last executing test programs:

18.402341148s ago: executing program 2 (id=7098):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x240)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff14)
r1 = socket$inet6(0xa, 0x3, 0x1d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)

14.572648422s ago: executing program 2 (id=7105):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x46, 0x6f, 0xfe, 0x20, 0x100d, 0x3342, 0x172e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x3, 0xa, 0x0, 0x77, 0x37, 0x38, 0x7}}]}}]}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0)
r4 = mq_open(0x0, 0x42, 0x1f0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000)
syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x20, 0x0, 0xf, "2ce46fdb45d768399e1a87af3de9ec"}, 0x0, 0x0, 0x0, 0x0})
mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r4)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000001c0)=""/4084)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"})

13.667207039s ago: executing program 1 (id=7106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
pipe(0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}})
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$P9_RGETLOCK(r9, &(0x7f0000000640)=ANY=[], 0x200002e6)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)

13.651002225s ago: executing program 0 (id=7107):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
eventfd(0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpgid(0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
listen(r5, 0x4000)
r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
r8 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ea)
rmdir(&(0x7f0000000100)='./control\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000300)=""/202, &(0x7f00000001c0)=0xca)

13.463766143s ago: executing program 3 (id=7108):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_clone(0x5040000, &(0x7f00000009c0)="4056ed7b1715268046c9225ddc83f288871bd00987972a240fa187e9cd458a63e8ac0ebb0d9f2c1acf85f3d3cfd71fced0b60337ec0078f29e005a32b8d492f2943909a6fa0a3b0054744668e9845cca707e2f195e61a3", 0x57, &(0x7f0000000340), &(0x7f0000000a40), &(0x7f0000000a80)="a3539d624cb110c23c35d54f31e682560b7d05deef777e0f20f4ccca6f5486fe234f14233cfff91d6bc5d16ca677b9f20d68ab32a8c05e08688f813e9c1a811da61ba23755a57c28b6c05eb3b48527f39def00748663f2d9d5b46d67d7c31c29b114d0b73f228c7738eecfaf41d1dba0820cb660e8d56f66add28f5726b3a62b71dd2c787fee5e110348495280f877ab30354555d8744c3b58d4e0c1eb3276b307bc9aceb03b5ba0ee58dd68f733e987088f30fafe16eee8752c998a3ef616897bbecc27d792caf6977683d829340183b1a070a69bad7faf678922b8f88670d48803f80000b513dfbe248ce22682")
prlimit64(r1, 0x9, &(0x7f0000000000)={0xfffffffffffffffe, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f00000002c0))
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000040)=0x6e, 0x40000)
bind$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
dup2(r5, r5)
recvmsg$can_raw(r5, &(0x7f0000000600)={&(0x7f0000000480)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000680)=""/130, 0x82}, {&(0x7f0000000740)=""/79, 0x4f}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/218, 0xda}], 0x5, &(0x7f0000000300)=""/9, 0x9}, 0x2041)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f00000000c0)='&\x00\x00', 0x3)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x40001)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000080)={0x2, @short={0x2, 0xffff}}, 0x66)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a010100bb00000000000002000000090002"], 0x2c}}, 0x8004)
dup(r0)

12.204330936s ago: executing program 0 (id=7109):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x0)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ee744600"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "07dcad0b964cb0e0b1d1ae4e46ee7e20"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="be50f1afddae"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6c280f39b7332df2336a5fb46ea635c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ce15908a82b9fdb3583217792507de3f"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, 0x0)
io_setup(0x3, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0x2f5b, &(0x7f0000000080)})
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(0x0, 0x1, &(0x7f0000000800)=[0x0])

12.07770847s ago: executing program 1 (id=7110):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/16], 0x50)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084)

11.732963985s ago: executing program 4 (id=7112):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0xcbc6, 0x6a9, 0xd, 0x10001, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x9)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6ec}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000880)

11.447147325s ago: executing program 4 (id=7113):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2a, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r4, 0x0, 0x0, 0x2, 0x0, 0x60)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x88, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_buf(r7, 0x0, 0x25, &(0x7f0000000140)=""/91, &(0x7f0000000040)=0x5b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)

11.247862855s ago: executing program 0 (id=7114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
close(r3)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r6, 0x11, 0x66, 0x0, &(0x7f0000000480))
mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x36, 0x0, @tid=r2})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
madvise(&(0x7f0000091000/0x1000)=nil, 0x1000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'})
socket$kcm(0x10, 0x2, 0x0)

11.22223142s ago: executing program 2 (id=7115):
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

9.802168402s ago: executing program 0 (id=7116):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000500), 0xfffffffffffffffe, 0x48203)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0x1, 0x10000000, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100"/56, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0xb8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r6], 0x188}}, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4241, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000110029bd7000fcdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="001c000000000000140035006c6f"], 0x34}}, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="31a161df84ff8b2883d2", 0xa}, {&(0x7f00000007c0)="55ed4fd173c52bae2c5afa86c5276c6fbf8e4d8877bbdd5be20f2eb4032820e05f100bba7b3af0d5d49dda224ec17260bc4a1bc3ac39ca521254ed4072f0d5da378cf7c2f0454343cb4a0a26174a5a6c17e971dba3", 0x55}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x233f9d9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff49}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbc}}], 0x60}, 0x20000800)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

9.590203359s ago: executing program 1 (id=7117):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90)
timer_settime(0x0, 0x0, 0x0, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
io_setup(0x6, &(0x7f0000000540)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}])
r7 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r8=>0x0, &(0x7f0000000480)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0})
io_uring_enter(r7, 0x3498, 0x969, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xfffe, 0x2}, 0x6)

9.196637714s ago: executing program 3 (id=7118):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0, 0x0, 0x1}, 0x18)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x301)
r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d000100"], 0x34}}, 0x0)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x9, 0x3, 0x12, "3e06ffaeef73021e90b370004000000400"})
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r8, 0x0, 0x1, 0x4}}, 0x20)
pipe(&(0x7f00000001c0)={<r9=>0xffffffffffffffff})
r10 = socket$netlink(0x10, 0x3, 0x15)
splice(r9, 0x0, r10, 0x0, 0x80000001, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r9)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r11, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1005)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000300)={0xfffffffffffffffc, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x158, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6293}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7c}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xcc1f}, {0x6, 0x11, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, <r13=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000ac00000000000000dd0c0100000001002c00000018110000d0bf55d2acbe4d15b0abac72685bda814eff3562d564acf25a71d97e48f53229941255eafd7600a591793eae964b318ee292aa763cbd15437c0dab1978ed72c6e2c8fdaada5abf9efce904359b1135e3e38f2c6c4075231204e27efaef83c6b2ba52b6c9e5ff1bbbe9dc109f79fab68e5965e6f7bba0eb8e12113e60941c4c02807523d71e62255a9ffcaf5449a4d3e8e94a1908b62cb058154d4b2eb53b1ea1ddae4dfe816643bd6a20f7616dfa96cd718dd550b0c9fc", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)

7.144050916s ago: executing program 2 (id=7119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442})
socket(0x1d, 0x2, 0x6)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6})
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4})
syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ppoll(&(0x7f0000000400)=[{r0, 0x9008}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)

7.09861217s ago: executing program 4 (id=7120):
prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x15)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x88400, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r4 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000bb0a0000000000000200000018110000", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xf2c, 0x0, 0x0, 0x41000, 0x8a887bd75b872880, '\x00', 0x0, @cgroup_sockopt=0x16, r3, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x3, 0x6e8785ab, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x5, 0xffffffff, 0x2}, {0x2, 0x5, 0x5, 0x8}, {0x1, 0x4, 0x0, 0x7}, {0x5, 0x4, 0x9, 0x5}, {0x1, 0x3, 0x6, 0xc}, {0x0, 0x1, 0x4000b, 0xb}, {0x5, 0x3, 0x5, 0x5}], 0x10, 0x9}, 0x94)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
read$FUSE(r3, &(0x7f0000008880)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x24048014)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02008788a1ba015891989673df003f04", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'})
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000000040), 0xe09)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x4, 0x10, 0x4})
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x79]}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240400c0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)

7.043264528s ago: executing program 3 (id=7121):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0)
chroot(&(0x7f0000000b80)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c00fb000c00000002000000000000dbc350fa3704bff4d11bfbe22e93170766020000000d00d14de42a3f3453de8336"], &(0x7f0000000000)=""/144, 0x26, 0x90, 0x1}, 0x28)
bind$alg(r5, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.948763734s ago: executing program 0 (id=7122):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x34c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x320, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x104, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x34c}}, 0x24040094)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet(0x2, 0xa, 0x7)
add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r7, 0x4606, &(0x7f0000000080)={0x2})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r8, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4024}, 0x0)

6.08936167s ago: executing program 3 (id=7123):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6}, 0x90)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r1, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x6)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
listen(r3, 0x1)
accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})

5.995406064s ago: executing program 4 (id=7124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000001000000077244e0190f4d59c3c1f8e78c2261fc50f345e4daa088d5b4b86e7137771b4e85401b58076242c72aff25bc507b18fa1eb38bc3079df24b73631d55ad5516d4c1413034a35a454b"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f15df336b", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
mount$binderfs(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), 0x200000, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x54}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
dup(0xffffffffffffffff)
timer_create(0x0, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r8=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
r9 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, 0x0)

5.885183468s ago: executing program 1 (id=7125):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0xd)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff})
socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20000880)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0xc005, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, 0x0, 0x92)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x2020)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[@ANYBLOB="8c52aaaaaaaa00000000000086dd61954a5b004c2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010086dd056a000086dd080088be000000031c33f59dfa00000000007b40080022eb0000000223022309020000000022c5300b6a5100000500eeb41b0800"], 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0xa}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x4003, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0xbc, 0x9, 0x1800000, 0x100000007, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2e, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x5, 0x0, 0x5, 0x96, 0x9, 0x401, 0x2, 0x0, 0x680000000000, 0x8001, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)

4.9949109s ago: executing program 4 (id=7126):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$vim2m(0x0, 0x10040, 0x2)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001d40), 0x20100, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522)
r8 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r9, &(0x7f0000006800)="10", 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
link(&(0x7f0000000080)='./file0\x00', 0x0)
lstat(&(0x7f0000001d00)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_usb_disconnect(r8)
accept4$packet(r6, &(0x7f00000001c0), &(0x7f0000000340)=0x14, 0x0)

4.004931018s ago: executing program 0 (id=7127):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x4c, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, &(0x7f0000000940)})
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

3.743427861s ago: executing program 2 (id=7128):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/16], 0x50)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084)

3.683341226s ago: executing program 1 (id=7129):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x1, r0, 0x0, 0x1000000000000003)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(0x0, 0xab)
r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000500)="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", 0x800, 0x80, 0xfffffffffffffffb}, {&(0x7f00000000c0)="b898f83a868f954e45526e8495079550ef361d76010ef9960131a10ca72766d19f04911f8f5df4028444d566a58bbcb3af29a169c35e874350aea553a100deaf9f6f63cb8d791c91cecaeaa55f38a25bbe4e81b5", 0x54, 0x5, 0x85}], 0x21a1535c43b46377)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0xff)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket(0x29, 0x4, 0x5)

2.898044483s ago: executing program 3 (id=7130):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYBLOB], 0x50)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084)

2.666505544s ago: executing program 4 (id=7131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x120)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r3}, 0x8)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
r4 = socket$inet(0x2, 0x3, 0x5)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_elf64(r4, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "3eff9b74"}, 0x44)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x0)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000010140)=0x9)

131.333193ms ago: executing program 2 (id=7132):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095e0ff0000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='qdisc_reset\x00', r0, 0x0, 0x4}, 0x18)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x80000000)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x8)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3})
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc)
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gre0\x00', 0x314})
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1081, 0xffffffff, 0xeb6})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={<r9=>0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={r9}, &(0x7f0000000340)=0x8)
r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000380)=ANY=[@ANYRESHEX=r8, @ANYRES32=r1, @ANYRESDEC=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

10.653361ms ago: executing program 1 (id=7133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
pipe(0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}})
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004)
pipe(&(0x7f00000000c0))

0s ago: executing program 3 (id=7134):
r0 = socket$isdn(0x22, 0x3, 0x4)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c00000400458000020180c701dc8094010980900138801400af00fe8000000000000000", @ANYBLOB="2a004f800c00d7"], 0x218}, 0x1, 0x0, 0x0, 0x8040}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
sendfile(r1, r1, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000015)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x901, 0x0)
writev(r6, &(0x7f0000000b40)=[{&(0x7f00000006c0)='\'{', 0x2}, {0x0}], 0x2)
syz_clone(0x4100080, 0x0, 0x17, 0x0, 0x0, 0x0)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

