.933246][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'.
[  960.944103][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'.
[  960.944994][T19323] random: crng reseeded on system resumption
[  960.974076][T19323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.985299][T19323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.121923][   T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  961.203074][   T24] usb 4-1: device descriptor read/8, error -71
[  961.373314][   T24] usb usb4-port1: unable to enumerate USB device
[  961.427353][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'.
[  961.566925][T19339] lo: entered allmulticast mode
[  962.332850][T19335] lo: left allmulticast mode
[  962.691782][T19340] netlink: 'syz.0.3764': attribute type 10 has an invalid length.
[  962.700187][T19340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3764'.
[  962.709500][T19340] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  962.837668][T19356] binder_alloc: 19355: binder_alloc_buf, no vma
[  962.911392][T19362] netlink: 'syz.5.3772': attribute type 8 has an invalid length.
[  962.911415][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3772'.
[  962.989427][T19364] binder: 19363:19364 ioctl c0306201 200000000180 returned -14
[  964.517382][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'.
[  964.527304][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'.
[  964.582445][   T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  964.785239][   T24] usb 4-1: device descriptor read/64, error -71
[  965.062997][   T24] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  965.187057][T19415] binder: 19414:19415 ioctl 40109441 2000000003c0 returned -22
[  965.201836][   T24] usb 4-1: device descriptor read/64, error -71
[  965.213594][T19415] binder: 19414:19415 ioctl c010640b 200000000240 returned -22
[  965.279774][T19419] syzkaller0: entered promiscuous mode
[  965.289354][T19419] syzkaller0: entered allmulticast mode
[  965.322996][   T24] usb usb4-port1: attempt power cycle
[  965.371463][T19423] netlink: 'syz.2.3796': attribute type 7 has an invalid length.
[  965.382254][T19423] netlink: 'syz.2.3796': attribute type 8 has an invalid length.
[  965.447517][T19425] binder: 19424:19425 unknown command 0
[  965.454598][T19425] binder: 19424:19425 ioctl c0306201 200000000180 returned -22
[  965.518506][   T30] audit: type=1400 audit(1783151563.168:1650): avc:  denied  { accept } for  pid=19426 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  965.540870][T19429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3799'.
[  965.572227][   T30] audit: type=1400 audit(1783151563.228:1651): avc:  denied  { read } for  pid=19426 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  965.691784][   T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  965.734126][   T24] usb 4-1: device descriptor read/8, error -71
[  966.200470][   T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  966.262012][  T805] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  966.378286][T19445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  966.465955][   T24] usb 4-1: device descriptor read/8, error -71
[  966.645154][  T805] usb 1-1: unable to get BOS descriptor or descriptor too short
[  966.781147][T19446] team0: Mode changed to "loadbalance"
[  966.889728][   T24] usb usb4-port1: unable to enumerate USB device
[  967.291146][  T805] usb 1-1: not running at top speed; connect to a high speed hub
[  967.332292][  T805] usb 1-1: config 1 has an invalid interface number: 8 but max is 0
[  967.340775][  T805] usb 1-1: config 1 has no interface number 0
[  967.347008][  T805] usb 1-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  967.357880][  T805] usb 1-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1
[  967.369511][  T805] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  967.383410][  T805] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  967.394344][  T805] usb 1-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81
[  967.407427][  T805] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  967.418970][  T805] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.429874][  T805] usb 1-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  967.445014][  T805] usb 1-1: config 1 interface 8 has no altsetting 0
[  967.459084][  T805] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07
[  967.473502][  T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.487237][  T805] usb 1-1: Product: syz
[  967.492670][  T805] usb 1-1: Manufacturer: syz
[  967.497663][  T805] usb 1-1: SerialNumber: syz
[  967.503237][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'.
[  967.514363][T19457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3809'.
[  967.528708][T19457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3809'.
[  967.533725][T19439] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  967.769219][T19439] netlink: 'syz.0.3803': attribute type 1 has an invalid length.
[  967.777219][T19439] netlink: 'syz.0.3803': attribute type 2 has an invalid length.
[  968.267774][  T805] cxacru 1-1:1.8: submit of read urb for cm 0x90 failed (-90)
[  968.275881][  T805] cxacru 1-1:1.8: usbatm_usb_probe: invalid endpoint 02!
[  968.285801][  T805] cxacru 1-1:1.8: probe with driver cxacru failed with error -22
[  968.299834][  T805] usb 1-1: USB disconnect, device number 83
[  968.520085][T19479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.535391][T19479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.571854][   T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  968.731829][   T24] usb 6-1: Using ep0 maxpacket: 8
[  968.739888][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  968.750969][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  968.760792][  T805] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[  968.768601][   T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  968.778476][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.789023][   T24] usb 6-1: config 0 descriptor??
[  968.883851][T19482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3818'.
[  968.963436][  T805] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  968.974920][  T805] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  968.988875][  T805] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  968.999435][  T805] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  969.013913][  T805] usb 4-1: config 0 interface 0 has no altsetting 0
[  969.020947][   T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  969.038681][  T805] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  969.050847][  T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.062070][  T805] usb 4-1: config 0 descriptor??
[  969.190244][T19490] 9p: Bad value for 'wfdno'
[  969.216360][T19472] iowarrior 6-1:0.0: Error -90 while submitting URB
[  969.221810][T16244] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  969.234992][   T24] usb 6-1: USB disconnect, device number 76
[  969.271335][  T805] usbhid 4-1:0.0: can't add hid device: -71
[  969.297371][  T805] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  969.384577][  T805] usb 4-1: USB disconnect, device number 107
[  969.490563][T16244] usb 1-1: no configurations
[  970.152886][T16244] usb 1-1: can't read configurations, error -22
[  970.281852][T16244] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  970.645333][T19509] fuse: Bad value for 'fd'
[  971.002384][T16244] usb 1-1: no configurations
[  971.020957][T16244] usb 1-1: can't read configurations, error -22
[  971.047340][T16244] usb usb1-port1: attempt power cycle
[  971.412256][T16244] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  971.455453][T16244] usb 1-1: no configurations
[  971.460719][T16244] usb 1-1: can't read configurations, error -22
[  971.616825][T16244] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  971.663479][T16244] usb 1-1: no configurations
[  971.668260][T16244] usb 1-1: can't read configurations, error -22
[  971.676979][T16244] usb usb1-port1: unable to enumerate USB device
[  972.261985][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3832'.
[  972.611982][ T5611] Bluetooth: hci2: command 0x0406 tx timeout
[  972.618129][T19501] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  973.081296][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'.
[  973.086683][T19538] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3838'.
[  973.196848][T19544] netlink: 'syz.1.3841': attribute type 10 has an invalid length.
[  973.204863][T19544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3841'.
[  973.214186][T19544] A link change request failed with some changes committed already. Interface 
5
� may have been left with an inconsistent configuration, please check.
[  973.249318][T19501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  973.261505][T19540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.289899][T19540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.601869][T15527] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  974.064536][T19560] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3845'.
