last executing test programs:

8.721566983s ago: executing program 0 (id=2690):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/49, 0x31}], 0x2, &(0x7f00000015c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x71d2, 0x5}}], 0x31, 0x20004808}, 0x24008840)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000500)=0x6, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xfff3, 0x2}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r7 = socket(0x1d, 0x1e76cd410a4a9bad, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x20000010)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtclass={0x2c, 0x28, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {0x3, 0x9}, {0xffff, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x20001851)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'xfrm0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x404c815)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003480)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000840)="31ef9e8e8f21d0e0da6788f9301012606482a027a419c69d55a17c9b791af0dcee7d89f3dc6a698b12140df6c3632bf974371d450d5708112161af31e29d443b76bdcd98940e17b9bb16d33de6b077b9a641b8", 0x53}, {&(0x7f00000008c0)="2499aabecddfc6346de79668b342384321aca09101efcdd7b8a46dbe510f80e3d77b96c7c13e7730760e9fce859cc21f6007ed3cdd86d693288efe96b63d583fc167d25429723d5f8404fceff7405104b03d7b7c552589039879f334ddba31559eada1a1b472657936c606ef39168268e8c4a487ab190a275d7c6a9254022bc2c7b0050fb34f9b4d861ee5c4afd5276c8cbd55a1a0d1ee049ed984e9064dd84c230f4f42955420c2167018d9b612a8a92c574d3db7f85672bbeddef4fd49b6004e3d96797569a8", 0xc7}, {&(0x7f00000009c0)="ec78ec7e9674d8458129306f36971972ff592ad0a441658d972ec084d03820eff293f504d7f047b70dd0a227e8bcd71472303b250d0208225b86ce89caf78e0cddfcb47129daddf8bdfa03d73da1f0a1720a7543e73bab5d0a5ae50832fa6b8e944739e93cf126381eae90c546540f3fa2795a14c33df51f3bcb3385f70425a4927d", 0x82}, {&(0x7f0000000ac0)="389f5ab57a477c2ab3f1e310bb7e346598c09b9fd84067d2793a7045231e995efb41143d48077b69f272f6fcec170f9435457f", 0x33}, {&(0x7f0000000e40)="a4d9644162b73b0273f2c40421a187fcd8be0e65c39fd971322baecde382531cf1fe6218ecf516f57f939d520b063ce9ad2b12768e80af4bd0825ecac2fb9d95e93af5361de4a68218bc4357cb2ffe15a24d163e88cbe39af57a6532ac66ae201a2baa447bdb3f571e2523dc5ba0288197728d6313916d3eeacaccaa25609f8bc9efa0a734eb18c0330d6a2ba0c7f220bb4be034900336a5d3fde336f4796827d87d8305442445c37b", 0xa9}, {&(0x7f0000000f40)="9bd9f3863904846e2ad71ce1d18f0c26f56594527141ef4d24319271f37cdf197adb1cbc984e7979c48c9d2a305006e847c0d69b5e6c972be84482503c13f798031340e6c49d5356c1b000b07d8a86a53324fd69c3e728990d20483f3cbffb022ccdb9b536306fdb0a82bdc137bf19", 0x6f}, {&(0x7f0000001000)="4e4942952a212da885a56701f0f3e26bdba885cfe6a6c2cd54c5cd5a9dc49d097bf966f67328900a0c5597758a7dc47a23f9851a3ed192d8078793a6f66746a5c0f39dc836ef81033e638ce42fc71b6c071a686c7d2f0946d7a9c912ded2d9afdaaf6430f8365795d9fc3bab5720075bf74ef07a439502c7f3f3099bc4d5b419c3b4ab90b701bd780d0389ef54ba41d6acb6a7f3fd01b05942ce0b6e6558adc8afe1cc747e017412e0e57db6c348c9f786fc842404fd27c8", 0xb8}, {&(0x7f0000001100)}, {&(0x7f00000011c0)}], 0x9, &(0x7f0000000b40)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@end, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x6, 0x5, "3b24af"}, {0x5, 0x4, "8654"}]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x3, [0x2, 0x70, 0xac1b, 0x1, 0x1, 0x8001, 0x4]}, @lsrr={0x83, 0x13, 0xd, [@empty, @private=0xa010101, @empty, @private=0xa010100]}, @timestamp={0x44, 0xc, 0xdc, 0x0, 0x4, [0x8, 0xffff]}, @ssrr={0x89, 0x13, 0x37, [@broadcast, @broadcast, @local, @empty]}, @ssrr={0x89, 0x13, 0xfd, [@dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x3, 0x66}, @timestamp={0x44, 0x4, 0xaa, 0x0, 0x9}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x148}}, {{&(0x7f0000000d00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000d40)}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}, 0x11000000}, {{&(0x7f0000000e00)={0x2, 0x4e23, @private=0xa0100fe}, 0x10, &(0x7f0000003380)=[{&(0x7f0000003300)="5d6c7ee4571d0b554ba6f8977ff283e41d3edaaf574e5fba9e46c9e867df5fbbdda7129855c7fc0143cfc5b75e2efbe1f922476e24e473f2150830c953a484ed990f5e4dbb4c3f147257be78a8ad807215a377b1aa7dca3c9a6d3319485e6dc2d14f7b153e4581b99a1febe801dc9389c067d094bc6982c26a90bddc62b591", 0x7f}], 0x1, &(0x7f00000033c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x48}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x272d}}], 0x78}}], 0x4, 0xf00)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x4, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)

8.465759493s ago: executing program 3 (id=2691):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x18, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

8.378963324s ago: executing program 3 (id=2692):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) (async)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000400)) (async)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000400))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000e14290526bd7000fedbdf250800010001000000d2472139d9eee33704b72d7a282c8f64d6064f72f681584e6635d82ffbe807dbe7be0853b82f614ccd5806486d3482b9d6c1d9c1865914331965a4764d3750e396a7e55619100f4c6033b47ef5c93a032b0648a9a368f6cb025d15514c0124b3049edab718e2b542462ce0f8f087e249b09e7ca5c2a3b94beb24175dd8e43f50efadf2e3f23f844ce5d273c79aefb2fdc4e0e5438129f0529192b188455dd0986b56e600"/198], 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
close_range(r1, 0xffffffffffffffff, 0x0)

8.345175294s ago: executing program 0 (id=2694):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f00002c7000/0x1000)=nil, 0x1000, 0xf, 0x50, r0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x800000, 0x0, 0x2}})
ioctl(r2, 0x8b1a, &(0x7f0000000040))
readv(r0, &(0x7f00000012c0), 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
getsockopt(0xffffffffffffffff, 0x28, 0x0, 0xffffffffffffffff, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