934.251114][ T5892] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1934.333860][T29452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5793'.
[ 1934.451048][ T5972] usb 1-1: USB disconnect, device number 64
[ 1934.701412][T29462] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1934.718879][T29462] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1934.740761][T29462] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1934.769725][T29462] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1935.056892][ T5892] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1935.405632][ T5892] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1935.453052][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1935.487808][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1935.515188][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1935.569635][ T5892] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1935.606979][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1935.623726][ T5892] usb 1-1: Product: syz
[ 1935.628018][ T5892] usb 1-1: Manufacturer: syz
[ 1935.639171][ T5892] cdc_wdm 1-1:1.0: skipping garbage
[ 1935.644627][ T5892] cdc_wdm 1-1:1.0: skipping garbage
[ 1935.662083][ T5892] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1935.668053][ T5892] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1936.362802][T29501] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 1936.715799][ T5892] usb 1-1: USB disconnect, device number 65
[ 1936.962545][   T30] audit: type=1400 audit(1764849345.683:7966): avc:  denied  { write } for  pid=29506 comm="syz.4.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1937.339803][   T30] audit: type=1326 audit(1764849346.029:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29517 comm="syz.0.5814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x0
[ 1937.863333][   T30] audit: type=1400 audit(1764849346.516:7968): avc:  denied  { name_bind } for  pid=29533 comm="syz.3.5818" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 1940.508222][T29578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1940.915323][   T30] audit: type=1326 audit(1764849349.378:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29592 comm="syz.2.5838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731b38f749 code=0x0
[ 1941.436302][   T30] audit: type=1400 audit(1764849349.874:7970): avc:  denied  { cmd } for  pid=29605 comm="syz.4.5843" path="socket:[94174]" dev="sockfs" ino=94174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1942.674721][   T30] audit: type=1400 audit(1764849351.024:7971): avc:  denied  { append } for  pid=29646 comm="syz.4.5858" name="file0" dev="tmpfs" ino=7022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1942.781950][T21042] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1943.049148][T21042] usb 4-1: Using ep0 maxpacket: 8
[ 1943.079550][T21042] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1943.384125][T21042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1943.409207][T21042] usb 4-1: config 0 has no interface number 0
[ 1943.432708][T21042] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1943.463627][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.586162][T21042] usb 4-1: Product: syz
[ 1943.594951][T21042] usb 4-1: Manufacturer: syz
[ 1943.599547][T21042] usb 4-1: SerialNumber: syz
[ 1943.625664][T21042] usb 4-1: config 0 descriptor??
[ 1944.050329][T21042] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1944.057666][T21042] uvcvideo 4-1:0.31: No valid video chain found.
[ 1944.502424][T29639] xt_hashlimit: size too large, truncated to 1048576
[ 1944.598602][ T5865] usb 4-1: USB disconnect, device number 62
[ 1947.004731][ T5865] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1947.207895][ T5865] usb 2-1: Using ep0 maxpacket: 16
[ 1947.517546][ T5865] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1947.528549][ T5865] usb 2-1: config 1 has no interface number 1
[ 1947.537719][ T5865] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1947.549120][ T5865] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1947.574344][ T5865] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1947.589000][ T5865] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1947.598720][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1947.607351][ T5865] usb 2-1: Product: syz
[ 1947.608960][   T30] audit: type=1400 audit(1764849355.636:7972): avc:  denied  { getopt } for  pid=29738 comm="syz.3.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1947.631528][ T5865] usb 2-1: Manufacturer: syz
[ 1947.638700][ T5865] usb 2-1: SerialNumber: syz
[ 1948.180041][ T5865] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1949.122615][ T5865] usb 2-1: 2:1: cannot get freq at ep 0x82
[ 1949.195926][ T5865] usb 2-1: USB disconnect, device number 57
[ 1949.244742][T26629] udevd[26629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1950.041085][T29775] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1950.755012][   T30] audit: type=1800 audit(1764849358.582:7973): pid=29780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5904" name="/" dev="fuse" ino=0 res=0 errno=0
[ 1950.782236][T29791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5907'.
[ 1956.804595][T29864] overlayfs: failed to clone upperpath
[ 1957.255410][T29877] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 1960.560048][T29932] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 1960.977332][T21042] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1961.105908][ T5972] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1961.137663][T21042] usb 4-1: Using ep0 maxpacket: 16
[ 1961.195040][T21042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1961.223322][T21042] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1961.233863][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1961.265979][ T5972] usb 2-1: Using ep0 maxpacket: 32
[ 1961.337153][T21042] usb 4-1: Product: syz
[ 1961.349795][T21042] usb 4-1: Manufacturer: syz
[ 1961.360019][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1961.371520][T21042] usb 4-1: SerialNumber: syz
[ 1961.390037][T21042] usb 4-1: config 0 descriptor??
[ 1961.397118][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1961.412056][T21042] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1961.432315][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024
[ 1961.443426][T21042] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1961.462679][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1961.486863][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1961.518527][ T5972] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1961.543951][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1961.562374][ T5972] usb 2-1: Product: syz
[ 1961.570329][ T5972] usb 2-1: Manufacturer: syz
[ 1961.584346][ T5972] usb 2-1: SerialNumber: syz
[ 1961.608452][ T5972] usb 2-1: config 0 descriptor??
[ 1961.988366][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 1962.206794][T21042] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1962.278142][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.295326][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.317972][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.334809][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.352860][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.371604][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.392965][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.416195][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.438349][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.558943][T29953] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 1962.673452][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.704111][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.713699][T21042] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1962.730826][T21042] em28xx 4-1:0.0: board has no eeprom
[ 1962.736305][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.747787][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.766054][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.788102][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.808206][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.841989][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.891310][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.902129][ T5972] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 1962.930281][ T5972] input input73: Timeout waiting for response from device.
[ 1962.955411][ T5972] usb 2-1: USB disconnect, device number 58
[ 1963.292162][T29971] syz.1.5964 (29971): /proc/29969/oom_adj is deprecated, please use /proc/29969/oom_score_adj instead.
[ 1963.908785][T29934] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5)
[ 1963.971757][T21042] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1963.979609][T21042] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1963.999672][   T37] em28xx 4-1:0.0: Binding DVB extension
[ 1964.017388][T29986] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 1964.053708][T21042] usb 4-1: USB disconnect, device number 63
[ 1964.272811][T21042] em28xx 4-1:0.0: Disconnecting em28xx
[ 1964.733036][   T37] em28xx 4-1:0.0: Registering input extension
[ 1965.054496][T21042] em28xx 4-1:0.0: Closing input extension
[ 1965.196909][T21042] em28xx 4-1:0.0: Freeing device
[ 1967.331117][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1967.522670][T30034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1969.799916][T30056] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1978.837666][T30152] block device autoloading is deprecated and will be removed.
[ 1978.845384][T30152] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1978.853180][T30152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1978.861422][T30152] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1978.869199][T30152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1979.062558][   T30] audit: type=1326 audit(1764849385.064:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.097691][   T30] audit: type=1326 audit(1764849385.064:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.122135][   T30] audit: type=1326 audit(1764849385.064:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.232235][   T30] audit: type=1326 audit(1764849385.064:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.256121][   T30] audit: type=1326 audit(1764849385.064:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.442408][   T30] audit: type=1326 audit(1764849385.064:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.466490][   T30] audit: type=1326 audit(1764849385.064:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.490314][   T30] audit: type=1326 audit(1764849385.064:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1979.981184][   T30] audit: type=1326 audit(1764849385.064:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30161 comm="syz.4.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 1980.002407][T30173] syzkaller0: entered promiscuous mode
[ 1980.089086][T30173] syzkaller0: entered allmulticast mode
[ 1980.891636][T30183] tipc: Cannot configure node identity twice
[ 1981.695890][ T5892] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1981.883808][ T5892] usb 1-1: Using ep0 maxpacket: 16
[ 1981.900080][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1981.922727][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1981.961136][ T5892] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1981.987304][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1981.998839][ T5892] usb 1-1: Product: syz
[ 1982.007831][ T5892] usb 1-1: Manufacturer: syz
[ 1982.017203][ T5892] usb 1-1: SerialNumber: syz
[ 1982.046132][ T5892] usb 1-1: config 0 descriptor??
[ 1982.094623][ T5892] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1982.120547][ T5892] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1982.795240][ T5892] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1982.803303][ T5892] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1982.951210][T30228] (syz.1.6039,30228,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1982.962122][T30228] (syz.1.6039,30228,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1982.970008][T30228] (syz.1.6039,30228,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1982.979110][T30228] (syz.1.6039,30228,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1983.472640][ T5892] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1984.154711][ T5892] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1984.180852][ T5892] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1984.197310][ T5892] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1984.223497][ T5892] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1984.239885][ T5892] usb 1-1: USB disconnect, device number 66
[ 1986.101524][T21042] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1987.107182][T21042] usb 4-1: Using ep0 maxpacket: 8
[ 1987.455396][T21042] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1987.490052][T21042] usb 4-1: config 0 has no interface number 0
[ 1987.503903][T21042] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1987.549207][T21042] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1987.661301][T21042] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1987.672510][T21042] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1987.693197][T21042] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1987.702333][T21042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1988.146817][T21042] usb 4-1: config 0 descriptor??
[ 1988.234543][T21042] usb 4-1: can't set config #0, error -71
[ 1988.249812][T21042] usb 4-1: USB disconnect, device number 64
[ 1989.380854][T30296] netlink: 'syz.3.6058': attribute type 1 has an invalid length.
[ 1989.565178][T30300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6058'.
[ 1989.621780][T30296] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1990.652660][T30308] binder: transaction release 69 bad handle 1, ret = -22
[ 1990.714128][T30300] bond4: entered promiscuous mode
[ 1990.740955][T30300] bond4: entered allmulticast mode
[ 1990.929485][   T30] audit: type=1326 audit(1764849396.157:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1990.985898][   T30] audit: type=1326 audit(1764849396.186:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.024139][   T30] audit: type=1326 audit(1764849396.186:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.092823][   T30] audit: type=1326 audit(1764849396.186:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.146223][   T30] audit: type=1326 audit(1764849396.186:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.210464][   T30] audit: type=1326 audit(1764849396.186:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.253241][   T30] audit: type=1326 audit(1764849396.186:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.299373][   T30] audit: type=1326 audit(1764849396.186:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.323422][   T30] audit: type=1326 audit(1764849396.186:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.347437][   T30] audit: type=1326 audit(1764849396.186:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 1991.370831][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1991.441813][T30296] bond4 (unregistering): Released all slaves
[ 1992.074215][T30331] overlayfs: failed to clone upperpath
[ 1994.421779][T30365] netlink: 'syz.4.6079': attribute type 39 has an invalid length.
[ 1999.023117][T30417] syzkaller0: entered promiscuous mode
[ 1999.038420][T30417] syzkaller0: entered allmulticast mode
[ 1999.692763][T30431] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1999.708910][T30431] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1999.708997][T30412] orangefs_mount: mount request failed with -4
[ 1999.911357][T30441] netlink: 'syz.3.6101': attribute type 23 has an invalid length.
[ 1999.950079][T30443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'.
[ 2000.105379][T30444] netlink: 'syz.2.6103': attribute type 4 has an invalid length.
[ 2000.531261][T30454] lo speed is unknown, defaulting to 1000
[ 2000.538619][T30454] lo speed is unknown, defaulting to 1000
[ 2002.283787][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6113'.
[ 2002.293387][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 2002.293402][   T30] audit: type=1400 audit(1764849406.793:8043): avc:  denied  { setopt } for  pid=30478 comm="syz.4.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2002.343654][T30477] syz_tun (unregistering): left allmulticast mode