[  974.231770][T15527] usb 1-1: Using ep0 maxpacket: 32
[  974.422109][T15527] usb 1-1: config 11 has an invalid interface number: 161 but max is 0
[  974.440632][T15527] usb 1-1: config 11 has no interface number 0
[  974.451662][T15527] usb 1-1: config 11 interface 161 has no altsetting 0
[  974.511100][T15527] usb 1-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  974.595540][T15527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.620620][T15527] usb 1-1: Product: syz
[  974.641379][T15527] usb 1-1: Manufacturer: syz
[  974.661312][T15527] usb 1-1: SerialNumber: syz
[  974.681802][ T5611] Bluetooth: hci0: command 0x0405 tx timeout
[  975.381494][T19586] overlayfs: failed lookup in lower (newroot/81, name='file0', err=-40): overlapping layers
[  975.516055][T15527] usblcd 1-1:11.161: USBLCD model not supported.
[  975.536942][T15527] usb 1-1: USB disconnect, device number 88
[  975.745482][T19594] fuse: Bad value for 'fd'
[  975.786256][T19594] binder: 19593:19594 ioctl 8904 2000000002c0 returned -22
[  975.812919][T19594] binder: 19593:19594 ioctl c00c620f 200000000300 returned -22
[  975.881959][T19596] siw: device registration error -23
[  976.344819][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'.
[  976.357440][T19598] kAFS: unparsable volume name
[  978.330838][T19610] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  978.380208][T19610] bond2: (slave lo): Enslaving as an active interface with an up link
[  978.401268][T19610] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  978.443268][T19624] fuse: Bad value for 'rootmode'
[  978.634728][T19629] netlink: 'syz.3.3867': attribute type 10 has an invalid length.
[  978.642769][T19629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3867'.
[  978.654181][T19629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  979.026896][   T30] audit: type=1400 audit(1783151576.678:1652): avc:  denied  { getopt } for  pid=19636 comm="syz.2.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  979.027145][T19637] binder: 19636:19637 ioctl 4008f510 200000001700 returned -22
[  979.066923][T19634] binder: 19632:19634 ioctl 8904 2000000002c0 returned -22
[  979.089116][T19634] binder: 19632:19634 ioctl c00c620f 200000000300 returned -22
[  979.401337][ T5705] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  979.461047][T19654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3875'.
[  979.705251][ T5705] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  979.722013][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.731638][ T5705] usb 6-1: Product: syz
[  979.740855][ T5705] usb 6-1: Manufacturer: syz
[  979.745734][ T5705] usb 6-1: SerialNumber: syz
[  979.768207][ T5705] usb 6-1: config 0 descriptor??
[  979.779380][ T5705] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  979.802486][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  979.823930][ T5705] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  979.843706][ T5705] usb 6-1: media controller created
[  979.976188][T19635] dvb-usb: bulk message failed: -22 (7/0)
[  981.457981][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  981.504023][T19680] binder: 19679:19680 ioctl 8904 2000000002c0 returned -22
[  981.527703][T19680] binder: 19679:19680 ioctl c00c620f 200000000300 returned -22
[  981.529519][ T5705] DVB: Unable to find symbol mt352_attach()
[  981.574292][ T5705] DVB: Unable to find symbol nxt6000_attach()
[  981.580638][ T5705] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  981.600620][ T5705] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32
[  981.623705][ T5705] dvb-usb: schedule remote query interval to 1000 msecs.
[  981.631201][ T5705] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  981.647271][ T5705] dvb-usb: bulk message failed: -22 (7/0)
[  981.655102][ T5705] dvb-usb: bulk message failed: -22 (7/0)
[  981.885092][T19702] fuse: Unknown parameter 'fd0x0000000000000006'
[  982.033461][T19704] siw: device registration error -23
[  982.655273][ T5705] usb 6-1: USB disconnect, device number 77
[  983.460829][ T5705] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  984.414303][T19739] binder: 19731:19739 ioctl c00c620f 200000000300 returned -22
[  984.497797][T19733] ./file0: Can't open blockdev
[  984.721498][T19746] netlink: 'syz.1.3905': attribute type 10 has an invalid length.
[  987.493517][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  987.563931][T16244] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  987.933513][T19782] ./file0: Can't open blockdev
[  987.950420][T19782] binder: 19781:19782 ioctl c00c620f 200000000300 returned -22
[  987.951832][T16244] usb 6-1: Using ep0 maxpacket: 16
[  987.999842][T16244] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  988.015750][T16244] usb 6-1: config 0 has no interface number 0
[  988.024509][T16244] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  988.035923][T19787] binder: 19786:19787 ioctl 40109441 2000000003c0 returned -22
[  988.047220][T16244] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.051786][   T30] audit: type=1400 audit(1783151585.698:1653): avc:  denied  { bind } for  pid=19788 comm="syz.0.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  988.086068][T16244] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  988.097863][T19787] binder: 19786:19787 ioctl c010640b 200000000240 returned -22
[  988.114693][T16244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.126748][T16244] usb 6-1: config 0 descriptor??
[  988.946927][T16244] usbhid 6-1:0.1: can't add hid device: -71
[  988.960227][T16244] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[  988.995394][T16244] usb 6-1: USB disconnect, device number 78
[  989.042193][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3926'.
[  989.355532][T19817] 8021q: adding VLAN 0 to HW filter on device bond2
[  989.556701][T19825] fuse: Bad value for 'fd'
[  989.713220][T19833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3931'.
[  989.726921][T19833] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  989.916996][T19844] fuse: Bad value for 'fd'
[  990.179777][T19849] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3935'.
[  990.190977][T16244] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  990.371918][T16244] usb 4-1: device descriptor read/64, error -71
[  990.588133][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'.
[  990.682053][T16244] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  990.885261][T19863] siw: device registration error -23
[  991.279590][T16244] usb 4-1: device descriptor read/64, error -71
[  991.437769][T16244] usb usb4-port1: attempt power cycle
[  992.123323][T16244] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  992.153352][T16244] usb 4-1: device descriptor read/8, error -71
[  992.781839][T16244] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  992.804505][T16244] usb 4-1: device descriptor read/8, error -71
[  992.912138][T16244] usb usb4-port1: unable to enumerate USB device
[  993.022281][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'.
[  994.021805][  T805] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  994.133225][T19909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  994.150018][T19909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  994.191829][  T805] usb 1-1: Using ep0 maxpacket: 32
[  994.205488][  T805] usb 1-1: config 11 has an invalid interface number: 161 but max is 0
[  994.228916][  T805] usb 1-1: config 11 has no interface number 0
[  994.240322][  T805] usb 1-1: config 11 interface 161 has no altsetting 0
[  994.256995][  T805] usb 1-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  994.268788][  T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.297334][  T805] usb 1-1: Product: syz
[  994.299162][T19911] batman_adv: batadv0: Adding interface: dummy0
[  994.308490][  T805] usb 1-1: Manufacturer: syz
[  994.317719][  T805] usb 1-1: SerialNumber: syz
[  994.322549][T19911] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.382491][T19911] batman_adv: batadv0: Interface activated: dummy0
[  994.508529][T19917] fuse: Bad value for 'fd'
[  994.559183][T19911] batadv0: mtu less than device minimum
[  994.573086][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.586559][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.597591][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.608624][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.619660][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.630682][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.643989][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.655032][T19911] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  994.737255][  T805] usblcd 1-1:11.161: USBLCD model not supported.