6.672472609s ago: executing program 2 (id=2699):
socket(0x2, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000200)=0x7, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000200)=0x7, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x7f, @loopback, 0x1}, 0x1c)
listen(r4, 0x9c16)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = fcntl$dupfd(r3, 0x406, r3)
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x33)
close(r8)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaeaaaaaaaaa86dd6000006a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84ff0003", @ANYRES64=r9, @ANYRES64=r0, @ANYBLOB="5000000090780000"], 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880)

6.619067323s ago: executing program 0 (id=2700):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003480)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0xf00)

6.564154668s ago: executing program 4 (id=2701):
r0 = syz_clone(0x30861000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
exit(0x100000000000033)
tkill(r0, 0x12)
waitid(0x1, r0, 0x0, 0x100000c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

6.475990234s ago: executing program 0 (id=2702):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0)
r1 = memfd_secret(0x80000)
syz_extract_tcp_res$synack(&(0x7f00000001c0)={<r2=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000480)={0x41424344, <r3=>0x41424344}, 0x4, 0x8)
write$tun(r1, &(0x7f0000001300)={@void, @val={0x1, 0x80, 0x2000, 0x2, 0x3}, @mpls={[{0x8}], @ipv6=@tcp={0x8, 0x6, "14afea", 0x10a0, 0x6, 0xff, @mcast1, @mcast1, {[@fragment={0x3b, 0x0, 0x4, 0x0, 0x0, 0x8, 0x65}, @srh={0x87, 0xc, 0x4, 0x6, 0x9, 0x48, 0xf, [@private2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1]}], {{0x4e23, 0x4e21, r2, r3, 0x0, 0x0, 0xc, 0x4, 0x2, 0x0, 0x5, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x8, 0xf989, "8d9486dc"}, @md5sig={0x13, 0x12, "bcc07c854aec587db7fce707f4fcee4d"}]}}, {"19278d30c78041473d509189999609261482c3291e64734a9d7d7b948f2cda905a49ebba8ffe09fc6264f10ede3d4ed29d39023bdc93f2ae6d951dd7a7b31ecc2051d2f730652bcbf92f8d78dfe3c02c0791284c46da0a2285bffbffbf912545f91ce2b35d7fd3fedbf060229644fdf052de1f7629a96a11c3bb656972cec25b256edf7f7ee59026586d091fc2ecb7aa1fe1309b1188588da643a8ad3b4078d89c4bb13df41f37f651f0c4f57b1eb61f4bc9e3d6f6bef831cae1332e6c37014c1cb271d436847959429382a5d336911c78aa39b4cb2984b4c6a12feeb55274a4907e578274f20841f4a8134566f74818ad96a64aaaf5658117237f3f179436760ba33056714b751963048ddf115f8d667ce46809dc49c58d9f916867b1482de948aa4e6beb2c89a72eb26cc921a38d299f0effa611ed5409253100b699ffc7287e06489c2b320ccd90cfd17a6154688f17dbcff9544c109136517a2b4cf7882370ecf23466b55dfa8477c4e02b50c394a4c12a75d9fafce0a4a695b7cf380baa83b314ebc2237b240aeb09a46b3d95d3180c73845a42b4e352a3bd21aab48572c7ad7afbff67d933a66629040898ee997bfecb53fb300eb4fbf7dc9c99ceaef7fa406052da6f5c9353604096e44edf664c358a88961d4b3ea5a37643684d510524db9983e4aa797b977bbe1f3e42d53962cf8c7cfedb9d70d7ff709e3079be8881e1bf306bbff49ed24626de275e9d083b2c7aa5339db5c1407ad1baa13a585cdc650a64fb368bc1dd5f16363c9ec02106d488146028be8f2b2f6d3036d42ef8b886ac04ee9e81dae58af8fc8d55bf43adc8f2a119e22ef3d584cbbfc7240e82b7a50b977995944ee1c8da13c2561d9ca633151098da00fb77ff0c540d05e11edd907cba73e2f65e4495b473f41d0ba9e485eff07eb4d1e9b928c2b1588a0ab625ea03a3e9850ead13df1c9d046be18c04effac0d60a895ef2a166e9962edde8b55eb129d3cf2eeaa45c1a72e196be00d61ab78afb44801f4fb8cab265a6aa05d52cb5086d2644a3acafc2382f1ff770e75576ab0c3d3720bf3f29f960b61b7184140d809b35d2ee619bf5ecbce7990a5165b8b5ef63f0bf7f0574921629aab9baac01b02aadf6f754c320a4f03357d0061619d68d80ea52620c4dcb89b04351a05d57fc06696ab3373f75d4277fecdc8f5fd157fa541f99fe64ca0f91c4cccae7de1f64ec8ffc92f76263dc1f558a8b6620aee8e03e2233df4a2f8b5cf0406647f59f013c22812fade4c92df89b2f802cdd368da8c7eb1c90444c4e72bb4689af2d221a228a8262b88ba22406c01a2291f4e357eff91744ff8e0b69948d8f5179f624607634040ed5b782913a59c282a9e0d38a23cfafd2903a13e9aaec4142b4ea0579ad77698b0b595d36f0fa7ac21148b0104b210a96476ad06dedb591be1e61517613e570dd87e94431914e4f966f506709b0aae9cde63d388ebb6ade934ab2b792244bf7441fbf9b59e1f690f7ef453497ce75eb9c9acb0688f241397caba09afd8007fb82cd202c8b0e5ee9a6212dda55d8a4da41b2a8dea54ee5076ebd4f8f3c16eef2f1df2443f16e2ecd07f761845201a1503d0cc91d051777b267f07184a91e6cffff92f5806b2a1d12463bcf09002afab2ad5e1b14ff012794e807d9e2252b29a2d1a78841daa331fff452a2ce3cfd517d57e6844b6a481543d1c79c8b5ced8447f80cd9a1cec0b12935858e06bc3b762f7c0de20b8f971b77a012259a476d1a2ef46845ad0807b69626c8a3db832e7f6023b3cd0bb5c0fab09fac14ec999659cf1d766407d5d9ce4195ae182227819c43637eedd2da606e3704f521793bd8de948d2a01af19257a6bb5ad013cb3d7a56b46fdea7200ff8bfb6623a54ea2be1219974b5d0436a7e9b220d1224ca63bb727bbc2f61a8c4229d06eba2ead758aaa933bdda7949b8de7ef59d376047fa007ad71f754b7591b18e788b3f811ae00f898a5002c6e0d396f48b87d0947122909be620bdfc1091c6e6fb3a392cb0f6994aee9edd4f03c7eed032347d931dc794ac2a1357198d29e70fce7d27107bbcbfae475ba4a616abfd2a1a9f275856c9b0fb726423c65febe0017702a258f42dfbda5dd61d60f042bc69ca47d48b3420e5836be39b4931fc34d3f4653eabefe0eb0e118ae56f21276db1c41948f6cdc93ad9eceab81ce9b626820ba8bd279985b86aa191b007f0c3322f0e0e5c8ac9d0a88b124c73eea5a0667bc1f9fb37bea2a403076a05a2062fb7a4d0cafd3b599c4c8a961021ccaf1eb38a8d1812299608bac94afa40628abdb91c040bf22375e2073787a7815364f056b7b3a0b8b0829ca974bcd3193ad984fab0fd6cde890e024eb94337107b4604f72ebf4591707c71a258b8c82376bd068061490e07de8a3b443d66091cc7a3e22865cc172d71548cb6b3ca2c5786307006c77f44856c4085c1c37f03ed75078e1713a911a761fa3d99a0f4a1cc3a8901cd046533f3325b93d916b04f876d6102