[ 2002.476628][T30483] /dev/nullb0: Can't lookup blockdev
[ 2002.868072][T30491] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 2004.328202][T30514] xt_socket: unknown flags 0x50
[ 2006.990773][T30540] futex_wake_op: syz.1.6129 tries to shift op by -1; fix this program
[ 2009.038042][ T5892] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2009.398034][ T5892] usb 4-1: Using ep0 maxpacket: 16
[ 2009.404884][ T5892] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[ 2009.413289][ T5892] usb 4-1: config 252 has no interface number 0
[ 2009.427182][ T5892] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2009.491899][ T5892] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2009.500962][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.535276][ T5892] usb 4-1: Product: syz
[ 2009.541796][ T5892] usb 4-1: Manufacturer: syz
[ 2009.548389][ T5892] usb 4-1: SerialNumber: syz
[ 2009.575957][T30567] syzkaller0: entered promiscuous mode
[ 2009.590239][T30567] syzkaller0: entered allmulticast mode
[ 2009.613765][ T5892] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2010.094652][T30589] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6144'.
[ 2010.724754][ T4142] usb 4-1: Failed to submit usb control message: -110
[ 2010.802013][ T4142] usb 4-1: unable to send the bmi data to the device: -110
[ 2010.811252][ T4142] usb 4-1: unable to get target info from device
[ 2010.828948][ T4142] usb 4-1: could not get target info (-110)
[ 2010.844101][ T4142] usb 4-1: could not probe fw (-110)
[ 2011.151488][T30605] x_tables: duplicate entry at hook 2
[ 2011.711427][ T5892] usb 4-1: USB disconnect, device number 65
[ 2012.896680][T30620] syzkaller0: entered promiscuous mode
[ 2012.902411][T30620] syzkaller0: entered allmulticast mode
[ 2014.456234][T30633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6157'.
[ 2014.628456][T30633] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2015.142895][   T30] audit: type=1400 audit(1764849418.401:8044): avc:  denied  { ioctl } for  pid=30634 comm="syz.4.6159" path="socket:[99379]" dev="sockfs" ino=99379 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2017.267678][T30672] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 2018.486214][T30682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6170'.
[ 2020.458326][T30699] SELinux: syz.3.6174 (30699) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 2022.058872][T30723] netlink: 'syz.1.6181': attribute type 6 has an invalid length.
[ 2025.091472][T30749] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2028.647067][ T5892] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2029.269085][T30796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6202'.
[ 2029.333166][ T5892] usb 1-1: Using ep0 maxpacket: 32
[ 2029.344909][ T5892] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2029.355337][ T5892] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2029.598443][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2029.685964][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2029.809799][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2029.851358][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[ 2029.963602][ T5892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2029.974073][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2029.987235][ T5892] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2029.996312][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2030.030082][ T5892] usb 1-1: config 0 descriptor??
[ 2030.035771][T30788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2030.442053][T30788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2030.454035][ T5892] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2030.485108][T30788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2030.660802][T30817] lo speed is unknown, defaulting to 1000
[ 2030.667267][T30817] lo speed is unknown, defaulting to 1000
[ 2030.732484][   T30] audit: type=1400 audit(1764849433.386:8045): avc:  denied  { read write } for  pid=30787 comm="syz.0.6200" name="lp0" dev="devtmpfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 2030.735780][    C0] usblp0: nonzero read bulk status received: -71
[ 2030.780028][   T30] audit: type=1400 audit(1764849433.386:8046): avc:  denied  { open } for  pid=30787 comm="syz.0.6200" path="/dev/usb/lp0" dev="devtmpfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 2030.840515][T21042] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2030.852723][T30788] usblp0: error -71 reading from printer
[ 2030.861249][    C0] usblp0: nonzero read bulk status received: -71
[ 2030.873559][   T37] usb 1-1: USB disconnect, device number 67
[ 2030.908118][   T37] usblp0: removed
[ 2031.139907][T21042] usb 4-1: Using ep0 maxpacket: 32
[ 2031.177954][T21042] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2031.256836][T21042] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2031.378222][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2031.450452][T21042] usb 4-1: Product: syz
[ 2031.477287][T21042] usb 4-1: Manufacturer: syz
[ 2031.499503][T21042] usb 4-1: SerialNumber: syz
[ 2031.590440][T21042] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 2031.621701][T21042] imon 4-1:155.0: unable to initialize intf0, err -19
[ 2031.632937][T21042] imon:imon_probe: failed to initialize context!
[ 2031.641596][T21042] imon 4-1:155.0: unable to register, err -19
[ 2031.678461][   T30] audit: type=1400 audit(1764849434.284:8047): avc:  denied  { write } for  pid=30825 comm="syz.0.6210" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2031.702025][T30827] random: crng reseeded on system resumption
[ 2031.720358][   T30] audit: type=1400 audit(1764849434.322:8048): avc:  denied  { ioctl } for  pid=30825 comm="syz.0.6210" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2031.853855][T21042] usb 4-1: USB disconnect, device number 66
[ 2031.993346][T30833] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2032.465584][   T37] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2032.636465][   T37] usb 2-1: Using ep0 maxpacket: 16
[ 2032.732075][   T37] usb 2-1: config 252 has an invalid interface number: 15 but max is 0
[ 2032.750263][   T37] usb 2-1: config 252 has no interface number 0
[ 2032.764778][   T37] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2033.027431][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2033.244695][   T37] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2033.253797][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2033.261898][   T37] usb 2-1: Product: syz
[ 2033.275426][   T37] usb 2-1: Manufacturer: syz
[ 2033.285311][   T37] usb 2-1: SerialNumber: syz
[ 2033.339943][   T37] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2034.848495][ T6930] usb 2-1: Failed to submit usb control message: -110
[ 2035.022600][ T6930] usb 2-1: unable to send the bmi data to the device: -110
[ 2035.049520][ T6930] usb 2-1: unable to get target info from device
[ 2035.056363][ T6930] usb 2-1: could not get target info (-110)
[ 2035.062346][ T6930] usb 2-1: could not probe fw (-110)
[ 2035.093284][T30872] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2035.102099][T30872] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 2035.111368][T30872] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2036.639780][   T37] usb 2-1: USB disconnect, device number 59
[ 2036.725238][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6223'.
[ 2037.306337][T30897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2037.363071][T30899] netlink: 'syz.0.6228': attribute type 1 has an invalid length.
[ 2037.379713][T30897] tipc: Resetting bearer <eth:syzkaller0>
[ 2037.420789][T30899] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2037.568361][T30909] macvlan2: entered promiscuous mode
[ 2037.573689][T30909] macvlan2: entered allmulticast mode
[ 2038.191185][T30914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2039.553457][T30930] xt_hashlimit: size too large, truncated to 1048576
[ 2042.647853][T30960] Invalid source name
[ 2042.651904][T30960] UBIFS error (pid: 30960): cannot open "./file0", error -22
[ 2043.937530][   T30] audit: type=1400 audit(1764849445.752:8049): avc:  denied  { setopt } for  pid=30973 comm="syz.4.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2050.302960][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6268'.
[ 2050.355605][T31052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6268'.
[ 2051.063324][   T30] audit: type=1326 audit(1764849452.412:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.0.6269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bcd98f749 code=0x0
[ 2053.019516][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6273'.
[ 2053.561747][T31080] batadv_slave_0: entered promiscuous mode
[ 2053.875024][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6276'.
[ 2056.035279][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6280'.
[ 2056.044156][T31107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6280'.
[ 2060.043235][   T30] audit: type=1400 audit(1764849460.812:8051): avc:  denied  { execute } for  pid=31133 comm="syz.1.6289" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2062.641527][T31177] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2062.887554][T31183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'.
[ 2063.516467][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'.
[ 2063.570400][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'.
[ 2063.716631][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'.
[ 2065.487460][T31206] lo speed is unknown, defaulting to 1000
[ 2065.494236][T31206] lo speed is unknown, defaulting to 1000
[ 2065.911849][T31208] lo speed is unknown, defaulting to 1000
[ 2065.918979][T31208] lo speed is unknown, defaulting to 1000
[ 2067.201360][T31219] Invalid source name
[ 2067.205380][T31219] UBIFS error (pid: 31219): cannot open "ubifs", error -22
[ 2069.934157][T31249] /dev/nullb0: Can't lookup blockdev
[ 2069.988369][T31253] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[ 2070.025750][T31253] netlink: 'syz.3.6315': attribute type 10 has an invalid length.
[ 2070.034168][T31253] bond0: (slave wlan1): Opening slave failed
[ 2071.530383][   T30] audit: type=1800 audit(1764849471.560:8052): pid=31248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6314" name="bus" dev="ramfs" ino=101553 res=0 errno=0
[ 2071.644468][T31262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2071.782519][T31262] syzkaller0: entered promiscuous mode
[ 2071.796228][T31262] syzkaller0: entered allmulticast mode
[ 2072.225462][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6319'.
[ 2072.237648][T31270] xt_NFQUEUE: number of total queues is 0
[ 2072.332290][T31273] tipc: Resetting bearer <eth:syzkaller0>
[ 2072.362417][T31261] tipc: Resetting bearer <eth:syzkaller0>
[ 2072.560466][T31261] tipc: Disabling bearer <eth:syzkaller0>
[ 2074.960623][ T5892] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2075.266879][ T5892] usb 4-1: Using ep0 maxpacket: 32
[ 2075.351329][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2075.442040][ T5892] usb 4-1: config 0 has no interfaces?
[ 2075.531929][ T5892] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad
[ 2075.541301][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2075.592761][ T5892] usb 4-1: Product: syz
[ 2075.611927][ T5892] usb 4-1: Manufacturer: syz
[ 2075.626186][ T5892] usb 4-1: SerialNumber: syz
[ 2075.639474][ T5892] usb 4-1: config 0 descriptor??
[ 2076.118164][T31316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 2076.136590][T31316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 2076.397296][   T30] audit: type=1804 audit(1764849476.106:8053): pid=31320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6333" name="file0" dev="tmpfs" ino=7621 res=1 errno=0
[ 2076.420392][T31320] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[ 2076.566979][T31320] ref_ctr increment failed for inode: 0x1dc5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804d9924c0
[ 2076.916912][    C1] hrtimer: interrupt took 16583 ns
[ 2076.992678][T12805] kworker/0:1 (12805) used greatest stack depth: 17832 bytes left
[ 2077.037421][T31333] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[ 2077.067460][T31333] ref_ctr decrement failed for inode: 0x1dc5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804d9924c0
[ 2077.108788][T31333] uprobe: syz.4.6333:31333 failed to unregister, leaking uprobe
[ 2078.144669][   T37] usb 4-1: USB disconnect, device number 67
[ 2082.777212][T31403] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2083.559569][T31411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6354'.
[ 2086.553513][T31434] kvm: kvm [31432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x808
[ 2087.047112][T31434] kvm: kvm [31432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8e0
[ 2087.073229][ T5892] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[ 2087.105680][T31434] kvm: kvm [31432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8bc
[ 2087.256911][ T5892] usb 4-1: config 128 has an invalid interface number: 147 but max is 0
[ 2087.278543][ T5892] usb 4-1: config 128 has no interface number 0
[ 2087.287217][ T5892] usb 4-1: config 128 interface 147 has no altsetting 0
[ 2087.312548][ T5892] usb 4-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=13.dc
[ 2087.327748][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2087.346298][ T5892] usb 4-1: Product: syz
[ 2087.350575][ T5892] usb 4-1: Manufacturer: syz
[ 2087.355536][ T5892] usb 4-1: SerialNumber: syz
[ 2087.800268][ T5892] usb 4-1: USB disconnect, device number 68
[ 2089.905895][T31503] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6374'.
[ 2089.937161][T31503] Error: Driver 'c6xdigio' is already registered, aborting...
[ 2090.070080][T31506] bridge0: entered allmulticast mode
[ 2090.098536][ T5972] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2090.537706][ T5972] usb 2-1: Using ep0 maxpacket: 32
[ 2090.544863][ T5972] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2090.568888][ T5972] usb 2-1: config 0 has no interface number 0
[ 2090.577409][ T5972] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 2090.586600][ T5972] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[ 2090.618016][ T5972] usb 2-1: Product: syz
[ 2090.634873][ T5972] usb 2-1: Manufacturer: syz
[ 2090.666783][ T5972] usb 2-1: SerialNumber: syz
[ 2090.738783][ T5972] usb 2-1: config 0 descriptor??
[ 2090.959012][ T5972] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 2091.077730][ T5972] usb 2-1: selecting invalid altsetting 1
[ 2091.221296][ T5972] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2091.263075][ T5972] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2091.276372][ T5972] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2091.391883][ T5972] usb 2-1: media controller created
[ 2091.577595][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2091.734444][ T5972] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 2091.826066][T31523] pimreg: entered allmulticast mode
[ 2091.837721][T31524] pimreg: left allmulticast mode
[ 2092.177810][ T5972] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 2092.300824][ T5972] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 2092.361966][ T5972] usb 2-1: USB disconnect, device number 60
[ 2094.624716][T31544] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6384'.
[ 2094.680677][T31546] syz_tun: entered allmulticast mode
[ 2094.850603][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6383'.
[ 2095.003883][T31544] dvmrp8: entered allmulticast mode
[ 2095.278900][T31543] syz_tun: left allmulticast mode
[ 2098.961416][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2101.298021][T31595] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2101.305141][T31595] overlayfs: failed to set xattr on upper
[ 2101.310834][T31595] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2101.317705][T31595] overlayfs: ...falling back to index=off.
[ 2101.323490][T31595] overlayfs: ...falling back to uuid=null.
[ 2101.366471][   T30] audit: type=1400 audit(1764849499.398:8054): avc:  denied  { mounton } for  pid=31593 comm="syz.2.6396" path="/file0" dev="ramfs" ino=102160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 2101.392218][T31600] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[ 2101.491917][T31604] syzkaller0: entered promiscuous mode
[ 2101.497586][T31604] syzkaller0: entered allmulticast mode
[ 2101.507903][T31604] 0: reclassify loop, rule prio 0, protocol 800