[  994.764008][  T805] usb 1-1: USB disconnect, device number 89
[  994.813810][T19913] lo speed is unknown, defaulting to 1000
[  994.898650][T19920] binder: BINDER_SET_CONTEXT_MGR already set
[  994.914184][T19920] binder: 19919:19920 ioctl 4018620d 200000000040 returned -16
[  995.540375][T19930] 9p: Bad value for 'rfdno'
[  995.780017][T19938] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3963'.
[  997.530580][T19960] binder: BINDER_SET_CONTEXT_MGR already set
[  997.537694][T19960] binder: 19959:19960 ioctl 4018620d 200000000040 returned -16
[  998.670039][T19969] 9p: Bad value for 'rfdno'
[  999.257559][T19978] siw: device registration error -23
[  999.907517][   T30] audit: type=1400 audit(1783151597.558:1654): avc:  denied  { mounton } for  pid=19979 comm="syz.0.3979" path="/210/file0" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1000.179886][   T30] audit: type=1400 audit(1783151597.828:1655): avc:  denied  { mounton } for  pid=19979 comm="syz.0.3979" path="/210/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[ 1001.384833][T20001] netlink: 'syz.0.3983': attribute type 4 has an invalid length.
[ 1001.508600][T20012] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3985'.
[ 1001.534777][T16244] lo speed is unknown, defaulting to 1000
[ 1001.538387][T20001] netlink: 'syz.0.3983': attribute type 4 has an invalid length.
[ 1001.556677][T16244] syz0: Port: 1 Link DOWN
[ 1001.558202][T20013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3986'.
[ 1001.561122][   T30] audit: type=1400 audit(1783151599.208:1656): avc:  denied  { associate } for  pid=20010 comm="syz.5.3986" name="pids.current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1001.617082][ T5719] lo speed is unknown, defaulting to 1000
[ 1001.634730][ T5719] syz0: Port: 1 Link ACTIVE
[ 1001.653551][T20001] netlink: 'syz.0.3983': attribute type 21 has an invalid length.
[ 1001.666356][T20001] netlink: 'syz.0.3983': attribute type 22 has an invalid length.
[ 1001.694699][T20001] netlink: 'syz.0.3983': attribute type 23 has an invalid length.
[ 1001.742647][T20001] netlink: 'syz.0.3983': attribute type 25 has an invalid length.
[ 1001.782239][T20001] netlink: 'syz.0.3983': attribute type 26 has an invalid length.
[ 1001.792758][T20001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3983'.
[ 1002.230871][T20031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3991'.
[ 1002.235945][T20028] ip6tnl0: entered promiscuous mode
[ 1002.263407][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3992'.
[ 1003.084149][T20028] tipc: Started in network mode
[ 1003.117852][T20028] tipc: Node identity 0a010102, cluster identity 4711
[ 1003.153553][   T24] net_ratelimit: 11 callbacks suppressed
[ 1003.153567][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.200607][T20028] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1003.357450][T20042] ./file0: Can't open blockdev
[ 1003.371418][T20050] fuse: Bad value for 'fd'
[ 1003.431215][T20053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3999'.
[ 1003.487521][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.505971][T20053] loop5: detected capacity change from 0 to 7
[ 1003.523145][T20053] buffer_io_error: 10 callbacks suppressed
[ 1003.523157][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1003.815126][T20038] ./file0: Can't open blockdev
[ 1003.898372][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1003.913870][T20066] x_tables: duplicate underflow at hook 3
[ 1003.920465][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1003.979155][T12973] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.010055][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.039375][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.063131][T12973] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.089602][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.105050][T20053] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.122282][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.122551][T12973] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1004.163029][T20053] ldm_validate_partition_table(): Disk read failed.
[ 1004.516031][T20053] Dev loop5: unable to read RDB block 0
[ 1004.532306][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.557695][T20053]  loop5: unable to read partition table
[ 1004.564040][T20053] loop5: partition table beyond EOD, truncated
[ 1004.576847][T20053] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[ 1004.885313][T20085] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4008'.
[ 1005.565977][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.223835][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.693483][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.857084][T20106] ./file0: Can't open blockdev
[ 1006.995213][T20125] netlink: 'syz.3.4019': attribute type 10 has an invalid length.
[ 1007.070427][T20125] 8021q: adding VLAN 0 to HW filter on device team0
[ 1007.098088][T20127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1007.110931][T20125] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1007.221763][ T5719] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1007.541287][ T5719] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1007.586816][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.661498][ T5719] usb 1-1: Product: syz
[ 1007.666452][ T5719] usb 1-1: Manufacturer: syz
[ 1007.676023][ T5719] usb 1-1: SerialNumber: syz
[ 1007.690612][ T5719] usb 1-1: config 0 descriptor??
[ 1007.731428][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1007.928627][T20151] binder: 20150:20151 ioctl 40109441 2000000003c0 returned -22
[ 1008.021408][T20151] binder: 20150:20151 ioctl c010640b 200000000240 returned -22
[ 1008.107482][T20159] netlink: 'syz.1.4031': attribute type 1 has an invalid length.
[ 1008.123485][T20152] ./file0: Can't open blockdev
[ 1008.207927][T20159] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1008.619742][T20175] netlink: 'syz.3.4035': attribute type 8 has an invalid length.
[ 1008.627782][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'.
[ 1008.767411][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1008.962015][ T5719] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1009.180972][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1009.226290][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.238509][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1009.254308][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.270214][ T5719] usb 4-1: string descriptor 0 read error: -22
[ 1009.277541][ T5719] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1009.287879][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.305993][ T5719] usb 4-1: selecting invalid altsetting 1
[ 1009.314011][ T5719] usb 4-1: unit 3 not found!
[ 1009.766662][T20209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1009.984149][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.638540][ T5727] usb 1-1: USB disconnect, device number 90
[ 1010.666960][T20181] syzkaller0: entered promiscuous mode
[ 1010.717515][T20181] syzkaller0: entered allmulticast mode
[ 1010.735923][T20238] 9p: Bad value for 'wfdno'
[ 1010.744892][T20239] netlink: 'syz.2.4048': attribute type 3 has an invalid length.
[ 1010.779599][T20181] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1010.965147][T15527] tipc: Node number set to 2221021048
[ 1010.986582][T20209] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.550656][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.566909][ T5719] usb 4-1: unit 0 not found!
[ 1011.681472][ T5719] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1011.825799][T20181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.844258][T20181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.894037][T20179] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.975703][T20179] tipc: Disabling bearer <eth:syzkaller0>
[ 1012.016156][T20264] bridge0: port 1(bond0) entered blocking state
[ 1012.025935][T20264] bridge0: port 1(bond0) entered disabled state
[ 1012.039088][   T24] usb 4-1: USB disconnect, device number 112
[ 1012.091388][T20264] bond0: entered allmulticast mode
[ 1012.130056][T20264] bond0: entered promiscuous mode
[ 1012.245708][T20279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'.