bbfafa47e5f6dde6cb029de477a8f3651c34192e82126bb508b08c89cf9c03a27baade3de20ec5960dba6aba84d4f8f4d8c9da649928fb40f8b02b8fb27901728abc30306800f19b7387c1a697546f2109c8d84c37b36a96a8a63e444ab10e15cab19f9209b6d4cf393e51fc609f1a3c02dce56eaa44a1afdcf10139c76e0881a1296b561395d103db401a27b282f5bc97121293c473ee0cf35de49b7a494ad244a11337c1b8b4ef23d83df90753d5c4a0292bd16a6be437f42e14d839cc4adf93974cfbf8df3724e487fb3082567072612df2f377756b54f79dd34f67dd27e1fe7f42bed5a04c401f5c2371dace589e82a2ab89b628949ad97fd1b29ddcdc4fe8b83eae50b438f4eec7b59d8e8b255fe2fe2f67daf3ce7292f515f4fe04c2ea74eaa1403efddf2b63401c213fe637f0dc8639f59638c87691702e8e70d4b0d8f65fdc8cbd8d56f72b568648f0b2bbcddc54f404bb9c31e72eef6b5cffd95094050e2e06e8179445a4ca3123a36bd87bc78edad898d7700f9916191a095a5540ce1e85a29633da6a0a8e82b141c8314ab0bf27b7e0ed66898eed9c9e0668335c28590c0dcb7326820ffac7ea3d80690277156c10631b54f179c9f85fb5b672994f2d414e0b00649ef14f18554ac489f3eba7933f2f6ec14e6c6c2f7c93e756d73a14cebba40a0204d9b460fc8a416222a2fbec1147d3a28af9529333ed20c35fbd31e84cfa329a36f38247f5295ad36ca131c6468cdaff8d3244c0d255327d4db5af055cd93f7075366d117d8b3e74c9a1e43f26ac7f8390eed253f99637645f1475a7e167907652278621eac8f9e68ded6b83dfbf1921201ddba60da661c577b8c69cda0b9982fcf9bcc3e2f5e34e7cd82e2cb02953dc9d06215400bfa70e5416a5ccbcd75e6d8dc9f3d0adef024f2e1a98731ecb8184c31a360e453a533acbf6e0ef9fc8e288ea01509433f265894d2500a543c13619cf384e3f02ab4b9623b416b775c747ea8e2fdbb668fedff28566349beb82aca031800278efc353562b1d570db6d500629c9e8683e20f89a3ede94cb8933f9206f562be4feb35c513a6c3c623add9fcc2d663375baa97c2e56378d91352a8ee6a9e55086a71c1742a76f3ee3dbf25c40fd4052d755328c5a4de6bb8a28cc23484780319ac895aa3106338e4a304d6f8cf92fd12542ec7eec5e701bfff6e1a0c3b4fd1f948cfc79549df362c09e493f81e0fe7c3693498cbb1a865e83e77cdca1c15e20fb1c1e7b8cdb367796e6bbdf88f3fed225283e6f7a7daea509b62f5afd50f0de8824182afeb357de72530ac1278a019907f0ef7f6111720faf5ab2bfac9a7c97cbd840d43099e4b43079d5b658bbe896971e26e83c76db29eef504d475783a448e5cfb34420b093ebd7222f5d06aab012c3caa8049e06da451efea43b89f18a2b249a4a32d5dc46f55a8416561416f02aa88d6baec78acc3fd696c92efe3c906b9701510a5c2490ba271e531d8d6bdd6d6da5464b68162e972d6d1de7027c3024aa194a8f9cdef33a644696d4495e2c740626daccc5c36f2505eae88983b8f59046414f8b4e8328fa0cf9a0b4332ed229ee621aab01eb110c6296bf83754044b895be67161977577b3507a74e4f4273038d3cf05c827fa796a00aeb31997e12311be8bb5b56cc50924202f37c01fc952fd35b4b692dd89101b6d459dd42867bcfae1570bd6dd9edcdc4f134aee7c3649d5fa3774bbfd1bc77f330f1380291dfdd6a21996ce7de038f5bc6aebac5117774f6d4c1f2623b59070aa2b3a41020d0ce57fe2de2c094f7c9d4d7d12d159b421e6f16ffd3700adcec391bca20154c653f2d43c901c28b9183b5addea3ad2e0856c485e1538fc2693ca5a9cb035f1d6e564d21089c76857d2c5df26d807390f2c406a992fe7d761bbbcd93d8add9bc1c7c5f4bfbee63999992c2dfe7ab5ff6f0413ade0424feb76c4c5cb5d80b4298373cabbfe6351205d94ebb985acf677a6dca1bce740be4752ffa08074c3bb6525c2f9ce7e010cfbb544a9b86f3aad49680765fd3d78132587c50005c0f2ebbe3e5ddef9ae0854863f4aae64adc67dd3a59d4f446e12265c3b21c3592cb50c4d9d3166f376c450f175b1ae3b1297067efb4226141293147c23eaee2417673c9c2fa09c67974bd37e0127e37a6b52c5439b14fdd5fe44ef9e18fed6500c2aac4ef07ffa27c5a0961cb4de479947145deaea5d7119bd7806f852a80d402e526274176fe1677ca021413ae305ec4f6d1ae1f202210f525969350ca8c2b023df781fdcc275e50ec78cac46b663fd3f9fcc4c9d6b4f9caeac3793fd960299bfed5d7f05287529be860599f71835abfc36577100594e1e20b4e5b40ad06bbd97f6d3ba7af07d3564e00dae7af94409edb8599d2c6625667a4b5d42ee05a3574008763ca26d6b7af6f16146b428949a100425d9e1dd44ffa35e27059606741a5de41b821f2ef935b5cfaa9bd4ef723dce11a9337ed50436f83eeb4a6bdfb25cee2c2ee8a10d01b2c9c7ffda86470b1d5cd88705ee2cd5501e2a285d8f1d952817407b2d0096f654e1d5218d7bf54eea9bfba6e398c67a319c819eb2e3341156acc73e7be8c0008ab08bf6e7314765782cdaa47aeb66dc2e87a3c3d7d2ab8d3127916f28eed88204ed7f62b9b1aaf63fc2f5382c41c2b3e5e246c73a7a0a481f9f40f492a090408c2ccbd5f1ab38f1e084fabf3e047171d33ef7832b2cc172d25b32272e56652b5ea7e71c3c87cfb092969f2fe3e6ba5b17644cb76f6937d38294ca531a65f25ae4256185f7db1b33a1d2f607e540b51a4cbc46ddd70a79f3f21bc52ea94cab984263f57f849a82bffac6535bc15fc0ebe0757416fd9b746fe6018976cef578a48337053aa18e149822969b7597ef070b3f2bddec879f864dcc104797c562cc26845972b067a73d8242ef951421cb4fda646707325daf3e4f7b9fa7494314ffbaf1f6ec731363916f24eeb24539be0ed5121ec5081ad21f6c7de06877d41b87cd73795a22c5ffb626f984ecd50b3decae8148dc1e7bb888fb026a6f4329ac3be9798579637c19c2a38f34fd2bdef011a9fd0533c4279ab9791f33e76ed6ade6d9ee736039be0f32adc23f7613193178747eb8111c29e44980d3710ebe0ba55ba06adff1f8fe25cd3412216017f185b48e09915cf4828edeb4f38f30750c0eb5ded9d3c2e0d5f04024ef2873362f029bc9b8f648a98955053f57f0990dd6b2ddf550c0832391f6df7d5d"}}}}}}, 0x10d6)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2b8, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x933}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc28}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6b3}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7ada86bcbfd600d715d2992b698c287c06e15cfca1722f444c1323e3a8da458485"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7670}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7cce49b77a60840bfb074fff88671a134827e6289ffe1dc80f9ba2"}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5647}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc77}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x2}, 0x40c1)
syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'k'}, @global=@item_4={0x3, 0x1, 0x0, "1708fef6"}]}}, 0x0}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)