[ 2101.727086][   T30] audit: type=1326 audit(1764849499.800:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2101.815493][   T30] audit: type=1326 audit(1764849499.800:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2101.949719][   T30] audit: type=1326 audit(1764849499.800:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2102.403449][   T30] audit: type=1326 audit(1764849499.800:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2102.898270][T31625] input: syz0 as /devices/virtual/input/input75
[ 2103.543473][   T30] audit: type=1326 audit(1764849499.800:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2103.679347][   T30] audit: type=1326 audit(1764849499.800:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2104.305359][   T30] audit: type=1326 audit(1764849499.800:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2104.487358][T31640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6410'.
[ 2104.937489][   T30] audit: type=1326 audit(1764849499.800:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2104.963319][   T30] audit: type=1326 audit(1764849499.800:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31607 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2106.243589][T31663] ip6t_rpfilter: unknown options
[ 2108.407403][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6423'.
[ 2108.999705][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 2109.000036][   T30] audit: type=1400 audit(1764849506.600:8088): avc:  denied  { override_creds } for  pid=31690 comm="syz.3.6424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2111.281786][T31716] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2111.451828][T31718] overlayfs: failed to clone upperpath
[ 2111.588971][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6432'.
[ 2111.817961][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6432'.
[ 2112.849761][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6435'.
[ 2113.668320][   T30] audit: type=1400 audit(1764849510.968:8089): avc:  denied  { name_bind } for  pid=31737 comm="syz.2.6438" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 2113.853017][T31747] /dev/nullb0: Can't open blockdev
[ 2116.299048][T31770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2116.323760][T31770] syzkaller0: entered promiscuous mode
[ 2116.340083][T31770] syzkaller0: entered allmulticast mode
[ 2116.463907][T31770] tipc: Resetting bearer <eth:syzkaller0>
[ 2116.517526][T31771] netlink: 'syz.4.6446': attribute type 10 has an invalid length.
[ 2116.527848][T31771] bridge0: entered promiscuous mode
[ 2116.533881][T31768] bridge0: left promiscuous mode
[ 2116.654124][T31769] tipc: Resetting bearer <eth:syzkaller0>
[ 2117.126700][T31769] tipc: Disabling bearer <eth:syzkaller0>
[ 2117.818649][T31796] binder: 31793:31796 unknown command 0
[ 2117.870917][T31796] binder: 31793:31796 ioctl c0306201 200000000080 returned -22
[ 2118.052460][T31798] binder: 31793:31798 ioctl 4018620d 0 returned -22
[ 2118.088256][T31796] binder: 31793:31796 ioctl c0306201 2000000003c0 returned -14
[ 2119.151005][T31812] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2121.248837][T31828] xt_ecn: cannot match TCP bits for non-tcp packets
[ 2121.710669][T31835] overlayfs: failed to clone lowerpath
[ 2122.614428][T21042] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2122.793394][   T30] audit: type=1400 audit(1764849519.509:8090): avc:  denied  { map } for  pid=31846 comm="syz.0.6466" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2122.889675][T21042] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[ 2122.939909][T21042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2122.982200][T21042] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[ 2123.063232][T31855] netlink: 'syz.4.6468': attribute type 8 has an invalid length.
[ 2123.417836][T21042] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[ 2123.444356][T21042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.530733][T31849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6467'.
[ 2123.551113][T21042] usb 2-1: config 0 descriptor??
[ 2124.608160][T21042] usbhid 2-1:0.0: can't add hid device: -71
[ 2124.614168][T21042] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2124.751207][T21042] usb 2-1: USB disconnect, device number 61
[ 2127.813610][T31905] netlink: 'syz.1.6482': attribute type 10 has an invalid length.
[ 2128.329133][T31915] syzkaller0: entered promiscuous mode
[ 2128.338049][T31915] syzkaller0: entered allmulticast mode
[ 2130.623962][T31933] raw_sendmsg: syz.3.6488 forgot to set AF_INET. Fix it!
[ 2130.810581][T31938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6491'.
[ 2130.913947][T31940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6490'.
[ 2131.019183][T31939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'.
[ 2132.522104][T31955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=31955 comm=syz.2.6494
[ 2132.637421][T31958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 2134.874596][T31972] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2136.166724][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6503'.
[ 2136.839218][T31990] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6505'.
[ 2137.003412][T31997] overlayfs: failed to clone lowerpath
[ 2137.598815][T32000] overlayfs: failed to clone upperpath
[ 2138.125746][ T5972] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 2139.565198][T32014] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2140.120101][   T30] audit: type=1400 audit(1764849535.682:8091): avc:  denied  { setopt } for  pid=32027 comm="syz.1.6513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 2140.424344][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6512'.
[ 2142.234399][T32056] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2142.466833][T32060] SELinux:  Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped).
[ 2142.486361][   T30] audit: type=1400 audit(1764849537.927:8092): avc:  denied  { relabelto } for  pid=32054 comm="syz.1.6520" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0"
[ 2142.898593][   T30] audit: type=1400 audit(1764849537.927:8093): avc:  denied  { associate } for  pid=32054 comm="syz.1.6520" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0"
[ 2148.901292][T32133] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2148.936439][T32133] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2150.218287][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6542'.
[ 2150.921108][T32154] xt_NFQUEUE: number of total queues is 0
[ 2152.003459][T32163] macsec0: entered promiscuous mode
[ 2152.009070][T32163] macsec0: entered allmulticast mode
[ 2152.021721][T32163] veth1_macvtap: entered allmulticast mode
[ 2152.029286][T32163] macsec0: left promiscuous mode
[ 2152.037259][T32163] macsec0: left allmulticast mode
[ 2152.043205][T32163] veth1_macvtap: left allmulticast mode
[ 2154.901949][T21042] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 2155.293250][T32193] netlink: 'syz.4.6555': attribute type 10 has an invalid length.
[ 2155.305724][T32193] team0: Device veth1_macvtap failed to register rx_handler
[ 2155.494437][T21042] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2155.531102][T21042] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2155.546005][T21042] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2155.556388][T21042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2155.923221][   T30] audit: type=1400 audit(1764849550.180:8094): avc:  denied  { connect } for  pid=32194 comm="syz.0.6557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2155.955992][T32184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2155.967332][T21042] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2156.794031][T21042] usb 4-1: USB disconnect, device number 70
[ 2158.512520][T32243] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2160.175991][T32250] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2160.278500][T32254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6570'.
[ 2161.544592][T32272] /dev/nullb0: Can't open blockdev
[ 2161.573963][   T30] audit: type=1400 audit(1764849555.783:8095): avc:  denied  { create } for  pid=32269 comm="syz.0.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 2161.804674][   T30] audit: type=1400 audit(1764849555.830:8096): avc:  denied  { write } for  pid=32269 comm="syz.0.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 2163.097844][ T5892] libceph: connect (1)[c::]:6789 error -13
[ 2163.137071][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[ 2163.188219][T32283] syz.0.6579 (32283): drop_caches: 2
[ 2163.217637][ T5892] libceph: connect (1)[b::]:6789 error -13
[ 2163.225860][ T5892] libceph: mon0 (1)[b::]:6789 connect error
[ 2163.558421][ T5865] libceph: connect (1)[c::]:6789 error -13
[ 2163.564931][ T5865] libceph: mon0 (1)[c::]:6789 connect error
[ 2163.571004][ T5865] libceph: connect (1)[b::]:6789 error -13
[ 2163.576970][ T5865] libceph: mon0 (1)[b::]:6789 connect error
[ 2163.884012][T32309] netlink: 'syz.0.6585': attribute type 7 has an invalid length.
[ 2163.892036][T32309] netlink: 'syz.0.6585': attribute type 8 has an invalid length.
[ 2164.289510][ T5892] libceph: connect (1)[b::]:6789 error -13
[ 2164.295571][ T5892] libceph: mon0 (1)[b::]:6789 connect error
[ 2164.301717][ T5892] libceph: connect (1)[c::]:6789 error -13
[ 2164.307786][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[ 2164.379551][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2164.438234][T32313] ubi31: attaching mtd0
[ 2164.444401][T32313] ubi31: scanning is finished
[ 2164.950566][T32313] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 2164.977754][T32313] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 2165.005286][T32313] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 2165.032837][T32313] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 2165.068359][T32313] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 2165.097226][T32313] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 2165.126544][T32313] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 264473648
[ 2165.146921][T32313] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 2165.175166][T32323] ubi31: background thread "ubi_bgt31d" started, PID 32323
[ 2165.916802][ T5892] libceph: connect (1)[c::]:6789 error -13
[ 2165.933055][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[ 2165.939373][ T5865] libceph: connect (1)[b::]:6789 error -13
[ 2165.945424][ T5865] libceph: mon0 (1)[b::]:6789 connect error
[ 2166.033290][T32337] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2166.237156][T32291] ceph: No mds server is up or the cluster is laggy
[ 2166.299314][T32295] ceph: No mds server is up or the cluster is laggy
[ 2167.230924][T32347] tmpfs: Bad value for 'mpol'
[ 2171.384667][T32384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6604'.
[ 2173.012922][T32399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.429381][T32403] mkiss: ax0: crc mode is auto.
[ 2173.760896][T32406] netlink: 'syz.4.6606': attribute type 10 has an invalid length.
[ 2173.769567][T32406] .`: (slave wlan1): Opening slave failed
[ 2173.781362][T32404] delete_channel: no stack
[ 2177.962929][   T30] audit: type=1800 audit(1764849571.105:8097): pid=32453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6623" name="nullb0" dev="tmpfs" ino=1920 res=0 errno=0
[ 2182.153994][T32497] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2182.869572][T32446] Set syz1 is full, maxelem 65536 reached
[ 2182.882408][ T5972] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 2183.042726][ T5972] usb 1-1: Using ep0 maxpacket: 32
[ 2183.053254][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2183.086410][ T5972] usb 1-1: config 56 has an invalid interface number: 222 but max is 0
[ 2183.094684][ T5972] usb 1-1: config 56 has no interface number 0
[ 2183.128883][ T5972] usb 1-1: config 56 interface 222 has no altsetting 0
[ 2183.138501][ T5972] usb 1-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23
[ 2183.155099][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2183.170927][ T5972] usb 1-1: Product: syz
[ 2183.220147][ T5972] usb 1-1: Manufacturer: syz
[ 2183.252164][ T5972] usb 1-1: SerialNumber: syz
[ 2183.568679][T32516] netlink: 'syz.4.6639': attribute type 10 has an invalid length.
[ 2183.579016][T32516] .`: (slave hsr0): The slave device specified does not support setting the MAC address
[ 2183.591500][T32516] hsr0: mtu greater than device maximum
[ 2183.597142][T32516] .`: (slave hsr0): Error -22 calling dev_set_mtu
[ 2183.808509][T32516] lo speed is unknown, defaulting to 1000
[ 2183.815568][T32516] lo speed is unknown, defaulting to 1000
[ 2183.832439][   T30] audit: type=1400 audit(1764849576.353:8098): avc:  denied  { nlmsg_read } for  pid=32510 comm="syz.4.6639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 2184.646871][   T30] audit: type=1326 audit(1764849577.326:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2184.837490][   T30] audit: type=1326 audit(1764849577.326:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.276666][ T5972] option 1-1:56.222: GSM modem (1-port) converter detected
[ 2185.303678][   T30] audit: type=1326 audit(1764849577.326:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.332314][   T30] audit: type=1326 audit(1764849577.326:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.371255][ T5972] usb 1-1: USB disconnect, device number 68
[ 2185.510300][   T30] audit: type=1326 audit(1764849577.326:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.515900][ T5972] option 1-1:56.222: device disconnected
[ 2185.534135][   T30] audit: type=1326 audit(1764849577.326:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.534176][   T30] audit: type=1400 audit(1764849577.344:8105): avc:  denied  { mount } for  pid=32523 comm="syz.4.6642" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 2185.534213][   T30] audit: type=1326 audit(1764849577.344:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2185.534247][   T30] audit: type=1326 audit(1764849577.344:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32523 comm="syz.4.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2187.301599][ T5865] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[ 2187.470460][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2187.632504][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2187.751252][ T5865] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2187.768435][T32568] SELinux:  Context Ï is not valid (left unmapped).
[ 2187.781922][T32568] /dev/nullb0: Can't open blockdev
[ 2187.990003][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2187.998601][T32565] lo speed is unknown, defaulting to 1000
[ 2188.007075][T32565] lo speed is unknown, defaulting to 1000
[ 2188.499297][ T5865] usb 2-1: config 0 descriptor??
[ 2188.511320][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2188.528608][ T5865] dvb-usb: bulk message failed: -22 (3/0)
[ 2188.550019][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2188.571844][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2188.580194][ T5865] usb 2-1: media controller created
[ 2188.605797][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2188.745457][ T5865] dvb-usb: bulk message failed: -22 (6/0)
[ 2189.514921][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2189.571785][T32570] orangefs_mount: mount request failed with -4
[ 2189.620916][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76
[ 2190.035559][ T5865] dvb-usb: schedule remote query interval to 150 msecs.
[ 2190.044705][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2190.059418][T20052] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 2190.572835][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[ 2190.579914][ T5865] dvb-usb: error while querying for an remote control event.
[ 2190.604184][T32595] bond4: Removing last arp target with arp_interval on
[ 2190.614421][T32595] bond4: entered allmulticast mode
[ 2190.619804][T32595] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2190.656330][T20052] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[ 2190.664747][T20052] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2190.724182][ T5865] usb 2-1: USB disconnect, device number 62
[ 2190.741301][T20052] usb 4-1: config 0 has no interfaces?
[ 2190.746809][T20052] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2190.761375][T20052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.777498][T20052] usb 4-1: config 0 descriptor??
[ 2191.020690][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2191.276999][T32607] /dev/nullb0: Can't lookup blockdev