[ 1012.260212][T20279] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1012.284810][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.586723][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.602577][T20274] ./file0: Can't open blockdev
[ 1013.725394][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.452729][ T5740] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1014.836442][ T5740] usb 6-1: device descriptor read/64, error -71
[ 1014.847269][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.895259][T20320] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4078'.
[ 1014.972005][T20325] bridge0: port 1(bond0) entered blocking state
[ 1014.989234][T20325] bridge0: port 1(bond0) entered disabled state
[ 1014.996537][T20325] bond0: entered allmulticast mode
[ 1015.003067][T20325] bond_slave_0: entered allmulticast mode
[ 1015.008820][T20325] bond_slave_1: entered allmulticast mode
[ 1015.014638][T20325] team0: entered allmulticast mode
[ 1015.019766][T20325] team_slave_0: entered allmulticast mode
[ 1015.029543][T20325] team_slave_1: entered allmulticast mode
[ 1015.190243][ T5740] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1015.194266][T20325] bond0: entered promiscuous mode
[ 1015.203958][T20325] bond_slave_0: entered promiscuous mode
[ 1015.213164][T20325] bond_slave_1: entered promiscuous mode
[ 1015.221502][T20325] team0: entered promiscuous mode
[ 1015.232615][T20325] team_slave_0: entered promiscuous mode
[ 1015.240658][T20325] team_slave_1: entered promiscuous mode
[ 1015.334470][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.366131][ T5740] usb 6-1: device descriptor read/64, error -71
[ 1015.428913][T20334] loop2: detected capacity change from 0 to 7
[ 1015.455471][T20334] Dev loop2: unable to read RDB block 7
[ 1015.464433][T20334]  loop2: unable to read partition table
[ 1015.473710][T20334] loop2: partition table beyond EOD, truncated
[ 1015.480219][T20334] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1015.492797][T20339] Dev loop2: unable to read RDB block 7
[ 1015.505063][ T5740] usb usb6-port1: attempt power cycle
[ 1015.513526][T20339]  loop2: unable to read partition table
[ 1015.648546][T20339] loop2: partition table beyond EOD, truncated
[ 1015.888211][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.957506][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'.
[ 1015.986693][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'.
[ 1016.003401][ T5740] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1016.042217][ T5740] usb 6-1: device descriptor read/8, error -71
[ 1016.363516][ T5740] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1016.392606][ T5740] usb 6-1: device descriptor read/8, error -71
[ 1016.933012][ T5740] usb usb6-port1: unable to enumerate USB device
[ 1017.025804][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.330471][T20369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4095'.
[ 1017.572609][T20297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1017.605290][T20297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1017.609377][T20371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1017.643854][T20371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1017.795654][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'.
[ 1017.913619][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'.
[ 1018.112739][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.135073][T20393] xt_nat: multiple ranges no longer supported
[ 1018.141320][T20394] xt_nat: multiple ranges no longer supported
[ 1018.183841][   T30] audit: type=1326 audit(1783151615.838:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.217925][   T30] audit: type=1326 audit(1783151615.838:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.254093][   T30] audit: type=1326 audit(1783151615.838:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.297066][   T30] audit: type=1326 audit(1783151615.838:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.328617][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'.
[ 1018.341216][   T30] audit: type=1326 audit(1783151615.838:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.372275][  T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.396735][T20400] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1018.449459][   T30] audit: type=1326 audit(1783151615.838:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.476882][   T30] audit: type=1326 audit(1783151615.868:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.552809][   T30] audit: type=1326 audit(1783151615.868:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.590997][   T30] audit: type=1326 audit(1783151615.938:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94e19de59 code=0x7ffc0000
[ 1018.620877][   T30] audit: type=1326 audit(1783151615.938:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.0.4105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb94e19dbc2 code=0x7ffc0000
[ 1018.735169][  T805] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1018.783311][T20412] binder: 20411:20412 ioctl 4018620d 0 returned -22
[ 1018.820187][T20414] bridge0: port 1(bond0) entered blocking state
[ 1018.827243][T20414] bridge0: port 1(bond0) entered disabled state
[ 1018.835253][T20414] bond0: entered allmulticast mode
[ 1018.841187][T20414] bond_slave_0: entered allmulticast mode
[ 1018.861903][T20414] bond_slave_1: entered allmulticast mode
[ 1018.904048][  T805] usb 1-1: Using ep0 maxpacket: 16
[ 1018.911282][  T805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1018.924220][  T805] usb 1-1: config 0 has no interface number 0
[ 1018.936536][T20414] bond0: entered promiscuous mode
[ 1018.942074][  T805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1018.960892][T20418] binder: 20411:20418 ioctl 8904 2000000002c0 returned -22
[ 1018.978322][T20414] bond_slave_0: entered promiscuous mode
[ 1018.989872][  T805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1019.008108][T20418] binder: 20411:20418 ioctl c00c620f 200000000300 returned -22
[ 1019.019842][T20414] bond_slave_1: entered promiscuous mode
[ 1019.024047][T20412] ./file0: Can't open blockdev
[ 1019.039314][  T805] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1019.060360][  T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.093533][  T805] usb 1-1: config 0 descriptor??
[ 1019.162969][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1019.375513][  T805] usbhid 1-1:0.1: can't add hid device: -71
[ 1019.393721][  T805] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[ 1019.537043][  T805] usb 1-1: USB disconnect, device number 91
[ 1020.248108][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.325228][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.744331][  T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.805526][T20451] netlink: 'syz.3.4120': attribute type 2 has an invalid length.
[ 1021.813745][T20451] netlink: 'syz.3.4120': attribute type 8 has an invalid length.
[ 1021.822074][T20451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4120'.
[ 1022.440376][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.991600][T20459] ./file0: Can't open blockdev
[ 1023.062423][ T5740] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1023.303645][ T5740] usb 4-1: Using ep0 maxpacket: 8
[ 1023.332901][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.485566][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.793688][ T5740] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[ 1023.821755][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.840603][ T5740] usb 4-1: Product: syz
[ 1023.845600][ T6887] lo: left allmulticast mode
[ 1023.853298][ T5740] usb 4-1: Manufacturer: syz
[ 1023.874229][ T5740] usb 4-1: SerialNumber: syz
[ 1023.985961][T20476] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1023.993018][T20476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1024.041901][T20476] vhci_hcd vhci_hcd.0: Device attached
[ 1024.119163][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.144555][ T5740] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1024.153332][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.157057][ T5740] usb 4-1: MIDIStreaming interface descriptor not found
[ 1024.230840][T20486] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4131'.