5.901694334s ago: executing program 3 (id=2703):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002700)=@newtfilter={0x34, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x800)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x36f2, &(0x7f0000000040)={0x0, 0xc8a1, 0x20000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x900)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x400, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0x8003, 0x4)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
recvfrom$inet_nvme(r7, &(0x7f0000000080)=""/70, 0x46, 0x40000002, 0x0, 0x0)
bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10)
recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

5.782404797s ago: executing program 0 (id=2704):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1f, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

5.594126025s ago: executing program 0 (id=2705):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20012cbd7000fedbdf256b000000080003004878c88e1147326677c7203c8aabb2d25ec5861466e8c589a29051e37022ce8954a793fcf61b8dbb1ff91cb09ee7f6eb7ff39e7f57882671621664a0c10e1412e7b1263152", @ANYRES32=r5, @ANYBLOB="0c009900800000002f000000"], 0x28}, 0x1, 0x0, 0x0, 0x48880}, 0x4080)

5.591527104s ago: executing program 4 (id=2706):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x50)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x40240, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDMKTONE(r2, 0x4b30, 0x200010)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r1, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSPGRP(r7, 0x5410, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000240)=0x3)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)

5.470464899s ago: executing program 3 (id=2707):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000006080), 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000003000000020000000300000000000000de97ce5bbbc39d", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2ad, 0x0, 0x8020}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc)
r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = socket$packet(0x11, 0x0, 0x300)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="8b12421e2ad4d4359c2b5b9a782f72f8e1a65ba1c3066e72d3c8a9a6d2095f335ab4f42507f25aa2b5276611ca0f37a4273af4d0b64d3d6181e0fd6371e2a32ab9d7b1ce2c9baa5d5dcd348c2a96ef0e0c2423c7df32624d05387155fd98ba34653ccb160c8d8270cc75b7771d645dd01928eb50271d8912374252ae90378b7d5b541e8f4c7274d3b20be8166ee9fe49c2eb621de0bd3954d07a5c46537784393ca05bdca81e14d2911b59bf6e255bc1d3ac65b564ceea243d92cbdf7feea286c6ef16b84f047ec4a678ed69b2f9d0bdafb1aff6", 0xd4}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="026316ebadcae91a499abe191e4c916cfd", 0x11}, {&(0x7f00000024c0)="b73d0243ba6e2d34c34493a53b15689443a8a8db", 0x14}], 0x5, &(0x7f0000004640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000004700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000004780)="b5630c332105eb6a26d9ff8555d430a0e96ba0eabe2ff0d6ccf4eba0b8757b14ae29fd0b41937fd2c45d4ef4c2e518e51c6f41f3fa1d7b5b5aa9f16f973b1962d60430477c52b6008b3b3459f7cc88aa05a273dba4d204a2071e52f3edc6f888ec9ea1f0196f7a1fc597cc7230e884788cd3c0289913a0c5f923bc462d462f5373d6bbd0cbdd4e938b37214ee2601db6ed1a25e631a8fb9fcbcb74707349ea47ea3fb432b494fcdb8ac9d37356b760781243a76f20dd0196643669b5446d627ffbe1cdca292518c48508193667d9b65705d2f5ec9cf283fc5a82316e806e3fd613802cf58a9764855a0b3dfb1ef026e7a6a2720a65e631ac1ad25c7279977377cad00b65edbea214f9bbf03b4fcec8c3471b6561d180c54604249ac20e6f6a30a75b3012514373917fec48ce000225d3c901b5a5c37b7eb73ed3ed9cd1357e0b26c7ddc29f7986d2928539e7f6799467b00ad9ea21f52d5f21f550cfe56b173b8c1ae2574bbac7a77ac1617775c7bc67fb61f4fbc295598605eaca46630620d6182772b74b9008bad1fad14b9be70ebedd0d73107fedf1fbdcabbcff80f2cb0e34824af67cdfa37b9939a84132054b8f69f64021c62f268eb9423e08a91f03af1b249b60791d7333d11ed9236a8aa98af1d9abe064a37d3a88cfecd2adc635674f359a53661c01530b0f080b2b2f2598ece590acaf7049a7141d6c2be3a2563dd423d932fde54aaf129e2fd4b15332389f490c63ff10976fd8623fc14938dc83f376d237b1244809ac0aa433902ece9aa9b5bcdd0af7fc9de713d1735b88846784647f0ffcaac108d6bf0882528f75a908a5ddf133534b3c3149a0db9cf9604acabc3efaf00d605339217ba5a4150c01a62d05a1873b90939b666219edf1dc6a90f96d368e42671ee353df8d2b7cec3d46591a6cd5c7ec6364c36a6986b54ae5c20d54ef6235ed7d361105b3cb089cd0b1a85eefc88181ab9aeb2c95082b8e372d0ae75a90404eeb2585b46ff12e979083dc4c347319e26c568d65076999dd1c61adaa76beb2370871a91ece33ca7d2381741ccbfc62bccd1f80807b5415760fd7a0184540ab4cd470e790c2e2431a69807c92f90ffe7cafe57c54734113d22e196d13358918d41d77f298a79a008fe156e8636f2a3421a28bdd7925a1cf05e21bd5ab47746f7c56a9250ff064826f2a09f66ee4f62d57dbdb32318219c6063f79140acaafd56744f82285efaa64bca865301e107bb6536478d3e489150e46b35cd73f56e4fbcd0f80e434631b13c4a56b469e31b10df9a6f1d1f0b1c3a9881204241cbae65c9a7ee89dab60e31b1cfaf09bf875e58f950f7287e0ea1fe24329eb93ffa9a98f28fc6dfb63a25cc49289992106aaefe9c654d6f0cc17761104afb8f59498c57cd4b46627d801ee7858ba2ad4be2a63afae14b42ea99fc1fed9b2a5cc6b98aba0dd5606c7c1b281a0a4e00618c2de74663a0516aff03ae2e6f3368d1cdc0c1783324dcebf9fbefdea9ec308c44e78d807525ded64c5466dcf67de17f03bca8b2c882db293e8a454c767f1c8ac815bb7be1691741650f293bbbf444ee2286cca40dc6a7a0b06e3d54cfea688867809db474440a738e3ce2786e8af1e3767cf34c3bf006e1c0774b7e3a8ef6918b44a4ee098b423515790eba07a4809eb569bdc7216d065f9534340385290b7e2154f0d3199cbc8887847594365e7b72e96e98245e3ce31ed2d84002be3ea56f13486e53a23c363d0155193392e2383075795ec5707aaa8b57df793624e4b09d262695fb1df3877d0905fb6395e1ac87ec42160512de425b9e174a75dcf8b5a04bb33192d4b7741335cc9de0fd8d1eaee72531fc352608aca1fe2687a767613da515025faef88db33c60858db07ff71b33b0c2b100fc4070c33f811ebf3e95333bc372c47f9a7ad320f3db9cbd73e92e0f1c2070392877805d83236ad2440c1e1dc386b46f0c2e6ce7e48f6a77b18139cbb0121b065bc3240df7dcfb7683e9881a7920456664bdde741a843bcc5c4c5155f29b9cb3742da3242bc125bcb833f78d04dc8344ef102977b6c094778cca5c1adc524757691ed4