[ 2191.285505][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 2191.285520][   T30] audit: type=1400 audit(1764849583.574:8116): avc:  denied  { create } for  pid=32606 comm="syz.2.6661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2191.413496][T20052] usb 4-1: can't set config #0, error -71
[ 2191.429857][T20052] usb 4-1: USB disconnect, device number 71
[ 2191.501716][T32613] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2193.341449][T32620] [U] ÿ
[ 2194.696602][T32629] pimreg: entered allmulticast mode
[ 2194.869926][T32624] pimreg: left allmulticast mode
[ 2194.887978][T32635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6662'.
[ 2194.888222][   T30] audit: type=1400 audit(1764849586.942:8117): avc:  denied  { write } for  pid=32628 comm="syz.0.6662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2195.773486][   T30] audit: type=1400 audit(1764849586.951:8118): avc:  denied  { nlmsg_write } for  pid=32628 comm="syz.0.6662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2197.945817][T32652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6672'.
[ 2198.090648][T32654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6673'.
[ 2201.251752][T32676] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2202.606692][   T37] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 2202.821615][   T37] usb 4-1: Using ep0 maxpacket: 16
[ 2202.914664][   T37] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[ 2202.930484][   T37] usb 4-1: config 252 has no interface number 0
[ 2202.936744][   T37] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2202.950475][   T37] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2202.959687][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2202.967675][   T37] usb 4-1: Product: syz
[ 2203.052711][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6686'.
[ 2203.494479][   T37] usb 4-1: Manufacturer: syz
[ 2203.509028][   T37] usb 4-1: SerialNumber: syz
[ 2203.527221][   T37] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2204.677006][T32729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6690'.
[ 2204.753536][T32730] delete_channel: no stack
[ 2205.123838][ T1315] usb 4-1: Failed to submit usb control message: -110
[ 2205.140293][ T1315] usb 4-1: unable to send the bmi data to the device: -110
[ 2205.147700][ T1315] usb 4-1: unable to get target info from device
[ 2205.154585][ T1315] usb 4-1: could not get target info (-110)
[ 2205.160657][ T1315] usb 4-1: could not probe fw (-110)
[ 2205.508119][T21042] usb 4-1: USB disconnect, device number 72
[ 2206.659084][T32757] ptrace attach of ""[32758] was attempted by "./syz-executor exec"[32757]
[ 2208.210523][T32767] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2208.217680][T32767] overlayfs: failed to set xattr on upper
[ 2208.223460][T32767] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2208.230332][T32767] overlayfs: ...falling back to index=off.
[ 2208.236124][T32767] overlayfs: ...falling back to uuid=null.
[ 2208.241952][T32767] overlayfs: maximum fs stacking depth exceeded
[ 2208.385856][   T30] audit: type=1400 audit(1764849599.401:8119): avc:  denied  { mounton } for  pid=32766 comm="syz.4.6700" path="/file0" dev="hugetlbfs" ino=107024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[ 2208.788114][  T302] netlink: 'syz.2.6701': attribute type 2 has an invalid length.
[ 2208.799211][  T302] netlink: 'syz.2.6701': attribute type 2 has an invalid length.
[ 2209.220649][  T308] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2210.711799][   T30] audit: type=1326 audit(1764849601.730:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2210.804710][   T30] audit: type=1326 audit(1764849601.730:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2210.934582][   T30] audit: type=1326 audit(1764849601.730:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2210.963110][   T30] audit: type=1326 audit(1764849601.730:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.536594][   T30] audit: type=1326 audit(1764849601.730:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.561397][   T30] audit: type=1326 audit(1764849601.730:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.588031][   T30] audit: type=1326 audit(1764849601.730:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.647774][   T30] audit: type=1326 audit(1764849601.730:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.900943][   T30] audit: type=1326 audit(1764849601.730:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.0.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcd98f749 code=0x7ffc0000
[ 2211.928751][  T336] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2213.441942][  T343] syz.1.6712: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2213.629540][  T343] CPU: 0 UID: 0 PID: 343 Comm: syz.1.6712 Not tainted syzkaller #0 PREEMPT(full) 
[ 2213.629566][  T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2213.629576][  T343] Call Trace:
[ 2213.629582][  T343]  <TASK>
[ 2213.629590][  T343]  dump_stack_lvl+0x16c/0x1f0
[ 2213.629621][  T343]  warn_alloc+0x248/0x3a0
[ 2213.629643][  T343]  ? __pfx_warn_alloc+0x10/0x10
[ 2213.629673][  T343]  ? xskq_create+0xfb/0x1d0
[ 2213.629690][  T343]  ? __vmalloc_node_noprof+0xad/0xf0
[ 2213.629721][  T343]  __vmalloc_node_range_noprof+0xfe2/0x1480
[ 2213.629758][  T343]  ? xskq_create+0xfb/0x1d0
[ 2213.629782][  T343]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 2213.629806][  T343]  ? xskq_create+0xfb/0x1d0
[ 2213.629818][  T343]  vmalloc_user_noprof+0x9e/0xe0
[ 2213.629835][  T343]  ? xskq_create+0xfb/0x1d0
[ 2213.629847][  T343]  xskq_create+0xfb/0x1d0
[ 2213.629860][  T343]  xsk_setsockopt+0x8d2/0xc00
[ 2213.629872][  T343]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2213.629888][  T343]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 2213.629900][  T343]  ? __sanitizer_cov_trace_pc+0x8/0x70
[ 2213.629915][  T343]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2213.629928][  T343]  do_sock_setsockopt+0xf3/0x1d0
[ 2213.629943][  T343]  __sys_setsockopt+0x1a0/0x230
[ 2213.629963][  T343]  __x64_sys_setsockopt+0xbd/0x160
[ 2213.629980][  T343]  ? do_syscall_64+0x91/0xf80
[ 2213.629995][  T343]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2213.630010][  T343]  do_syscall_64+0xcd/0xf80
[ 2213.630027][  T343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2213.630044][  T343] RIP: 0033:0x7f0c7458f749
[ 2213.630054][  T343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2213.630065][  T343] RSP: 002b:00007f0c7548e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2213.630076][  T343] RAX: ffffffffffffffda RBX: 00007f0c747e6180 RCX: 00007f0c7458f749
[ 2213.630083][  T343] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[ 2213.630090][  T343] RBP: 00007f0c74613f91 R08: 0000000000000004 R09: 0000000000000000
[ 2213.630096][  T343] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[ 2213.630103][  T343] R13: 00007f0c747e6218 R14: 00007f0c747e6180 R15: 00007fff3fc9b208
[ 2213.630126][  T343]  </TASK>
[ 2213.630502][  T343] Mem-Info:
[ 2215.125362][  T343] active_anon:51697 inactive_anon:0 isolated_anon:0
[ 2215.125362][  T343]  active_file:20831 inactive_file:41916 isolated_file:0
[ 2215.125362][  T343]  unevictable:769 dirty:374 writeback:0
[ 2215.125362][  T343]  slab_reclaimable:12753 slab_unreclaimable:107894
[ 2215.125362][  T343]  mapped:36018 shmem:42162 pagetables:1775
[ 2215.125362][  T343]  sec_pagetables:3 bounce:0
[ 2215.125362][  T343]  kernel_misc_reclaimable:0
[ 2215.125362][  T343]  free:1213363 free_pcp:17369 free_cma:0
[ 2215.171004][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2215.578987][  T343] Node 0 active_anon:196780kB inactive_anon:0kB active_file:83324kB inactive_file:167464kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:128572kB dirty:1580kB writeback:0kB shmem:155712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14464kB pagetables:7632kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB
[ 2215.763158][  T343] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 2215.828280][  T343] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB
[ 2216.016556][  T343] lowmem_reserve[]: 0 2482 2484 2484 2484
[ 2216.023432][  T343] Node 0 DMA32 free:937616kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:204980kB inactive_anon:0kB active_file:83324kB inactive_file:167464kB unevictable:1540kB writepending:1580kB zspages:0kB present:3129332kB managed:2542032kB mlocked:0kB bounce:0kB free_pcp:59508kB local_pcp:22916kB free_cma:0kB
[ 2216.056799][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2216.303210][  T343] lowmem_reserve[]: 0 0 1 1 1
[ 2216.310008][  T343] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2216.707706][  T343] lowmem_reserve[]: 0 0 0 0 0
[ 2216.712896][  T343] Node 1 Normal free:3900448kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12224kB local_pcp:3872kB free_cma:0kB
[ 2216.745131][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2216.935893][  T343] lowmem_reserve[]: 0 0 0 0 0
[ 2216.940926][  T343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[ 2217.039518][  T343] Node 0 DMA32: 714*4kB (UME) 1355*8kB (UME) 379*16kB (UM) 309*32kB (UME) 252*64kB (UME) 257*128kB (UM) 133*256kB (UME) 94*512kB (UME) 69*1024kB (UM) 15*2048kB (UM) 165*4096kB (UM) = 938064kB
[ 2217.124529][  T343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2217.167124][  T343] Node 1 Normal: 194*4kB (UM) 53*8kB (UE) 49*16kB (UME) 175*32kB (UME) 44*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3900448kB
[ 2217.186773][  T403] netlink: 'syz.2.6723': attribute type 6 has an invalid length.
[ 2217.216642][  T343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2217.242021][  T343] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB
[ 2217.283076][  T343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2217.316608][  T343] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2217.327077][  T343] 107916 total pagecache pages
[ 2217.332034][  T343] 1 pages in swap cache
[ 2217.336175][  T343] Free swap  = 124992kB
[ 2217.356081][  T343] Total swap = 124996kB
[ 2217.370511][  T343] 2097051 pages RAM
[ 2217.374424][  T343] 0 pages HighMem/MovableOnly
[ 2217.379080][  T343] 429517 pages reserved
[ 2217.391666][  T343] 0 pages cma reserved
[ 2217.751837][  T409] gfs2: error -5 reading superblock
[ 2218.043048][  T412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6726'.
[ 2218.173569][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 2218.173611][   T30] audit: type=1400 audit(1764849608.680:8132): avc:  denied  { accept } for  pid=405 comm="syz.1.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2219.632978][   T30] audit: type=1400 audit(1764849609.737:8133): avc:  denied  { node_bind } for  pid=426 comm="syz.4.6730" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 2221.607040][   T30] audit: type=1326 audit(1764849611.936:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=457 comm="syz.2.6738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731b38f749 code=0x0
[ 2221.631778][  T460] netlink: 'syz.4.6739': attribute type 6 has an invalid length.
[ 2221.657403][T21042] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 2221.817570][T21042] usb 4-1: Using ep0 maxpacket: 8
[ 2221.823802][T21042] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2221.834842][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2221.881933][T21042] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2221.894055][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2221.905304][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2221.918165][T21042] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2221.979163][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2221.999666][T21042] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2222.014621][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2222.027023][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2222.487580][T21042] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2222.495169][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2222.495352][   T30] audit: type=1400 audit(1764849612.394:8135): avc:  denied  { listen } for  pid=464 comm="syz.0.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2222.512440][T21042] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2222.573275][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2222.596663][T21042] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2222.614392][T21042] usb 4-1: string descriptor 0 read error: -22
[ 2222.627143][T21042] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 2222.636590][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2222.655154][T21042] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 2223.169000][  T477] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2224.006893][T20052] usb 4-1: USB disconnect, device number 73
[ 2226.081830][  T514] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2226.170571][ T5892] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 2226.406441][  T522] netlink: 'syz.2.6754': attribute type 6 has an invalid length.
[ 2226.451006][ T5892] usb 1-1: config index 0 descriptor too short (expected 1316, got 36)
[ 2226.467942][ T5892] usb 1-1: config 7 has an invalid interface number: 204 but max is -1
[ 2226.565911][ T5892] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 0
[ 2226.576770][ T5892] usb 1-1: config 7 has no interface number 0
[ 2226.582879][ T5892] usb 1-1: config 7 interface 204 has no altsetting 0
[ 2226.842195][ T5892] usb 1-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce
[ 2227.276424][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2227.284530][ T5892] usb 1-1: Product: syz
[ 2227.288691][ T5892] usb 1-1: Manufacturer: syz
[ 2227.293313][ T5892] usb 1-1: SerialNumber: syz
[ 2227.708796][ T5892] smsc95xx v2.0.0
[ 2227.712478][ T5892] smsc95xx 1-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 2227.723000][ T5892] smsc95xx 1-1:7.204: probe with driver smsc95xx failed with error -22
[ 2228.215260][ T5892] usbhid 1-1:7.204: couldn't find an input interrupt endpoint
[ 2228.235078][ T5892] usb 1-1: USB disconnect, device number 69
[ 2228.250210][  T540] /dev/nullb0: Can't lookup blockdev
[ 2228.338779][T20052] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2228.359882][  T542] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2228.602497][T20052] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2228.612408][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2228.630445][T20052] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2228.640385][T20052] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2228.649013][T20052] usb 2-1: Manufacturer: syz
[ 2228.789468][T20052] usb 2-1: config 0 descriptor??
[ 2229.290435][T20052] rc_core: IR keymap rc-hauppauge not found
[ 2229.300259][T20052] Registered IR keymap rc-empty
[ 2229.309976][T20052] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2229.331292][T20052] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input77
[ 2229.420463][  T551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6763'.
[ 2230.256527][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2230.673332][T21042] usb 2-1: USB disconnect, device number 63
[ 2232.972631][  T580] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2237.695409][  T637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'.
[ 2238.007005][  T644] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2241.295754][   T30] audit: type=1400 audit(1764849630.344:8136): avc:  denied  { module_load } for  pid=672 comm="syz.0.6795" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[ 2241.944727][  T687] ntfs3(loop3): try to read out of volume at offset 0x0
[ 2242.420512][  T688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 2242.430621][  T689] 9pnet_fd: Insufficient options for proto=fd
[ 2243.411984][  T703] fuse: Bad value for 'fd'
[ 2244.077495][  T719] netlink: 'syz.4.6806': attribute type 10 has an invalid length.
[ 2244.427704][  T719] .`: (slave wlan1): Opening slave failed
[ 2244.496342][  T716] overlay: Unknown parameter '/'
[ 2244.619891][  T611] Set syz1 is full, maxelem 65536 reached
[ 2244.749572][  T726] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 2244.856246][  T729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6810'.
[ 2245.548837][  T745] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2245.671743][  T748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6814'.
[ 2245.886411][  T740] orangefs_mount: mount request failed with -4