[ 1024.382644][ T5705] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1024.442404][T20477] vhci_hcd: connection closed
[ 1024.483919][   T57] vhci_hcd vhci_hcd.2: stop threads
[ 1024.525827][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.539181][   T57] vhci_hcd vhci_hcd.2: release socket
[ 1024.559122][   T57] vhci_hcd vhci_hcd.2: disconnect device
[ 1024.645085][ T6887] bond1 (unregistering): (slave erspan1): Releasing active interface
[ 1024.661320][ T5740] usb 4-1: USB disconnect, device number 113
[ 1024.762274][  T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.821293][T20493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.832709][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.095441][ T6887] team0: Port device bridge2 removed
[ 1025.147001][ T6887] team0: Port device bridge3 removed
[ 1025.224099][ T6887] team0: Port device bridge6 removed
[ 1025.234064][T20497] 9p: Bad value for 'wfdno'
[ 1025.246082][ T6887] team0: Port device bridge7 removed
[ 1025.265029][ T6887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1025.397608][ T6887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1025.572450][T20490] net_ratelimit: 3 callbacks suppressed
[ 1025.572464][T20490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.588615][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.601511][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.642360][ T6887] bond0 (unregistering): (slave vlan2): Releasing backup interface
[ 1025.648247][T20504] vivid-001: disconnect
[ 1025.677820][ T6887] veth0_to_bond: left promiscuous mode
[ 1025.687332][ T6887] bond0 (unregistering): Released all slaves
[ 1025.698033][T20503] vivid-001: reconnect
[ 1025.704345][ T6887] bond1 (unregistering): Released all slaves
[ 1025.720215][ T6887] bond2 (unregistering): Released all slaves
[ 1025.734476][ T6887] bond3 (unregistering): Released all slaves
[ 1025.746691][ T6887] bond4 (unregistering): Released all slaves
[ 1025.762683][ T6887] bond5 (unregistering): Released all slaves
[ 1025.785515][ T6887] bond6 (unregistering): Released all slaves
[ 1025.808866][ T6887] bond7 (unregistering): Released all slaves
[ 1026.602748][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.962408][T20516] lo speed is unknown, defaulting to 1000
[ 1027.082406][ T5740] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1027.111528][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.140934][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1027.211812][   T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1027.248360][ T5740] usb 6-1: Using ep0 maxpacket: 16
[ 1027.256009][ T5740] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1027.267208][ T5740] usb 6-1: config 0 has no interface number 0
[ 1027.273946][ T5740] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.292312][ T5740] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.302540][ T5740] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1027.319518][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.328017][ T6887] hsr_slave_0: left promiscuous mode
[ 1027.339271][ T6887] hsr_slave_1: left promiscuous mode
[ 1027.350426][ T5740] usb 6-1: config 0 descriptor??
[ 1027.356210][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1027.372695][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1027.375131][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1027.397462][ T6887] veth0_macvtap: left promiscuous mode
[ 1027.402501][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 247, changing to 7
[ 1027.403572][ T6887] veth1_vlan: left promiscuous mode
[ 1027.421251][ T6887] veth0_vlan: left promiscuous mode
[ 1027.437859][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 33826, setting to 1024
[ 1027.462272][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1027.471792][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.487941][   T24] usb 4-1: Product: syz
[ 1027.494731][   T24] usb 4-1: Manufacturer: syz
[ 1027.499435][   T24] usb 4-1: SerialNumber: syz
[ 1027.516073][   T24] usb 4-1: config 0 descriptor??
[ 1027.528948][   T24] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress a0
[ 1027.659211][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.688499][ T5740] usbhid 6-1:0.1: can't add hid device: -71
[ 1027.694581][ T5740] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[ 1027.717014][ T5740] usb 6-1: USB disconnect, device number 83
[ 1027.802577][  T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.829796][ T6887] team0 (unregistering): Port device team_slave_1 removed
[ 1027.849921][ T6887] team0 (unregistering): Port device team_slave_0 removed
[ 1028.526346][T20547] 9p: Bad value for 'rfdno'
[ 1028.646092][T20552] loop2: detected capacity change from 0 to 7
[ 1028.719432][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.735114][T20552] Dev loop2: unable to read RDB block 7
[ 1028.813279][T20552]  loop2: unable to read partition table
[ 1028.819385][T20552] loop2: partition table beyond EOD, truncated
[ 1028.829421][T20552] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1028.855332][ T6887] IPVS: stop unused estimator thread 0...
[ 1028.909780][T20560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4159'.
[ 1028.942646][T20556] Dev loop2: unable to read RDB block 7
[ 1028.966171][T20556]  loop2: unable to read partition table
[ 1028.972291][T20556] loop2: partition table beyond EOD, truncated
[ 1029.497540][T20569] bridge0: port 1(bond0) entered blocking state
[ 1029.504392][T20569] bridge0: port 1(bond0) entered disabled state
[ 1029.510896][T20569] bond0: entered allmulticast mode
[ 1029.518839][T20569] bond0: entered promiscuous mode
[ 1029.553988][ T5705] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1029.560846][   T11] IPVS: starting estimator thread 0...
[ 1029.693495][T20572] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1029.729922][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1029.925207][   T24] usb 4-1: USB disconnect, device number 114
[ 1030.852561][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.860766][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.034916][T20594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.095036][T20594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.125601][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'.
[ 1031.134709][T20601] netlink: 'syz.3.4171': attribute type 10 has an invalid length.
[ 1031.137703][T20594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.167258][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'.
[ 1031.225772][T20594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.243853][T20601] geneve2: entered promiscuous mode
[ 1031.259379][T20601] geneve2: entered allmulticast mode
[ 1031.267301][T20594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.811788][ T5712] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1031.885737][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1032.106679][ T5712] usb 1-1: Using ep0 maxpacket: 16
[ 1032.116114][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1032.128886][ T5712] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.0f
[ 1032.138251][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.149213][ T5712] usb 1-1: config 0 descriptor??
[ 1032.605155][ T5712] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[ 1032.861998][ T5705] usb 4-1: new full-speed USB device number 115 using dummy_hcd
[ 1032.932869][T20646] netlink: 'syz.5.4186': attribute type 2 has an invalid length.
[ 1032.944061][T20646] netlink: 'syz.5.4186': attribute type 8 has an invalid length.
[ 1032.952350][T20646] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4186'.
[ 1033.002850][ T5705] usb 4-1: device descriptor read/64, error -71
[ 1033.060348][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.068528][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.150758][T20649] lo speed is unknown, defaulting to 1000
[ 1033.216188][T20650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4185'.
[ 1033.225335][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'.
[ 1033.291807][ T5705] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[ 1034.094441][ T5705] usb 4-1: device descriptor read/64, error -71
[ 1034.283872][T16244] usb 1-1: USB disconnect, device number 92
[ 1034.290122][ T5705] usb usb4-port1: attempt power cycle
[ 1034.482387][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'.
[ 1034.491496][T20670] netlink: 'syz.0.4194': attribute type 10 has an invalid length.
[ 1034.500033][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'.