d7822ac16ebcb17d53e11a0d6a95ba21576429347de40c295481981b24aa3a79733316458de9a6a223909a2e5fdf97b986640a11b745370268c49c6f92fc8d52231737bd3334eb6c1f3aab1f5619f6c06a40157eb86bb1f59ad65c3422ab973a5d5b98d709871f3f198613de618285057e295f36d292e6ca77216ccfaae56b0b335b581b09631d42fdd9fbcd924c3f2b0abf4f7ea9d99b6becc68d80a9d006e6fe590de5eabde5755bf66294108a937693fbb1829e4b25c9dedf4bb9d94be81868d7c32946b83dd61149409730d5220f8864d4d36967f2fd44b32be8c8318dfc68c9670aaae8d70477017e8d05cab582a25d577d2a0196667e49a8da59ec8fc097a51b908ed01521eca880d69b51dcad01ba0a895c50a037fa473d560d61877a9892e253c36485977e096f91a676df5ff281ed2dea1e885c0bd157cb9b663f2cfdca679f3ac2b3585759a7a5fc5f7514e6a8bb7e1bbea7c4cab76ef94c4938c998ba52c3bd5ddad54e0929fe6058d8989f669f2bc941b794b8684b94590c0ddce4e76f842b93301ce11d2c8ac3225274113ebeedfcb5faf98503df1e9bd4a7dd4255252c775f79d72f1e6952382df33cb38c39fb62f96ccc9a8df2a7ba29374574ba8358fa0f78daeed13eeab256ff2478fe5583a94dc37196e3fa41838145e54f097394020e9b3eb0c787ab733314bee04456147e9416e6109771a7b58d5b1315d5b839c1261fb43a050e17e6785977b5171f93421009d0d20ec387225e85daa4eeb5810d35d8baa12a8c93cabb400b952cdebeb00fc5db9a09961315c419f37bb3a7a9d62e061550d8549caaab8fb6e3ce6eef2bf52ece24b9a0ff0f1b245ca7016a1a3acd2bfbb5e4c4d99ef66a803dc1eec0b7b9772f56d6245e989ac25bdbb5bc2d156fe3db255286ab63e0c59430fef926c95295a8e17d8cbf875084859b58ebf212e8121a342013352882a5022d57c3ed88295514ad7b428c0ddf5850985c63337282387642be5c542a4f2ea56ed3f165fbe0c9f00c5ba0d9c01d52327fc1096ee6b680c14b82a18c9dc2ac40a48e882d7d9d6a88053e48218b8a2a0307ee2a30d2540962ec833b92224903ef0ec7685684f6ffee9375ced753ce80b24f8840664b7fe62b2a2296045c546e0e4f79c21ee900332d7ddd0354d548a7b8c50c37799787043cdd0896abdddb46cc40d330d1ab7c94846f09b2be892a7c276c0f5eedbf41270b76a5803c50ebb83616b19ab67adb052642e34ac24b267103231025a2353d40e538b677cac567fac4ddc8d3a63b9dcbffbc8d1e2201a31dc36ea89e33f97cbafcf28923791efc656b2e46c6f7a0cabcecc1a3296f7e615c4dbc701b714b52fe931dd779b2d4d667f7b737882c853a26f0de9e42a560381c038cce581d093c0dab1d28d6740c229173613eaf0614d1b005d52a914d6135afee95d9aaff8ce77489a66e90704f8eb6ed9f31d99d3a4f20a3f0df2af5bb598e78a9921062560dc1decfd260713e52e309b0a50bf9a41ef17d0f247419859249bd17b31dd42d844ee3e4f5788687f9f787fd2b20a60dae6d24d45ea04c2928ee5ca2091cf1f7bb20ce896d219926e292314e7b9290fdc922090a3a3ca29ad6c65d24cc32a7fc5395a640df87057d8b32163ff1ced5a1fb18dafecec98d9edf6b76788562a9c431a32cd81129b8dd915a0181cd87ba39184aefa69388328433590c6c985101c4dcc662d1867cc855e8f19a0fab30d33ab28245694226125da72243ad73549d9c79155c436549b69635dc5d0285e5117f9ed4ef2899e85dc480b82ccc5d20c1fe36fbf435e86fc9d00637cd3669b73328d20c2204f8ea9e5fa7df4f3a02755c1f72b573624d235534d9fefd4c9b081c431ffdce3a70ac209e808552caba03f2a024d04d0fb0a101ec21e2ee3b9fe08b71881c44222d26f400b20d0f66275bf30a171159a80fe0c2952d07fd240a5f91e8e7a9c44448348567b7a4e1c98ed1ee10e3f44c2b904e88f708e505d6f6eb2bb82f71038354346c5e2543f712677b665cb637e5e3857a9768e5abac49b9570e1658b602368acfb2e349b8b600d0bb46fb5023b19536dfd91e4c796fbe075ecbdcd9f319562c58b7eed6ec14aa254d66108ba7bafbe11cfb8a486bf00c7119803b6878d1d961875b59a3f93af590b9de9e3a9bc7784c02f75a29ebd6639354d18cab23bd975f57ee2b2c43f43d51daf29617652a097eabcf74c79f8676c23f0a9636639401b4f2839d50ed8bbb94b8014840cb1af710e4a8532003f68179c028d4602aa56790fe12378c1078b7e69f6d72e611b2a2c2ad6672c79f9c314fc496323acb0228d3059c2c13a5a18f346ca59fbac67996a4c962d84ab15586c57875fd0260f3609fb9d42b40b5fcc8e4cb08bff71355f8fbdabc5655bd4122330d7914c9db0c3483d1a3b047424da556ab4ec947274f7f5823f695858af731a361a9001d592dfbc1d97abfe4a9ae2bf0af5b1f627043e8ed31c64320ed1c16790aff512966a689c56eabdae5bee4856f1addc1de8540e3032a54fcb3b57af88d4af2f6d91a426af08e973aa336587ec49529ae430df5441427bdc71cb6539f6e2515b5286cde6c3f90f966970b3cf9db5fcb73bb82b6f95b6b98b969adf001a0a637a01d3fe3a4ef7eb9390b5cc053b23bbe5fc064609dd76ace187f4946d27f29b83f7f1816bb9d60fd1e4206d99ea69be408f7ae2d5f4c283a762b10e24c9750bfc59d8900ea42d557f36d9d8c0f9ac828aadd4f60b411a195f60e2ef19ca9704c90cc4b45832fffeb7e535513787e3617902613831c155666d0c834664804e89436631b7b97a3dd8bbe3a6744861381729cf46984ce4a5ad07394ea7095071c577a8065f3981d498ffb97180f8381df57b5890f4a3bf46cd7817691f8addc7d313687e0bbdbb2c60daea579b65ba3c446431a9aaf794ac99ce3b402f46fcd8061f3a16c64219cdc1684b3316088ecc445916ce368bf792b1b41d29707be036b8b23ec8d6c1880a6c54cb2a4a380cb8f44623be4a83fb7d6c8e324e1c053a883c859837dfbcfe5b585fa6c737698bd61cfcf94a91195575cd5b4add88d9bcda1322a7c9bbfd251dfc58b63a6cc76f498990080a87011defb2887f7542f05dfc39c98d582b701a223e9121686d6e82c16e332a28eee08208672a31dff86633d1478425b384c5611b1828a7679c3aab4aa884f0ceca2105116a5d67f8ffe1a0e997e750df7da24881e76113991b365601fdc5e9de66eff62d9afd5a8d83a42910af421809543de0da81d1ec3b4475f592b46886dc750040fa95b9339acbb59bd5cc463ac48966152b579818d523ee50f18afc473e5454153632f3771df47e983ec256f08136d2e2e24f5f0f0c72c76d8e12d69b93d607f32e5a388f22dad30cbbe761d7c7e5f98be5f117c198d5084e8c2321b6788c21fe7937ca2b0c012e4cdd326e83c7305412650c37cbfead268fb9924edad23850b4dea893f3953b87d2d2c38a630744d5f80982433e4c7a7d1419e235cfd36208e6c704c586b5d694601e446624ac93a8b792d94b4b9e79e3d0f111d7ff08887888e5c37ad9b58c65afb746015c80dd6e4f5b91a03640b9f98d237345bc46eabebc61e1484402b2e6ce5bca09899d3698eef5e58032acc40b878a89b1a4503b169247478e5533a0c4c47ed51a993d", 0x1000}, {&(0x7f0000005780)="18b6795fa8e32cedb3ff9c8dd3116d0bc23391e7c0df746016693303a777d629ae36eb65f7152c9b8eb91be7e524f618af5a67c92f964f8e40a27a55a650", 0x3e}], 0x2, &(0x7f00000060c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r4, r5, r6]}}], 0x128}}], 0x2, 0xc014)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xb3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0xf9)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x5)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8902}, [@IFLA_MASTER={0x8, 0x3, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x4)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xe7)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0x70)