[ 2249.997262][  T813] netlink: 16076 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 2250.266496][   T30] audit: type=1326 audit(1764849638.753:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2250.485521][  T801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6825'.
[ 2250.568417][   T30] audit: type=1326 audit(1764849638.782:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2250.602900][   T30] audit: type=1326 audit(1764849638.856:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2250.637213][   T30] audit: type=1326 audit(1764849638.856:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2250.865933][  T825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6830'.
[ 2250.876661][   T30] audit: type=1326 audit(1764849638.856:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2251.314083][   T30] audit: type=1326 audit(1764849638.856:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2251.337680][   T30] audit: type=1326 audit(1764849638.856:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2251.361490][   T30] audit: type=1326 audit(1764849638.856:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2251.469038][   T30] audit: type=1326 audit(1764849638.856:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2251.676600][   T30] audit: type=1326 audit(1764849638.856:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2252.093684][  T834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2252.294901][  T834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2252.884506][  T845] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[845]
[ 2252.982709][  T847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6836'.
[ 2253.502730][  T845] batadv0: entered promiscuous mode
[ 2253.514366][  T845] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2254.918801][  T873] netlink: 'syz.1.6842': attribute type 10 has an invalid length.
[ 2254.948132][  T872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[ 2256.560371][  T885] /dev/nullb0: Can't open blockdev
[ 2258.673942][  T866] delete_channel: no stack
[ 2260.224704][  T946] overlayfs: failed to clone lowerpath
[ 2261.245288][  T962] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2261.437964][  T962] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2261.569003][  T962] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2261.576687][T20052] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 2261.633224][  T962] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2261.823143][T20052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2261.843187][T20052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2261.872289][T20052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2262.045166][ T4149] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2262.053782][T20052] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2262.501511][T20052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.512121][T20052] usb 1-1: config 0 descriptor??
[ 2262.528141][ T4149] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2262.570847][ T4149] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2262.586127][ T4149] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2263.324586][T20052] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 2263.637628][  T988] netlink: 'syz.4.6867': attribute type 1 has an invalid length.
[ 2263.697707][  T990] No control pipe specified
[ 2264.076791][  T992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2264.468371][  T991] netlink: del zone limit has 4 unknown bytes
[ 2264.891461][ T1005] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6870'.
[ 2264.975569][T21042] usb 1-1: reset high-speed USB device number 70 using dummy_hcd
[ 2265.253624][ T5892] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2265.379329][ T1024] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2265.414302][ T5892] usb 2-1: Using ep0 maxpacket: 16
[ 2265.422357][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2265.435047][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2265.464672][ T5892] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 2265.575629][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2265.587324][ T5892] usb 2-1: config 0 descriptor??
[ 2265.854099][ T5972] usb 1-1: USB disconnect, device number 70
[ 2267.453525][ T1040] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2267.461316][ T1040] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 2267.469604][ T1040] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2267.477366][ T1040] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 2267.529363][ T5892] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[ 2267.731759][ T5892] corsair 0003:1B1C:1B02.001B: Read invalid backlight brightness: bf.
[ 2269.072663][ T5892] usb 2-1: USB disconnect, device number 64
[ 2269.361748][ T1081] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 2270.482959][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6883'.
[ 2271.369837][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6883'.
[ 2272.839584][ T1123] blk_print_req_error: 46 callbacks suppressed
[ 2272.839602][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2272.906810][ T1123] buffer_io_error: 45 callbacks suppressed
[ 2272.906849][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2273.238967][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2273.344376][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2273.395914][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2274.391342][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2274.422291][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2274.434221][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2275.096807][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2275.111979][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2275.190661][ T1146] netlink: 'syz.3.6896': attribute type 10 has an invalid length.
[ 2275.199649][ T1146] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 2275.212328][ T1146] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2275.224865][ T1146] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 2275.395596][ T1146] lo speed is unknown, defaulting to 1000
[ 2275.451702][ T1146] lo speed is unknown, defaulting to 1000
[ 2275.518647][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2275.599389][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2275.608375][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2275.911132][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2276.405006][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2276.471355][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2276.493923][ T1123] ldm_validate_partition_table(): Disk read failed.
[ 2276.501712][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2276.514007][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2277.198648][ T1123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2277.234166][ T1123] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2277.244787][ T1123] Dev nbd0: unable to read RDB block 0
[ 2277.379026][ T1123]  nbd0: unable to read partition table
[ 2278.902046][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 2278.912026][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 2278.921109][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 2278.930204][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 2278.941042][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 2279.362774][ T1178] autofs: Bad value for 'fd'
[ 2279.407593][ T1178] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2279.415384][ T1178] overlayfs: failed to set xattr on upper
[ 2279.421369][ T1178] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2279.428240][ T1178] overlayfs: ...falling back to index=off.
[ 2279.434175][ T1178] overlayfs: ...falling back to uuid=null.
[ 2279.440061][ T1178] overlayfs: maximum fs stacking depth exceeded
[ 2282.202392][ T1186] lo speed is unknown, defaulting to 1000
[ 2282.228795][ T1186] lo speed is unknown, defaulting to 1000
[ 2282.254162][ T1182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6907'.
[ 2284.298501][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2284.298518][   T30] audit: type=1400 audit(1764849669.781:8149): avc:  denied  { map } for  pid=1204 comm="syz.3.6911" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2284.443212][ T1214] xt_addrtype: ipv6 does not support BROADCAST matching
[ 2284.655370][   T30] audit: type=1400 audit(1764849669.781:8150): avc:  denied  { execute } for  pid=1204 comm="syz.3.6911" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2285.671009][ T1230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6915'.
[ 2286.511389][ T1241] blk_print_req_error: 7 callbacks suppressed
[ 2286.511407][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.526966][ T1241] buffer_io_error: 6 callbacks suppressed
[ 2286.526981][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.540821][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.549876][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.557730][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.566799][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.575097][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.584152][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.592058][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.601080][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.608970][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.629795][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.637784][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.646851][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.654723][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.663779][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.671594][ T1241] ldm_validate_partition_table(): Disk read failed.
[ 2286.679357][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.688435][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.696417][ T1241] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 2286.705539][ T1241] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2286.713606][ T1241] Dev nbd0: unable to read RDB block 0
[ 2286.720047][ T1241]  nbd0: unable to read partition table
[ 2286.726212][ T1241] hpfs: hpfs_map_sector(): read error
[ 2287.660999][ T5892] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 2288.744486][ T5892] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 2288.777683][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2288.793108][ T1266] qnx6: unable to read the first superblock
[ 2288.794733][ T1269] netlink: 'syz.2.6925': attribute type 6 has an invalid length.
[ 2288.799345][ T1266] qnx6: unable to read the first superblock
[ 2288.812837][ T1266] qnx6: unable to read the first superblock
[ 2288.825143][ T5892] usb 1-1: Product: syz
[ 2288.836474][ T5892] usb 1-1: Manufacturer: syz
[ 2288.841375][ T5892] usb 1-1: SerialNumber: syz
[ 2288.967724][ T5892] usb 1-1: config 0 descriptor??
[ 2289.647288][ T5892] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels)
[ 2291.111482][   T30] audit: type=1400 audit(1764849676.946:8151): avc:  denied  { read } for  pid=1291 comm="syz.1.6929" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0"
[ 2291.246287][ T1293] input: syz1 as /devices/virtual/input/input78
[ 2291.695259][ T5892] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[ 2291.741343][ T5892] peak_usb 1-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71)
[ 2292.184796][ T5892] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71
[ 2292.195831][ T1303] batadv_slave_0: left promiscuous mode
[ 2292.225349][ T5892] usb 1-1: USB disconnect, device number 71
[ 2292.736952][ T1307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6930'.
[ 2292.931090][   T30] audit: type=1400 audit(1764849676.946:8152): avc:  denied  { open } for  pid=1291 comm="syz.1.6929" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0"
[ 2293.734309][   T30] audit: type=1400 audit(1764849678.742:8153): avc:  denied  { lock } for  pid=1302 comm="syz.4.6932" path="socket:[111733]" dev="sockfs" ino=111733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 2295.056922][ T1336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6937'.
[ 2295.086815][ T1336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6937'.
[ 2295.746746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2296.769171][   T30] audit: type=1400 audit(1764849682.240:8154): avc:  denied  { map } for  pid=1349 comm="syz.2.6941" path="/1558/file0" dev="tmpfs" ino=8170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2297.653725][ T1362] netlink: 'syz.0.6944': attribute type 6 has an invalid length.
[ 2297.664600][ T1360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'.
[ 2299.255215][ T1380] lo speed is unknown, defaulting to 1000
[ 2299.262325][ T1380] lo speed is unknown, defaulting to 1000
[ 2299.348277][   T30] audit: type=1326 audit(1764849684.654:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2299.412054][   T30] audit: type=1326 audit(1764849684.654:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2299.435439][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2299.824413][   T30] audit: type=1326 audit(1764849684.654:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2300.618006][   T30] audit: type=1326 audit(1764849684.654:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2301.151160][   T30] audit: type=1326 audit(1764849684.654:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2301.227717][   T30] audit: type=1326 audit(1764849684.654:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda49d8df90 code=0x7ffc0000
[ 2301.251171][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2301.262171][   T30] audit: type=1326 audit(1764849684.654:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2301.285583][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2301.552095][   T30] audit: type=1326 audit(1764849684.654:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2302.064612][   T30] audit: type=1326 audit(1764849684.654:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda49d8f749 code=0x7ffc0000
[ 2302.087961][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2302.216895][ T1407] netlink: zone id is out of range
[ 2302.222323][ T1407] netlink: zone id is out of range
[ 2302.227584][ T1407] netlink: zone id is out of range
[ 2302.232895][ T1407] netlink: zone id is out of range
[ 2302.239551][ T1407] netlink: zone id is out of range
[ 2302.245068][ T1407] netlink: zone id is out of range
[ 2302.250279][ T1407] netlink: zone id is out of range
[ 2302.255541][ T1407] netlink: zone id is out of range
[ 2302.260735][ T1407] netlink: zone id is out of range
[ 2302.265943][ T1407] netlink: zone id is out of range
[ 2302.399948][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6953'.
[ 2302.804227][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6955'.
[ 2303.955982][ T1424] vimc link validate: Sensor B:src:16x16 (0x47524247, 1, 0, 2, 1) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2304.040515][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'.
[ 2304.937472][ T5865] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 2305.065370][ T5892] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 2306.081092][ T5865] usb 4-1: Using ep0 maxpacket: 16
[ 2306.090656][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2306.105569][ T5865] usb 4-1: config 0 has no interfaces?
[ 2306.115996][ T5865] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 2306.126041][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2307.150377][ T5865] usb 4-1: Product: syz
[ 2307.154802][ T5865] usb 4-1: Manufacturer: syz
[ 2307.159705][ T5865] usb 4-1: SerialNumber: syz
[ 2307.165635][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2307.181835][ T5865] usb 4-1: config 0 descriptor??
[ 2307.186929][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2307.197939][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2307.352058][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2307.365021][ T5892] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2307.374063][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2307.401909][ T5892] usb 1-1: config 0 descriptor??
[ 2307.539529][ T1449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6963'.
[ 2307.925072][ T1454] ptrace attach of ""[1451] was attempted by "./syz-executor exec"[1454]
[ 2308.233609][ T5892] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 2309.040322][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2309.040753][   T30] audit: type=1400 audit(1764849693.718:8166): avc:  denied  { create } for  pid=1455 comm="syz.2.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 2310.056069][ T5892] usb 4-1: USB disconnect, device number 74