[ 1034.565299][T20673] fuse: Unknown parameter 'rootN�('
[ 1034.617088][T20670] geneve2: entered promiscuous mode
[ 1034.630210][T20670] geneve2: entered allmulticast mode
[ 1034.651876][ T5705] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[ 1034.692295][ T5705] usb 4-1: device descriptor read/8, error -71
[ 1034.911764][T16244] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1035.049614][T20680] gfs2: error -5 reading superblock
[ 1035.325966][ T5705] usb 4-1: new full-speed USB device number 118 using dummy_hcd
[ 1035.352172][ T5705] usb 4-1: device descriptor read/8, error -71
[ 1035.391782][T16244] usb 6-1: device descriptor read/64, error -71
[ 1035.463790][ T5705] usb usb4-port1: unable to enumerate USB device
[ 1035.671510][T16244] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1035.912589][T16244] usb 6-1: device descriptor read/64, error -71
[ 1036.031980][T16244] usb usb6-port1: attempt power cycle
[ 1036.562212][ T5704] net_ratelimit: 3 callbacks suppressed
[ 1036.562233][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1037.000995][T16244] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1037.079521][T16244] usb 6-1: device descriptor read/8, error -71
[ 1037.128465][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1037.540733][T16244] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1037.784196][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.026392][T16244] usb 6-1: device descriptor read/8, error -71
[ 1038.513381][T16244] usb usb6-port1: unable to enumerate USB device
[ 1038.844269][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.997143][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1038.997165][   T30] audit: type=1400 audit(1783151636.608:1688): avc:  denied  { setopt } for  pid=20714 comm="syz.5.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1039.885643][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.961183][T20735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4214'.
[ 1040.053176][T20737] loop2: detected capacity change from 0 to 7
[ 1040.087594][T20737] Dev loop2: unable to read RDB block 7
[ 1040.581868][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.597907][T20737]  loop2: unable to read partition table
[ 1040.600417][T20743] netlink: 'syz.5.4218': attribute type 10 has an invalid length.
[ 1040.617117][T20737] loop2: partition table beyond EOD, truncated
[ 1040.649346][T20737] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1040.649402][T20747] binder: 20746:20747 ioctl 40109441 2000000003c0 returned -22
[ 1040.936579][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.010446][ T5705] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1041.321936][ T5705] usb 6-1: Using ep0 maxpacket: 8
[ 1041.342719][ T5705] usb 6-1: config 1 has an invalid interface number: 59 but max is 0
[ 1041.365586][ T5705] usb 6-1: config 1 has no interface number 0
[ 1041.400565][ T5705] usb 6-1: config 1 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[ 1041.417149][ T5705] usb 6-1: config 1 interface 59 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1041.440982][T20768] comedi comedi1: pcm3724: I/O base address not correctly aligned
[ 1041.449465][ T5705] usb 6-1: config 1 interface 59 altsetting 3 has a duplicate endpoint with address 0x3, skipping
[ 1041.627657][ T5705] usb 6-1: config 1 interface 59 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64
[ 1041.644328][T20773] xt_connbytes: Forcing CT accounting to be enabled
[ 1041.646878][ T5705] usb 6-1: config 1 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[ 1042.169775][T20776] lo speed is unknown, defaulting to 1000
[ 1042.482702][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.492740][ T5705] usb 6-1: config 1 interface 59 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[ 1042.503450][ T5705] usb 6-1: config 1 interface 59 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 1042.514290][ T5705] usb 6-1: config 1 interface 59 has no altsetting 0
[ 1042.525003][ T5705] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f8, bcdDevice=38.89
[ 1042.542283][  T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.601737][T20773] Cannot find set identified by id 0 to match
[ 1042.610339][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.630035][ T5705] usb 6-1: Product: syz
[ 1042.728825][ T5705] usb 6-1: SerialNumber: syz
[ 1043.877318][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.885498][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.354695][   T30] audit: type=1400 audit(1783151642.008:1689): avc:  denied  { ioctl } for  pid=20795 comm="syz.5.4230" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1044.391784][T20797] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4230'.
[ 1044.440732][ T5705] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1044.543513][ T5705] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1044.564100][   T11] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 1044.715148][   T11] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[ 1044.737483][ T5705] usb 6-1: USB disconnect, device number 88
[ 1045.227092][   T30] audit: type=1400 audit(1783151642.368:1690): avc:  denied  { firmware_load } for  pid=11 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1045.284787][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.329540][   T30] audit: type=1400 audit(1783151642.978:1691): avc:  denied  { mount } for  pid=20806 comm="syz.1.4235" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1045.384502][   T11] ==================================================================
[ 1045.392593][   T11] BUG: KASAN: slab-use-after-free in kernfs_root+0x29a/0x2a0
[ 1045.399972][   T11] Read of size 8 at addr ffff888076f5e7b0 by task kworker/0:1/11
[ 1045.407661][   T11] 
[ 1045.409976][   T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1045.409993][   T11] Tainted: [L]=SOFTLOCKUP
[ 1045.409997][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1045.410005][   T11] Workqueue: events request_firmware_work_func
[ 1045.410027][   T11] Call Trace:
[ 1045.410031][   T11]  <TASK>
[ 1045.410037][   T11]  dump_stack_lvl+0x100/0x190