4.993961427s ago: executing program 2 (id=2708):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x19}], 0x1)
r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0)

4.434927267s ago: executing program 4 (id=2709):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x19}], 0x1)
r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0)

3.835526497s ago: executing program 2 (id=2710):
socket$igmp(0x2, 0x3, 0x2)
semget$private(0x0, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x40c600, 0x0)
ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00g'], 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x14b403, 0x0)
write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="53594e54903a00082000272030303030303030303030303030303030303030300a494741494e20274361707475726520566f6c756d65d3d3303030303030303030303030303030"], 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)

3.784126623s ago: executing program 4 (id=2711):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f00002c7000/0x1000)=nil, 0x1000, 0xf, 0x50, r0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x800000, 0x0, 0x2}})
ioctl(r2, 0x8b1a, &(0x7f0000000040))
readv(r0, &(0x7f00000012c0), 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
getsockopt(0xffffffffffffffff, 0x28, 0x0, 0xffffffffffffffff, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.263596305s ago: executing program 1 (id=2712):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003480)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}}], 0x1, 0xf00)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4)

3.262931154s ago: executing program 2 (id=2713):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904290000020201000524"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0,,:\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

3.262354791s ago: executing program 3 (id=2714):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r1], 0x27)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x17, "18b81b3d0000000000000010000000040100"})

3.063278914s ago: executing program 1 (id=2715):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)

2.914549091s ago: executing program 1 (id=2716):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

2.73787393s ago: executing program 1 (id=2717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004080)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000300000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.459631678s ago: executing program 1 (id=2718):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x0)
syz_clone3(&(0x7f0000000780)={0x1000, &(0x7f00000001c0), &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000340), {0x2a}, &(0x7f0000000500)=""/241, 0xf1, &(0x7f0000000600)=""/50, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close(0x3)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), 0x0}, 0x20)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f0000000140)={0x3ff, 0x40, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

1.716119663s ago: executing program 3 (id=2719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee907290495b9585dde83000000000b01007a15b3"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x800)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e204e0000", 0x58}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r9 = socket$inet6(0xa, 0x6, 0x400040)
bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)

1.201967753s ago: executing program 4 (id=2720):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RLOPEN(r3, &(0x7f0000000400)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x1}, 0x3}}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1000000)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x82000000)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0))
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6800)
ioprio_get$uid(0x3, r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010300000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008001e40ffffffff05000500020000000500010006"], 0x60}}, 0x0)

1.197691338s ago: executing program 2 (id=2721):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x19}], 0x1)
r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0)