[ 2310.375051][ T1487] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2310.650287][ T1491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6969'.
[ 2311.047823][ T5972] usb 1-1: USB disconnect, device number 72
[ 2312.493950][ T1517] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2313.209588][ T1518] team0: Device gtp2 is up. Set it down before adding it as a team port
[ 2314.313527][ T1533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6980'.
[ 2315.036127][ T1537] lo speed is unknown, defaulting to 1000
[ 2315.076809][ T1537] lo speed is unknown, defaulting to 1000
[ 2315.391432][ T1546] fuse: Bad value for 'fd'
[ 2316.414362][ T1555] siw: device registration error -23
[ 2317.744852][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6987'.
[ 2320.270210][T21042] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 2320.438509][T21042] usb 4-1: Using ep0 maxpacket: 16
[ 2320.471455][T21042] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[ 2320.572563][T21042] usb 4-1: config 252 has no interface number 0
[ 2320.597568][T21042] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2320.650381][T21042] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2320.669068][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2320.689965][T21042] usb 4-1: Product: syz
[ 2320.701901][T21042] usb 4-1: Manufacturer: syz
[ 2320.715147][T21042] usb 4-1: SerialNumber: syz
[ 2321.571122][T21042] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2321.731046][ T1628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6996'.
[ 2322.683766][ T4149] usb 4-1: Failed to submit usb control message: -110
[ 2322.691391][ T4149] usb 4-1: unable to send the bmi data to the device: -110
[ 2322.699045][ T4149] usb 4-1: unable to get target info from device
[ 2322.705682][ T4149] usb 4-1: could not get target info (-110)
[ 2322.711803][ T4149] usb 4-1: could not probe fw (-110)
[ 2323.314236][ T1644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6998'.
[ 2323.326036][ T1644] net_ratelimit: 11 callbacks suppressed
[ 2323.326054][ T1644] openvswitch: netlink: IP tunnel dst address not specified
[ 2323.977661][T21042] usb 4-1: USB disconnect, device number 75
[ 2324.337631][ T1665] overlayfs: missing 'lowerdir'
[ 2324.344382][ T5972] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 2324.421633][ T1667] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 2324.430272][ T1667] overlayfs: overlapping lowerdir path
[ 2325.626277][ T1666] /dev/nullb0: Can't lookup blockdev
[ 2325.853921][ T1681] netlink: 'syz.2.7000': attribute type 12 has an invalid length.
[ 2325.950954][ T5972] usb 2-1: Using ep0 maxpacket: 8
[ 2325.983851][ T1684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7004'.
[ 2326.103726][ T1683] lo speed is unknown, defaulting to 1000
[ 2326.125286][ T1664] kvm: pic: non byte read
[ 2326.139223][ T1664] kvm: pic: non byte read
[ 2326.281299][ T1683] lo speed is unknown, defaulting to 1000
[ 2326.297284][ T1664] kvm: pic: non byte read
[ 2326.829056][ T1664] kvm: pic: non byte read
[ 2326.834969][ T1664] kvm: pic: non byte read
[ 2326.839488][ T1664] kvm: pic: non byte read
[ 2326.844021][ T1664] kvm: pic: non byte read
[ 2326.848509][ T1664] kvm: pic: non byte read
[ 2326.853053][ T1664] kvm: pic: non byte read
[ 2326.857525][ T1664] kvm: pic: non byte read
[ 2327.131887][   T30] audit: type=1400 audit(1764849710.648:8167): avc:  denied  { ioctl } for  pid=1692 comm="syz.4.7006" path="socket:[112540]" dev="sockfs" ino=112540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2327.294136][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7006'.
[ 2327.618686][ T5972] usb 2-1: device descriptor read/all, error -71
[ 2328.538140][ T1712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7010'.
[ 2328.626379][ T1716] lo speed is unknown, defaulting to 1000
[ 2328.685982][ T1716] lo speed is unknown, defaulting to 1000
[ 2330.027998][ T5892] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[ 2330.385465][ T5892] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 2330.393990][ T5892] usb 2-1: config 0 has no interface number 0
[ 2330.485181][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 2330.542759][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2330.579863][ T5892] usb 2-1: Product: syz
[ 2330.588228][ T5892] usb 2-1: Manufacturer: syz
[ 2330.604773][ T5892] usb 2-1: SerialNumber: syz
[ 2330.702930][ T5892] usb 2-1: config 0 descriptor??
[ 2330.804602][ T5892] hub 2-1:0.132: bad descriptor, ignoring hub
[ 2330.832909][ T5892] hub 2-1:0.132: probe with driver hub failed with error -5
[ 2331.062867][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input80
[ 2331.279191][ T1745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2331.380390][ T1745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2331.912948][T21042] usb 2-1: USB disconnect, device number 67
[ 2334.707932][ T1795] siw: device registration error -23
[ 2335.239650][ T1802] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 2340.203334][ T1825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2341.257839][ T1849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7035'.
[ 2346.121806][ T1904] netlink: 'syz.0.7046': attribute type 6 has an invalid length.
[ 2346.588105][T20052] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 2346.968479][T20052] usb 4-1: Using ep0 maxpacket: 8
[ 2346.976655][T20052] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2347.022481][T20052] usb 4-1: config 4 interface 0 has no altsetting 0
[ 2347.060210][T20052] usb 4-1: string descriptor 0 read error: -22
[ 2347.077359][T20052] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 2347.118786][T20052] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 2347.150642][T20052] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 2347.178123][T20052] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2347.205592][T20052] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 2347.218628][T20052] usb 4-1: media controller created
[ 2347.296919][T20052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2348.439561][T20052] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2348.503163][T20052] usb 4-1: USB disconnect, device number 76
[ 2348.661729][ T5892] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2348.875757][ T5892] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 2348.912459][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2348.944829][ T5892] usb 2-1: Product: syz
[ 2348.949030][ T5892] usb 2-1: Manufacturer: syz
[ 2348.968384][ T5892] usb 2-1: SerialNumber: syz
[ 2348.984237][ T5892] usb 2-1: config 0 descriptor??
[ 2349.100336][ T1944] 8021q: adding VLAN 0 to HW filter on device batadv3
[ 2349.109447][ T1944] team0: Port device batadv3 added
[ 2349.215866][ T5972] usb 2-1: USB disconnect, device number 68
[ 2349.357166][ T1914] udevd[1914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2349.465870][ T1933] random: crng reseeded on system resumption
[ 2349.971868][ T1960] binder: 1955:1960 ioctl c0306201 200000000040 returned -22
[ 2352.779398][ T1983] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7062'.
[ 2353.319820][ T1997] netlink: 'syz.1.7064': attribute type 6 has an invalid length.
[ 2353.674295][ T2007] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2354.306196][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7069'.
[ 2354.987253][ T2019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7070'.
[ 2355.845674][ T5892] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 2356.123891][ T5892] usb 1-1: Using ep0 maxpacket: 8
[ 2356.139046][ T5892] usb 1-1: config 7 has an invalid interface number: 20 but max is 0
[ 2356.574462][ T5892] usb 1-1: config 7 has an invalid descriptor of length 36, skipping remainder of the config
[ 2356.586907][ T5892] usb 1-1: config 7 has no interface number 0
[ 2356.594156][ T5892] usb 1-1: config 7 interface 20 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2356.607346][ T5892] usb 1-1: config 7 interface 20 has no altsetting 0
[ 2356.806355][ T5892] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=38.1b
[ 2356.820371][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2356.832864][ T5892] usb 1-1: Product: syz
[ 2356.837042][ T5892] usb 1-1: Manufacturer: syz
[ 2356.846027][ T5892] usb 1-1: SerialNumber: syz
[ 2357.722305][ T2044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7076'.
[ 2358.689245][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2358.699023][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2359.045122][ T5892] usb-storage 1-1:7.20: USB Mass Storage device detected
[ 2359.084785][ T5892] usb-storage 1-1:7.20: Quirks match for vid 152d pid 0539: 4000000
[ 2359.231957][ T5892] usb 1-1: USB disconnect, device number 73
[ 2361.440499][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2362.201838][ T2077] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2362.527688][ T2081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7077'.
[ 2363.269046][ T2084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7085'.
[ 2363.279356][ T2084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7085'.
[ 2363.297981][   T30] audit: type=1400 audit(1764849744.482:8168): avc:  denied  { write } for  pid=2083 comm="syz.1.7085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2363.769563][   T30] audit: type=1326 audit(1764849744.921:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2363.908532][   T30] audit: type=1326 audit(1764849744.921:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2363.938616][   T30] audit: type=1326 audit(1764849744.921:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2363.968952][   T30] audit: type=1326 audit(1764849744.921:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2363.992375][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2364.006652][   T30] audit: type=1326 audit(1764849744.921:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f731b38df90 code=0x7ffc0000
[ 2364.408927][   T30] audit: type=1326 audit(1764849744.921:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2364.441154][   T30] audit: type=1326 audit(1764849744.921:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2364.464765][   T30] audit: type=1326 audit(1764849744.940:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2364.488470][   T30] audit: type=1326 audit(1764849744.977:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f731b38f749 code=0x7ffc0000
[ 2364.654772][ T5972] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 2364.847358][ T5972] usb 1-1: Using ep0 maxpacket: 16
[ 2364.854358][ T5972] usb 1-1: config 252 has an invalid interface number: 15 but max is 0
[ 2364.868585][ T5972] usb 1-1: config 252 has no interface number 0
[ 2364.876764][ T5972] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2364.897142][ T5972] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2364.907862][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2365.026381][ T5972] usb 1-1: Product: syz
[ 2365.147924][ T5972] usb 1-1: Manufacturer: syz
[ 2365.183865][ T5972] usb 1-1: SerialNumber: syz
[ 2365.854300][ T5972] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2366.994424][ T4149] usb 1-1: Failed to submit usb control message: -110
[ 2367.032511][ T4149] usb 1-1: unable to send the bmi data to the device: -110
[ 2367.260553][ T4149] usb 1-1: unable to get target info from device
[ 2367.271835][ T4149] usb 1-1: could not get target info (-110)
[ 2367.289700][ T5972] usb 1-1: USB disconnect, device number 74
[ 2367.433721][ T2136] /dev/nullb0: Can't open blockdev
[ 2367.801366][ T4149] usb 1-1: could not probe fw (-110)
[ 2367.890112][ T2141] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 2369.014308][   T30] kauditd_printk_skb: 37 callbacks suppressed
[ 2369.024483][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7096'.
[ 2369.033558][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7096'.
[ 2369.227111][   T30] audit: type=1400 audit(1764849749.823:8215): avc:  denied  { bind } for  pid=2145 comm="syz.4.7096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2370.000293][ T2159] bridge3: entered promiscuous mode
[ 2370.005575][ T2159] bridge3: entered allmulticast mode
[ 2370.211106][ T2160] tmpfs: Bad value for 'mpol'
[ 2373.242249][ T2185] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2375.541797][ T2200] FAT-fs (nbd3): unable to read boot sector
[ 2375.577777][ T2200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7108'.
[ 2375.689710][ T2214] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2376.681308][ T2228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2376.688620][ T2228] IPv6: NLM_F_CREATE should be set when creating new route
[ 2378.315260][ T2228] lo: entered allmulticast mode
[ 2378.320833][ T2228] tunl0: entered allmulticast mode
[ 2378.330477][ T2228] gre0: entered allmulticast mode
[ 2378.353135][ T2238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7118'.
[ 2378.362717][ T2228] gretap0: entered allmulticast mode
[ 2378.395874][ T2228] erspan0: entered allmulticast mode
[ 2378.402601][ T2228] ip_vti0: entered allmulticast mode
[ 2378.419246][ T2228] ip6_vti0: entered allmulticast mode
[ 2378.483080][ T2228] sit0: entered allmulticast mode
[ 2378.613538][ T2228] ip6tnl0: entered allmulticast mode
[ 2378.659848][ T2228] ip6gre0: entered allmulticast mode
[ 2378.717696][ T2228] ip6gretap0: entered allmulticast mode
[ 2378.741925][ T2228] vcan0: entered allmulticast mode
[ 2378.754348][ T2228] bond0: entered allmulticast mode
[ 2378.772402][ T2228] team0: entered allmulticast mode
[ 2378.777678][ T2228] batadv1: entered allmulticast mode
[ 2378.782981][ T2228] batadv2: entered allmulticast mode
[ 2378.788306][ T2228] batadv3: entered allmulticast mode
[ 2378.808984][ T2228] dummy0: entered allmulticast mode
[ 2378.873009][ T2228] nlmon0: entered allmulticast mode
[ 2378.886827][ T2228] veth0: entered allmulticast mode
[ 2378.897540][ T2228] veth1: entered allmulticast mode
[ 2378.921181][ T2228] wg0: entered allmulticast mode
[ 2378.927896][ T2228] wg1: entered allmulticast mode
[ 2378.950536][ T2228] wg2: entered allmulticast mode
[ 2378.966559][ T2228] veth0_to_bridge: entered allmulticast mode
[ 2378.973880][ T2228] bridge_slave_0: entered allmulticast mode
[ 2378.989178][ T2228] veth1_to_bridge: entered allmulticast mode
[ 2379.000284][ T2228] bridge_slave_1: entered allmulticast mode
[ 2379.014681][ T2228] veth0_to_bond: entered allmulticast mode
[ 2379.028831][ T2228] bond_slave_0: entered allmulticast mode
[ 2379.058282][ T2228] veth1_to_bond: entered allmulticast mode
[ 2379.075669][ T2228] bond_slave_1: entered allmulticast mode
[ 2379.106016][ T2228] veth0_to_team: entered allmulticast mode
[ 2379.138731][ T2228] team_slave_0: entered allmulticast mode
[ 2379.146265][ T2228] veth1_to_team: entered allmulticast mode
[ 2379.168815][ T2228] team_slave_1: entered allmulticast mode
[ 2379.419936][ T2228] veth0_to_batadv: entered allmulticast mode
[ 2379.469949][ T2228] batadv_slave_0: entered allmulticast mode
[ 2379.487701][ T2228] veth1_to_batadv: entered allmulticast mode
[ 2379.638476][ T2228] batadv_slave_1: entered allmulticast mode
[ 2379.651893][ T2228] xfrm0: entered allmulticast mode
[ 2379.664852][ T2228] veth0_to_hsr: entered allmulticast mode
[ 2379.678293][ T2228] hsr_slave_0: entered allmulticast mode
[ 2379.694369][ T2228] veth1_to_hsr: entered allmulticast mode
[ 2379.708325][ T2228] hsr_slave_1: entered allmulticast mode
[ 2379.726031][ T2228] hsr0: entered allmulticast mode
[ 2379.740675][ T2228] veth1_virt_wifi: entered allmulticast mode
[ 2379.754102][ T2228] veth0_virt_wifi: entered allmulticast mode
[ 2379.767560][ T2228] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 2379.775008][ T2228] veth1_macvtap: entered allmulticast mode
[ 2379.780910][ T2228] macvtap0: entered allmulticast mode
[ 2379.786561][ T2228] macsec0: entered allmulticast mode
[ 2379.791897][ T2228] geneve0: entered allmulticast mode
[ 2379.797387][ T2228] geneve1: entered allmulticast mode
[ 2379.802725][ T2228] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 2379.810218][ T2228] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[ 2379.817685][ T2228] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[ 2379.825189][ T2228] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[ 2379.832611][ T2228] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[ 2379.839833][ T2228] mac80211_hwsim hwsim5 
4