[ 1045.410051][   T11]  print_report+0x13d/0x4b0
[ 1045.410068][   T11]  ? __virt_addr_valid+0x239/0x430
[ 1045.410081][   T11]  ? kernfs_root+0x29a/0x2a0
[ 1045.410096][   T11]  kasan_report+0xdf/0x1c0
[ 1045.410109][   T11]  ? kernfs_root+0x29a/0x2a0
[ 1045.410125][   T11]  kernfs_root+0x29a/0x2a0
[ 1045.410141][   T11]  kernfs_add_one+0x57d/0xaa0
[ 1045.410152][   T11]  kernfs_create_dir_ns+0x157/0x2b0
[ 1045.410165][   T11]  sysfs_create_dir_ns+0x13a/0x2b0
[ 1045.410180][   T11]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1045.410195][   T11]  ? find_held_lock+0x2b/0x80
[ 1045.410210][   T11]  ? kobject_add_internal+0x25f/0x930
[ 1045.410223][   T11]  ? kobject_add_internal+0x25f/0x930
[ 1045.410235][   T11]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1045.410249][   T11]  kobject_add_internal+0x2c8/0x930
[ 1045.410262][   T11]  kobject_add+0x16a/0x1e0
[ 1045.410273][   T11]  ? __pfx_kobject_add+0x10/0x10
[ 1045.410284][   T11]  ? __kasan_kmalloc+0xaa/0xb0
[ 1045.410294][   T11]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[ 1045.410310][   T11]  ? get_device_parent+0x29a/0x4c0
[ 1045.410322][   T11]  get_device_parent+0x382/0x4c0
[ 1045.410334][   T11]  device_add+0x1ad/0x1970
[ 1045.410347][   T11]  ? __pfx_device_add+0x10/0x10
[ 1045.410359][   T11]  ? __init_waitqueue_head+0xca/0x150
[ 1045.410379][   T11]  ? device_initialize+0x3cd/0x550
[ 1045.410396][   T11]  firmware_fallback_sysfs+0x2e2/0xc20
[ 1045.410415][   T11]  _request_firmware+0xfd7/0x13c0
[ 1045.410432][   T11]  ? __pfx__request_firmware+0x10/0x10
[ 1045.410449][   T11]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1045.410464][   T11]  request_firmware_work_func+0xee/0x440
[ 1045.410481][   T11]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1045.410499][   T11]  ? rcu_is_watching+0x12/0xc0
[ 1045.410515][   T11]  process_one_work+0xa23/0x1940
[ 1045.410528][   T11]  ? __pfx_process_one_work+0x10/0x10
[ 1045.410540][   T11]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1045.410557][   T11]  worker_thread+0x5ef/0xe50
[ 1045.410569][   T11]  ? kthread+0x13a/0x450
[ 1045.410585][   T11]  ? __pfx_worker_thread+0x10/0x10
[ 1045.410594][   T11]  kthread+0x370/0x450
[ 1045.410609][   T11]  ? __pfx_kthread+0x10/0x10
[ 1045.410630][   T11]  ret_from_fork+0x72b/0xd50
[ 1045.410650][   T11]  ? __pfx_ret_from_fork+0x10/0x10
[ 1045.410664][   T11]  ? __switch_to+0x800/0x10f0
[ 1045.410681][   T11]  ? __pfx_kthread+0x10/0x10
[ 1045.410697][   T11]  ret_from_fork_asm+0x1a/0x30
[ 1045.410715][   T11]  </TASK>
[ 1045.410719][   T11] 
[ 1045.681245][   T11] Allocated by task 11:
[ 1045.685377][   T11]  kasan_save_stack+0x30/0x50
[ 1045.690031][   T11]  kasan_save_track+0x14/0x30
[ 1045.694680][   T11]  __kasan_slab_alloc+0x89/0x90
[ 1045.699506][   T11]  kmem_cache_alloc_noprof+0x26b/0x6a0
[ 1045.704947][   T11]  __kernfs_new_node+0xd2/0xa10
[ 1045.709768][   T11]  kernfs_create_dir_ns+0xa6/0x2b0
[ 1045.714847][   T11]  sysfs_create_dir_ns+0x13a/0x2b0
[ 1045.719946][   T11]  kobject_add_internal+0x2c8/0x930
[ 1045.725128][   T11]  kobject_add+0x16a/0x1e0
[ 1045.729515][   T11]  get_device_parent+0x382/0x4c0
[ 1045.734430][   T11]  device_add+0x1ad/0x1970
[ 1045.738831][   T11]  firmware_fallback_sysfs+0x2e2/0xc20
[ 1045.744299][   T11]  _request_firmware+0xfd7/0x13c0
[ 1045.749316][   T11]  request_firmware_work_func+0xee/0x440
[ 1045.754930][   T11]  process_one_work+0xa23/0x1940
[ 1045.759842][   T11]  worker_thread+0x5ef/0xe50
[ 1045.764417][   T11]  kthread+0x370/0x450
[ 1045.768485][   T11]  ret_from_fork+0x72b/0xd50
[ 1045.773060][   T11]  ret_from_fork_asm+0x1a/0x30
[ 1045.777805][   T11] 
[ 1045.780121][   T11] Freed by task 15:
[ 1045.783895][   T11]  kasan_save_stack+0x30/0x50
[ 1045.788558][   T11]  kasan_save_track+0x14/0x30
[ 1045.793216][   T11]  kasan_save_free_info+0x3b/0x70
[ 1045.798224][   T11]  __kasan_slab_free+0x5f/0x80
[ 1045.802968][   T11]  kmem_cache_free+0x127/0x6b0
[ 1045.807715][   T11]  rcu_core+0x5a2/0x10d0
[ 1045.811935][   T11]  handle_softirqs+0x1ea/0x9b0
[ 1045.816671][   T11]  run_ksoftirqd+0x38/0x60
[ 1045.821057][   T11]  smpboot_thread_fn+0x3d3/0xaa0
[ 1045.825967][   T11]  kthread+0x370/0x450
[ 1045.830019][   T11]  ret_from_fork+0x72b/0xd50
[ 1045.834588][   T11]  ret_from_fork_asm+0x1a/0x30
[ 1045.839339][   T11] 
[ 1045.841638][   T11] Last potentially related work creation:
[ 1045.847330][   T11]  kasan_save_stack+0x30/0x50
[ 1045.851992][   T11]  kasan_record_aux_stack+0xa7/0xc0
[ 1045.857175][   T11]  __call_rcu_common.constprop.0+0xa5/0x9b0
[ 1045.863040][   T11]  kernfs_put.part.0+0x3a6/0xaa0
[ 1045.867952][   T11]  __kernfs_remove+0x601/0xb80
[ 1045.872684][   T11]  kernfs_remove+0x4b/0x70
[ 1045.877078][   T11]  sysfs_remove_dir+0xc8/0x110
[ 1045.881814][   T11]  __kobject_del+0xe2/0x220
[ 1045.886286][   T11]  kobject_del+0x3f/0x60
[ 1045.890510][   T11]  device_del+0x630/0x9b0
[ 1045.894822][   T11]  usb_disconnect+0x5b5/0x9a0
[ 1045.899488][   T11]  hub_event+0x1d0c/0x4af0
[ 1045.903886][   T11]  process_one_work+0xa23/0x1940
[ 1045.908793][   T11]  worker_thread+0x5ef/0xe50
[ 1045.913351][   T11]  kthread+0x370/0x450
[ 1045.917399][   T11]  ret_from_fork+0x72b/0xd50
[ 1045.921977][   T11]  ret_from_fork_asm+0x1a/0x30
[ 1045.926805][   T11] 
[ 1045.929109][   T11] The buggy address belongs to the object at ffff888076f5e780
[ 1045.929109][   T11]  which belongs to the cache kernfs_node_cache of size 176
[ 1045.943665][   T11] The buggy address is located 48 bytes inside of
[ 1045.943665][   T11]  freed 176-byte region [ffff888076f5e780, ffff888076f5e830)
[ 1045.957358][   T11] 
[ 1045.959669][   T11] The buggy address belongs to the physical page:
[ 1045.966051][   T11] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76f5e
[ 1045.974800][   T11] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1045.981888][   T11] page_type: f5(slab)
[ 1045.985847][   T11] raw: 00fff00000000000 ffff88801d2db500 dead000000000100 dead000000000122
[ 1045.994415][   T11] raw: 0000000000000000 0000000800110011 00000000f5000000 0000000000000000
[ 1046.002989][   T11] page dumped because: kasan: bad access detected