174.163494ms ago: executing program 2 (id=2722):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0xffffffffffffff48, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x84)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
syz_usb_disconnect(r3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0xa, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

84.341854ms ago: executing program 1 (id=2723):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000bfda9f251c2160d2697c", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20008001}, 0x88c0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x2002)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0x4d, {0x4d, 0x0, "8507eddec8a99aaf8d4a7367ca6532ea6a6c4e6027aeaf8d6a21fab650040d204f888cb896d4c57b88054660c5e64322797872d730523dd36b69f77864469e2601e8e1fcf3572e6cd52c2b"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x13, 0x60, "3bd3557be8db00257205b7f39f9df5ac084ca9bb518daebed0271bb430f03034c7b3245116524e3e379e8ae2053099c1b20900b26c41d5bb4c0fa18220b95db968b5112f8fb396becfd612956573700ca074fa23f6e3239cdad03857521de533"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x6, 0xa, 0x1ff, 0x0, 0x88c, 0x7c94, 0x40, 0x5, 0x3, 0x7fff, 0xfeff, 0x8}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}})
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0xa0, 0x20, 0x67}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x10001, 0x4, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a"], 0x38}}, 0x40408c0)
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

0s ago: executing program 4 (id=2724):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aa26f9aaaaaaaaaaaaaaaa16080045000028006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0xfffd, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1000}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