: entered allmulticast mode
[ 2379.846895][ T2228] bridge1: entered allmulticast mode
[ 2379.852274][ T2228] bridge2: entered allmulticast mode
[ 2379.857778][ T2228] mac80211_hwsim hwsim4 nicvf0: entered allmulticast mode
[ 2379.864981][ T2228] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode
[ 2379.872308][ T2228] bond1: entered allmulticast mode
[ 2379.877882][ T2228] gretap1: left promiscuous mode
[ 2379.893647][ T2228] bond2: entered allmulticast mode
[ 2379.905761][ T2228] geneve2: entered allmulticast mode
[ 2379.911290][ T2228] gtp0: entered allmulticast mode
[ 2379.916403][ T2228] syztnl0: entered allmulticast mode
[ 2379.921882][ T2228] mac80211_hwsim hwsim5 žB÷hz¡áJr0: entered allmulticast mode
[ 2379.929411][ T2228] syztnl1: entered allmulticast mode
[ 2379.935238][ T2228] gtp1: entered allmulticast mode
[ 2379.944787][ T2228] gtp2: entered allmulticast mode
[ 2379.957018][ T2228] erspan0.1: entered allmulticast mode
[ 2379.962554][ T2228] mac80211_hwsim hwsim85 wlan3: entered allmulticast mode
[ 2379.969877][ T2228] ÿÿÿÿ¬»: entered allmulticast mode
[ 2379.982807][ T2228] gtp3: entered allmulticast mode
[ 2379.998941][ T2228] bond3: entered allmulticast mode
[ 2380.004053][ T2228] gretap2: entered allmulticast mode
[ 2380.013974][ T2228] vti60: entered allmulticast mode
[ 2380.024984][ T2228] syz_tun.4: entered allmulticast mode
[ 2380.031079][ T2228] gre1: entered allmulticast mode
[ 2380.048700][ T2228] mac80211_hwsim hwsim99 wlan1: entered allmulticast mode
[ 2380.110638][ T2228] batadv0: left promiscuous mode
[ 2380.115670][ T2228] batadv0: entered allmulticast mode
[ 2380.125316][ T2228] ip6erspan0: entered allmulticast mode
[ 2380.188988][T21042] lo speed is unknown, defaulting to 1000
[ 2380.194736][T21042] syz0: Port: 1 Link DOWN
[ 2382.451306][   T30] audit: type=1400 audit(1764849768.359:8216): avc:  denied  { listen } for  pid=2281 comm="syz.1.7125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2384.414403][ T2297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7127'.
[ 2385.120918][ T2309] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2387.591705][ T2320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7133'.
[ 2387.955622][ T2321] netlink: zone id is out of range
[ 2387.960928][ T2321] netlink: zone id is out of range
[ 2387.966102][ T2321] netlink: zone id is out of range
[ 2387.971404][ T2321] netlink: get zone limit has 4 unknown bytes
[ 2388.013918][ T2321] ==================================================================
[ 2388.022000][ T2321] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[ 2388.029971][ T2321] Read of size 8 at addr ffff888056c12430 by task syz.3.7134/2321
[ 2388.037745][ T2321] 
[ 2388.040047][ T2321] CPU: 0 UID: 0 PID: 2321 Comm: syz.3.7134 Not tainted syzkaller #0 PREEMPT(full) 
[ 2388.040063][ T2321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2388.040070][ T2321] Call Trace:
[ 2388.040075][ T2321]  <TASK>
[ 2388.040080][ T2321]  dump_stack_lvl+0x116/0x1f0
[ 2388.040100][ T2321]  print_report+0xcd/0x630
[ 2388.040118][ T2321]  ? __virt_addr_valid+0x81/0x610
[ 2388.040130][ T2321]  ? __phys_addr+0xe8/0x180
[ 2388.040142][ T2321]  ? sysfs_remove_file_ns+0x63/0x70
[ 2388.040156][ T2321]  kasan_report+0xe0/0x110
[ 2388.040173][ T2321]  ? sysfs_remove_file_ns+0x63/0x70
[ 2388.040187][ T2321]  sysfs_remove_file_ns+0x63/0x70
[ 2388.040201][ T2321]  driver_remove_file+0x4a/0x60
[ 2388.040217][ T2321]  bus_remove_driver+0x224/0x2c0
[ 2388.040228][ T2321]  driver_unregister+0x76/0xb0
[ 2388.040242][ T2321]  comedi_device_detach_locked+0x12f/0xa50
[ 2388.040262][ T2321]  do_devconfig_ioctl+0x555/0x710
[ 2388.040275][ T2321]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 2388.040293][ T2321]  ? find_held_lock+0x2b/0x80
[ 2388.040307][ T2321]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 2388.040324][ T2321]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2388.040340][ T2321]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2388.040355][ T2321]  ? do_vfs_ioctl+0x128/0x14f0
[ 2388.040369][ T2321]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2388.040384][ T2321]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 2388.040400][ T2321]  ? hook_file_ioctl_common+0x144/0x410
[ 2388.040418][ T2321]  ? selinux_file_ioctl+0x180/0x270
[ 2388.040431][ T2321]  ? selinux_file_ioctl+0xb4/0x270
[ 2388.040443][ T2321]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2388.040459][ T2321]  __x64_sys_ioctl+0x18e/0x210
[ 2388.040474][ T2321]  do_syscall_64+0xcd/0xf80
[ 2388.040490][ T2321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2388.040502][ T2321] RIP: 0033:0x7fe2e8d8f749
[ 2388.040513][ T2321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2388.040525][ T2321] RSP: 002b:00007fe2e9b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2388.040537][ T2321] RAX: ffffffffffffffda RBX: 00007fe2e8fe6090 RCX: 00007fe2e8d8f749
[ 2388.040544][ T2321] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 2388.040551][ T2321] RBP: 00007fe2e8e13f91 R08: 0000000000000000 R09: 0000000000000000
[ 2388.040558][ T2321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2388.040565][ T2321] R13: 00007fe2e8fe6128 R14: 00007fe2e8fe6090 R15: 00007ffd7a530218
[ 2388.040576][ T2321]  </TASK>
[ 2388.040580][ T2321] 
[ 2388.287088][ T2321] Allocated by task 2165:
[ 2388.291402][ T2321]  kasan_save_stack+0x33/0x60
[ 2388.296074][ T2321]  kasan_save_track+0x14/0x30
[ 2388.300746][ T2321]  __kasan_kmalloc+0xaa/0xb0
[ 2388.305324][ T2321]  __kmalloc_noprof+0x32f/0x8f0
[ 2388.310155][ T2321]  security_inode_init_security+0x113/0x370
[ 2388.316039][ T2321]  shmem_symlink+0x135/0x9f0
[ 2388.320614][ T2321]  vfs_symlink+0x4b5/0x800
[ 2388.325012][ T2321]  do_symlinkat+0x353/0x4b0
[ 2388.329497][ T2321]  __x64_sys_symlinkat+0x93/0xc0
[ 2388.334413][ T2321]  do_syscall_64+0xcd/0xf80
[ 2388.338902][ T2321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2388.344774][ T2321] 
[ 2388.347077][ T2321] Freed by task 2165:
[ 2388.351033][ T2321]  kasan_save_stack+0x33/0x60
[ 2388.355696][ T2321]  kasan_save_track+0x14/0x30
[ 2388.360359][ T2321]  __kasan_save_free_info+0x3b/0x60
[ 2388.365544][ T2321]  __kasan_slab_free+0x5f/0x80
[ 2388.370309][ T2321]  kfree+0x2f8/0x6e0
[ 2388.374197][ T2321]  security_inode_init_security+0x2bf/0x370
[ 2388.380084][ T2321]  shmem_symlink+0x135/0x9f0
[ 2388.384660][ T2321]  vfs_symlink+0x4b5/0x800
[ 2388.389063][ T2321]  do_symlinkat+0x353/0x4b0
[ 2388.393547][ T2321]  __x64_sys_symlinkat+0x93/0xc0
[ 2388.398476][ T2321]  do_syscall_64+0xcd/0xf80
[ 2388.402968][ T2321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2388.408842][ T2321] 
[ 2388.411146][ T2321] The buggy address belongs to the object at ffff888056c12400
[ 2388.411146][ T2321]  which belongs to the cache kmalloc-256 of size 256
[ 2388.425182][ T2321] The buggy address is located 48 bytes inside of
[ 2388.425182][ T2321]  freed 256-byte region [ffff888056c12400, ffff888056c12500)
[ 2388.438875][ T2321] 
[ 2388.441179][ T2321] The buggy address belongs to the physical page:
[ 2388.447563][ T2321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56c12
[ 2388.456303][ T2321] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2388.464777][ T2321] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2388.472301][ T2321] page_type: f5(slab)
[ 2388.476262][ T2321] raw: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122
[ 2388.484828][ T2321] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2388.493389][ T2321] head: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122
[ 2388.502035][ T2321] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2388.510709][ T2321] head: 00fff00000000001 ffffea00015b0481 00000000ffffffff 00000000ffffffff
[ 2388.519358][ T2321] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 2388.528003][ T2321] page dumped because: kasan: bad access detected
[ 2388.534393][ T2321] page_owner tracks the page as allocated
[ 2388.540080][ T2321] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (syz-executor), ts 62392042581, free_ts 15051022205
[ 2388.561429][ T2321]  post_alloc_hook+0x1af/0x220
[ 2388.566184][ T2321]  get_page_from_freelist+0xd0b/0x31a0
[ 2388.571644][ T2321]  __alloc_frozen_pages_noprof+0x25f/0x2440
[ 2388.577539][ T2321]  alloc_pages_mpol+0x1fb/0x550
[ 2388.582384][ T2321]  new_slab+0x2c3/0x430
[ 2388.586540][ T2321]  ___slab_alloc+0xe18/0x1c90
[ 2388.591195][ T2321]  __slab_alloc.constprop.0+0x63/0x110
[ 2388.596633][ T2321]  __kmalloc_noprof+0x501/0x8f0
[ 2388.601462][ T2321]  __register_sysctl_table+0xea2/0x1900
[ 2388.606985][ T2321]  __devinet_sysctl_register+0x1b9/0x360
[ 2388.612613][ T2321]  devinet_sysctl_register+0x17b/0x200
[ 2388.618062][ T2321]  inetdev_init+0x2b8/0x580
[ 2388.622550][ T2321]  inetdev_event+0xc32/0x1840
[ 2388.627222][ T2321]  notifier_call_chain+0xbc/0x3e0
[ 2388.632254][ T2321]  call_netdevice_notifiers_info+0xbe/0x110
[ 2388.638147][ T2321]  register_netdevice+0x1792/0x21d0
[ 2388.643334][ T2321] page last free pid 1 tgid 1 stack trace:
[ 2388.649123][ T2321]  __free_frozen_pages+0x7df/0x1160
[ 2388.654310][ T2321]  free_contig_range+0x183/0x4a0
[ 2388.659226][ T2321]  destroy_args+0xc30/0x12d0
[ 2388.663798][ T2321]  debug_vm_pgtable+0x1a2b/0x34c0
[ 2388.668802][ T2321]  do_one_initcall+0x123/0x680
[ 2388.673550][ T2321]  kernel_init_freeable+0x5c8/0x920
[ 2388.678743][ T2321]  kernel_init+0x1c/0x2b0
[ 2388.683070][ T2321]  ret_from_fork+0x983/0xb10
[ 2388.687638][ T2321]  ret_from_fork_asm+0x1a/0x30
[ 2388.692388][ T2321] 
[ 2388.694695][ T2321] Memory state around the buggy address:
[ 2388.700308][ T2321]  ffff888056c12300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2388.708607][ T2321]  ffff888056c12380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2388.716654][ T2321] >ffff888056c12400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2388.724691][ T2321]                                      ^
[ 2388.730305][ T2321]  ffff888056c12480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2388.738344][ T2321]  ffff888056c12500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2388.746377][ T2321] ==================================================================
[ 2388.757623][ T2321] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2388.764824][ T2321] CPU: 0 UID: 0 PID: 2321 Comm: syz.3.7134 Not tainted syzkaller #0 PREEMPT(full) 
[ 2388.774094][ T2321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2388.784134][ T2321] Call Trace:
[ 2388.787390][ T2321]  <TASK>
[ 2388.790306][ T2321]  dump_stack_lvl+0x3d/0x1f0
[ 2388.794886][ T2321]  vpanic+0x640/0x6f0
[ 2388.798863][ T2321]  panic+0xca/0xd0
[ 2388.802565][ T2321]  ? __pfx_panic+0x10/0x10
[ 2388.806965][ T2321]  ? sysfs_remove_file_ns+0x63/0x70
[ 2388.812163][ T2321]  ? preempt_schedule_common+0x44/0xc0
[ 2388.817613][ T2321]  ? preempt_schedule_thunk+0x16/0x30
[ 2388.822976][ T2321]  check_panic_on_warn+0xab/0xb0
[ 2388.827898][ T2321]  end_report+0x107/0x160
[ 2388.832235][ T2321]  kasan_report+0xee/0x110
[ 2388.836650][ T2321]  ? sysfs_remove_file_ns+0x63/0x70
[ 2388.841835][ T2321]  sysfs_remove_file_ns+0x63/0x70
[ 2388.846841][ T2321]  driver_remove_file+0x4a/0x60
[ 2388.851679][ T2321]  bus_remove_driver+0x224/0x2c0
[ 2388.856599][ T2321]  driver_unregister+0x76/0xb0
[ 2388.861352][ T2321]  comedi_device_detach_locked+0x12f/0xa50
[ 2388.867159][ T2321]  do_devconfig_ioctl+0x555/0x710
[ 2388.872166][ T2321]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 2388.877704][ T2321]  ? find_held_lock+0x2b/0x80
[ 2388.882369][ T2321]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 2388.887814][ T2321]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2388.893606][ T2321]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2388.899483][ T2321]  ? do_vfs_ioctl+0x128/0x14f0
[ 2388.904239][ T2321]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2388.909250][ T2321]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 2388.916089][ T2321]  ? hook_file_ioctl_common+0x144/0x410
[ 2388.921624][ T2321]  ? selinux_file_ioctl+0x180/0x270
[ 2388.926805][ T2321]  ? selinux_file_ioctl+0xb4/0x270
[ 2388.931898][ T2321]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2388.937694][ T2321]  __x64_sys_ioctl+0x18e/0x210
[ 2388.942444][ T2321]  do_syscall_64+0xcd/0xf80
[ 2388.946934][ T2321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2388.952810][ T2321] RIP: 0033:0x7fe2e8d8f749
[ 2388.957206][ T2321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2388.976795][ T2321] RSP: 002b:00007fe2e9b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2388.985190][ T2321] RAX: ffffffffffffffda RBX: 00007fe2e8fe6090 RCX: 00007fe2e8d8f749
[ 2388.993140][ T2321] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 2389.001089][ T2321] RBP: 00007fe2e8e13f91 R08: 0000000000000000 R09: 0000000000000000
[ 2389.009039][ T2321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2389.016990][ T2321] R13: 00007fe2e8fe6128 R14: 00007fe2e8fe6090 R15: 00007ffd7a530218
[ 2389.024946][ T2321]  </TASK>
[ 2389.028284][ T2321] Kernel Offset: disabled
[ 2389.032582][ T2321] Rebooting in 86400 seconds..