[ 1046.009378][   T11] page_owner tracks the page as allocated
[ 1046.015077][   T11] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5605, tgid 5605 (syz-executor), ts 65957005650, free_ts 65950827147
[ 1046.035818][   T11]  post_alloc_hook+0xfd/0x120
[ 1046.040508][   T11]  get_page_from_freelist+0xf48/0x3530
[ 1046.045972][   T11]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 1046.051850][   T11]  new_slab+0xa2/0x650
[ 1046.055915][   T11]  refill_objects+0xe3/0x410
[ 1046.060582][   T11]  __pcs_replace_empty_main+0x376/0x680
[ 1046.066133][   T11]  kmem_cache_alloc_noprof+0x46e/0x6a0
[ 1046.071592][   T11]  __kernfs_new_node+0xd2/0xa10
[ 1046.076435][   T11]  kernfs_new_node+0x117/0x150
[ 1046.081172][   T11]  __kernfs_create_file+0x53/0x350
[ 1046.086259][   T11]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1046.091604][   T11]  internal_create_group+0x593/0xfb0
[ 1046.096886][   T11]  internal_create_groups+0x9d/0x150
[ 1046.102176][   T11]  device_add+0x71a/0x1970
[ 1046.106566][   T11]  netdev_register_kobject+0x1a9/0x3d0
[ 1046.112007][   T11]  register_netdevice+0x15b6/0x25a0
[ 1046.117191][   T11] page last free pid 5606 tgid 5606 stack trace:
[ 1046.123495][   T11]  __free_frozen_pages+0x79f/0x1090
[ 1046.128672][   T11]  qlist_free_all+0x47/0xf0
[ 1046.133157][   T11]  kasan_quarantine_reduce+0x1a0/0x1f0
[ 1046.138587][   T11]  __kasan_slab_alloc+0x69/0x90
[ 1046.143409][   T11]  kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1046.149279][   T11]  kmalloc_reserve+0x148/0x350
[ 1046.154035][   T11]  __alloc_skb+0x185/0x710
[ 1046.158434][   T11]  netlink_ack+0x117/0xb80
[ 1046.162839][   T11]  netlink_rcv_skb+0x333/0x420
[ 1046.167576][   T11]  netlink_unicast+0x585/0x850
[ 1046.172322][   T11]  netlink_sendmsg+0x8b0/0xda0
[ 1046.177055][   T11]  __sys_sendto+0x48b/0x4e0
[ 1046.181541][   T11]  __x64_sys_sendto+0xe0/0x1c0
[ 1046.186289][   T11]  do_syscall_64+0x115/0x870
[ 1046.190853][   T11]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.196718][   T11] 
[ 1046.199013][   T11] Memory state around the buggy address:
[ 1046.204609][   T11]  ffff888076f5e680: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1046.212732][   T11]  ffff888076f5e700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1046.220769][   T11] >ffff888076f5e780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1046.228794][   T11]                                      ^
[ 1046.234401][   T11]  ffff888076f5e800: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 1046.242454][   T11]  ffff888076f5e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1046.250483][   T11] ==================================================================
[ 1046.322810][   T11] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1046.330032][   T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1046.340790][   T11] Tainted: [L]=SOFTLOCKUP
[ 1046.345098][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1046.355134][   T11] Workqueue: events request_firmware_work_func
[ 1046.361299][   T11] Call Trace:
[ 1046.364557][   T11]  <TASK>
[ 1046.367465][   T11]  dump_stack_lvl+0x100/0x190
[ 1046.372139][   T11]  vpanic+0x552/0x970
[ 1046.376102][   T11]  ? __pfx_vpanic+0x10/0x10
[ 1046.380581][   T11]  ? kernfs_root+0x29a/0x2a0
[ 1046.385153][   T11]  panic+0xd1/0xe0
[ 1046.388850][   T11]  ? __pfx_panic+0x10/0x10
[ 1046.393242][   T11]  ? kernfs_root+0x29a/0x2a0
[ 1046.397813][   T11]  ? preempt_schedule_common+0x42/0xc0
[ 1046.403254][   T11]  ? check_panic_on_warn+0x1f/0x90
[ 1046.408368][   T11]  check_panic_on_warn.cold+0x19/0x34
[ 1046.413721][   T11]  end_report.part.0+0x3a/0x90
[ 1046.418468][   T11]  kasan_report.cold+0xe/0x18
[ 1046.423127][   T11]  ? kernfs_root+0x29a/0x2a0
[ 1046.427699][   T11]  kernfs_root+0x29a/0x2a0
[ 1046.432107][   T11]  kernfs_add_one+0x57d/0xaa0
[ 1046.436762][   T11]  kernfs_create_dir_ns+0x157/0x2b0
[ 1046.441938][   T11]  sysfs_create_dir_ns+0x13a/0x2b0
[ 1046.447029][   T11]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1046.452644][   T11]  ? find_held_lock+0x2b/0x80
[ 1046.457306][   T11]  ? kobject_add_internal+0x25f/0x930
[ 1046.462663][   T11]  ? kobject_add_internal+0x25f/0x930
[ 1046.468016][   T11]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1046.473194][   T11]  kobject_add_internal+0x2c8/0x930
[ 1046.478370][   T11]  kobject_add+0x16a/0x1e0
[ 1046.482764][   T11]  ? __pfx_kobject_add+0x10/0x10
[ 1046.487678][   T11]  ? __kasan_kmalloc+0xaa/0xb0
[ 1046.492417][   T11]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[ 1046.497951][   T11]  ? get_device_parent+0x29a/0x4c0
[ 1046.503040][   T11]  get_device_parent+0x382/0x4c0
[ 1046.507953][   T11]  device_add+0x1ad/0x1970
[ 1046.512349][   T11]  ? __pfx_device_add+0x10/0x10
[ 1046.517177][   T11]  ? __init_waitqueue_head+0xca/0x150
[ 1046.522536][   T11]  ? device_initialize+0x3cd/0x550
[ 1046.527633][   T11]  firmware_fallback_sysfs+0x2e2/0xc20
[ 1046.533080][   T11]  _request_firmware+0xfd7/0x13c0
[ 1046.538089][   T11]  ? __pfx__request_firmware+0x10/0x10
[ 1046.543531][   T11]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1046.549318][   T11]  request_firmware_work_func+0xee/0x440
[ 1046.554934][   T11]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1046.561156][   T11]  ? rcu_is_watching+0x12/0xc0
[ 1046.565903][   T11]  process_one_work+0xa23/0x1940
[ 1046.570821][   T11]  ? __pfx_process_one_work+0x10/0x10
[ 1046.576169][   T11]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1046.582393][   T11]  worker_thread+0x5ef/0xe50
[ 1046.586960][   T11]  ? kthread+0x13a/0x450
[ 1046.591183][   T11]  ? __pfx_worker_thread+0x10/0x10
[ 1046.596265][   T11]  kthread+0x370/0x450
[ 1046.600315][   T11]  ? __pfx_kthread+0x10/0x10
[ 1046.604886][   T11]  ret_from_fork+0x72b/0xd50
[ 1046.609465][   T11]  ? __pfx_ret_from_fork+0x10/0x10
[ 1046.614556][   T11]  ? __switch_to+0x800/0x10f0
[ 1046.619227][   T11]  ? __pfx_kthread+0x10/0x10
[ 1046.623800][   T11]  ret_from_fork_asm+0x1a/0x30
[ 1046.628556][   T11]  </TASK>
[ 1046.631773][   T11] Kernel Offset: disabled
[ 1046.636082][   T11] Rebooting in 86400 seconds..