ing 046d:0900
[  624.123959][T11603] gspca_spca500: reg write: error -71
[  624.130403][T11603] gspca_spca500: reg write: error -71
[  624.136158][T11603] gspca_spca500: reg write: error -71
[  624.141962][T11603] gspca_spca500: reg write: error -71
[  624.147726][T11603] gspca_spca500: reg write: error -71
[  624.154806][T11603] gspca_spca500: reg write: error -71
[  624.161116][T11603] gspca_spca500: reg write: error -71
[  624.168480][T11603] gspca_spca500: reg write: error -71
[  624.176342][T11603] gspca_spca500: reg write: error -71
[  624.182423][T11603] gspca_spca500: reg write: error -71
[  624.188118][T11603] gspca_spca500: reg write: error -71
[  624.194492][T11603] gspca_spca500: reg write: error -71
[  624.200875][T13762] siw: device registration error -23
[  624.218624][T13748] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  624.239352][T13748] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  624.242640][T11603] gspca_spca500: reg write: error -71
[  624.265087][T11603] gspca_spca500: reg write: error -71
[  624.328446][T11603] usb 5-1: USB disconnect, device number 68
[  624.464218][T13772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2100'.
[  625.122185][ T5776] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  625.367868][ T5776] usb 3-1: USB disconnect, device number 62
[  626.066982][T13781] FAULT_INJECTION: forcing a failure.
[  626.066982][T13781] name failslab, interval 1, probability 0, space 0, times 0
[  626.264984][T13783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2111'.
[  626.288456][T13781] CPU: 0 UID: 0 PID: 13781 Comm: syz.2.2109 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.288476][T13781] Tainted: [L]=SOFTLOCKUP
[  626.288480][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  626.288486][T13781] Call Trace:
[  626.288491][T13781]  <TASK>
[  626.288495][T13781]  dump_stack_lvl+0x100/0x190
[  626.288512][T13781]  should_fail_ex.cold+0x5/0xa
[  626.288528][T13781]  should_failslab+0xc2/0x120
[  626.288540][T13781]  __kmalloc_cache_noprof+0x7a/0x6f0
[  626.288555][T13781]  ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  626.288568][T13781]  ? ww_mutex_lock_interruptible+0x37/0x160
[  626.288585][T13781]  vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  626.288598][T13781]  drm_atomic_get_crtc_state+0x1de/0x620
[  626.288613][T13781]  __drm_atomic_helper_set_config+0xb4/0xee0
[  626.288628][T13781]  ? __kmalloc_noprof+0x320/0x850
[  626.288644][T13781]  ? __pfx___drm_atomic_helper_set_config+0x10/0x10
[  626.288659][T13781]  ? drm_atomic_state_init+0x2d6/0x490
[  626.288672][T13781]  ? kasan_save_track+0x14/0x30
[  626.288684][T13781]  drm_atomic_helper_set_config+0x98/0x190
[  626.288700][T13781]  drm_mode_setcrtc+0xeca/0x1d50
[  626.288714][T13781]  ? rcu_is_watching+0x12/0xc0
[  626.288730][T13781]  ? trace_sched_exit_tp+0x11c/0x160
[  626.288744][T13781]  ? __schedule+0x10fb/0x6820
[  626.288754][T13781]  ? __schedule+0x10fb/0x6820
[  626.288768][T13781]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  626.288789][T13781]  ? drm_is_current_master+0x2c/0x40
[  626.288803][T13781]  ? drm_is_current_master+0x2c/0x40
[  626.288818][T13781]  ? do_raw_spin_unlock+0x145/0x1e0
[  626.288836][T13781]  drm_ioctl_kernel+0x1f3/0x3e0
[  626.288849][T13781]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  626.288862][T13781]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  626.288879][T13781]  drm_ioctl+0x5e6/0xc60
[  626.288894][T13781]  ? __pfx_drm_mode_setcrtc+0x10/0x10
[  626.288906][T13781]  ? __pfx_drm_ioctl+0x10/0x10
[  626.288918][T13781]  ? hook_file_ioctl_common+0x36/0x410
[  626.288941][T13781]  ? selinux_file_ioctl+0x13b/0x290
[  626.288954][T13781]  ? selinux_file_ioctl+0xb6/0x290
[  626.288969][T13781]  ? __pfx_drm_ioctl+0x10/0x10
[  626.288982][T13781]  __x64_sys_ioctl+0x18e/0x210
[  626.288995][T13781]  do_syscall_64+0x10b/0xf80
[  626.289008][T13781]  ? clear_bhb_loop+0x40/0x90
[  626.289021][T13781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.289037][T13781] RIP: 0033:0x7f0c3df9cdd9
[  626.289047][T13781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.289058][T13781] RSP: 002b:00007f0c3ef05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  626.289069][T13781] RAX: ffffffffffffffda RBX: 00007f0c3e216090 RCX: 00007f0c3df9cdd9
[  626.289075][T13781] RDX: 0000200000000380 RSI: 00000000c06864a2 RDI: 0000000000000003
[  626.289082][T13781] RBP: 00007f0c3ef05090 R08: 0000000000000000 R09: 0000000000000000
[  626.289088][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.289094][T13781] R13: 00007f0c3e216128 R14: 00007f0c3e216090 R15: 00007ffc48c2e158
[  626.289108][T13781]  </TASK>
[  626.748100][T13768] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  626.765457][T13793] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  626.809995][T13797] syz_tun: entered allmulticast mode
[  626.840376][T13797] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2113'.
[  627.182567][T13812] SET target dimension over the limit!
[  628.940451][T13835] FAULT_INJECTION: forcing a failure.
[  628.940451][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.974056][T13830] netlink: 'syz.3.2124': attribute type 10 has an invalid length.
[  628.986384][T13835] CPU: 0 UID: 0 PID: 13835 Comm: syz.4.2127 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.986413][T13835] Tainted: [L]=SOFTLOCKUP
[  628.986421][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.986431][T13835] Call Trace:
[  628.986438][T13835]  <TASK>
[  628.986446][T13835]  dump_stack_lvl+0x100/0x190
[  628.986474][T13835]  should_fail_ex.cold+0x5/0xa
[  628.986499][T13835]  _copy_from_user+0x2e/0xd0
[  628.986526][T13835]  memdup_user+0x6b/0xe0
[  628.986546][T13835]  strndup_user+0x78/0xe0
[  628.986565][T13835]  __do_sys_add_key+0x160/0x460
[  628.986585][T13835]  ? __pfx___do_sys_add_key+0x10/0x10
[  628.986601][T13835]  ? ksys_write+0x1ac/0x250
[  628.986625][T13835]  ? rcu_is_watching+0x12/0xc0
[  628.986657][T13835]  do_syscall_64+0x10b/0xf80
[  628.986678][T13835]  ? clear_bhb_loop+0x40/0x90
[  628.986702][T13835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.986720][T13835] RIP: 0033:0x7f42eaf9cdd9
[  628.986736][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.986753][T13835] RSP: 002b:00007f42ebecb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  628.986771][T13835] RAX: ffffffffffffffda RBX: 00007f42eb215fa0 RCX: 00007f42eaf9cdd9
[  628.986782][T13835] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000
[  628.986793][T13835] RBP: 00007f42ebecb090 R08: fffffffffffffffe R09: 0000000000000000
[  628.986804][T13835] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000001
[  628.986815][T13835] R13: 00007f42eb216038 R14: 00007f42eb215fa0 R15: 00007ffe52938ea8
[  628.986838][T13835]  </TASK>
[  629.238244][T13836] netlink: 'syz.3.2124': attribute type 10 has an invalid length.
[  629.342110][T13830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  629.380984][T13830] team0: Port device netdevsim1 added
[  629.427229][T13836] team0: Port device netdevsim1 removed
[  629.450743][T13836] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  629.527272][T13836] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  629.606379][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  629.670014][T13846] tmpfs: Bad value for 'mpol'
[  629.712095][T13851] comedi comedi3: pcl711: I/O base address or length out of range
[  629.765607][   T10] usb 2-1: Using ep0 maxpacket: 16
[  629.789250][   T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.817735][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  629.833183][   T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  629.847580][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.860659][T13855] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2134'.
[  629.877853][   T10] usb 2-1: config 0 descriptor??
[  629.888685][T13858] loop4: detected capacity change from 0 to 2640
[  629.906112][T13858] buffer_io_error: 322 callbacks suppressed
[  629.906131][T13858] Buffer I/O error on dev loop4, logical block 0, async page read
[  629.931175][T13858] Buffer I/O error on dev loop4, logical block 0, async page read
[  629.973828][T13858]  loop4: unable to read partition table
[  629.982106][T13861] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  629.997713][T13858] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  630.033623][T13861] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  630.059084][T13863] siw: device registration error -23
[  630.082177][T13861] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  630.098544][   T30] audit: type=1400 audit(1777811550.506:889): avc:  denied  { mounton } for  pid=13864 comm="syz.3.2139" path="/427/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  630.169067][T13861] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  630.253746][T13861] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  630.276113][T13861] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  630.299755][T13861] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  630.324427][T13861] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  630.367389][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.393446][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.559575][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  630.569006][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  630.618802][   T10] usb 2-1: USB disconnect, device number 61
[  631.072082][T13892] siw: device registration error -23
[  631.077949][T13892] FAULT_INJECTION: forcing a failure.
[  631.077949][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  631.091087][T13892] CPU: 1 UID: 0 PID: 13892 Comm: syz.4.2146 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  631.091106][T13892] Tainted: [L]=SOFTLOCKUP
[  631.091110][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  631.091117][T13892] Call Trace:
[  631.091121][T13892]  <TASK>
[  631.091125][T13892]  dump_stack_lvl+0x100/0x190
[  631.091142][T13892]  should_fail_ex.cold+0x5/0xa
[  631.091157][T13892]  _copy_to_user+0x32/0xd0
[  631.091175][T13892]  simple_read_from_buffer+0xcb/0x170
[  631.091190][T13892]  proc_fail_nth_read+0x1af/0x230
[  631.091202][T13892]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  631.091215][T13892]  ? rw_verify_area+0xce/0x6d0
[  631.091225][T13892]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  631.091236][T13892]  vfs_read+0x1e4/0xb30
[  631.091249][T13892]  ? __pfx_vfs_read+0x10/0x10
[  631.091261][T13892]  ? __fget_files+0x215/0x3d0
[  631.091278][T13892]  ? __fget_files+0x21f/0x3d0
[  631.091295][T13892]  ksys_read+0x12a/0x250
[  631.091306][T13892]  ? __pfx_ksys_read+0x10/0x10
[  631.091319][T13892]  ? rcu_is_watching+0x12/0xc0
[  631.091337][T13892]  do_syscall_64+0x10b/0xf80
[  631.091349][T13892]  ? clear_bhb_loop+0x40/0x90
[  631.091362][T13892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.091374][T13892] RIP: 0033:0x7f42eaf5d60e
[  631.091385][T13892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  631.091401][T13892] RSP: 002b:00007f42ebecafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  631.091418][T13892] RAX: ffffffffffffffda RBX: 00007f42ebecb6c0 RCX: 00007f42eaf5d60e
[  631.091430][T13892] RDX: 000000000000000f RSI: 00007f42ebecb0a0 RDI: 000000000000000c
[  631.091440][T13892] RBP: 00007f42ebecb090 R08: 0000000000000000 R09: 0000000000000000
[  631.091447][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.091453][T13892] R13: 00007f42eb216038 R14: 00007f42eb215fa0 R15: 00007ffe52938ea8
[  631.091468][T13892]  </TASK>
[  631.094992][   T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  631.694929][   T10] usb 2-1: Using ep0 maxpacket: 16
[  631.711885][   T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  631.720322][   T10] usb 2-1: config 0 has no interface number 0
[  631.732091][   T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  631.764003][   T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  631.790963][   T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  631.815089][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.843556][   T10] usb 2-1: Product: syz
[  631.849702][   T10] usb 2-1: Manufacturer: syz
[  631.861421][   T10] usb 2-1: SerialNumber: syz
[  631.896574][   T10] usb 2-1: config 0 descriptor??
[  631.901721][T13902] Scaler: =================  START STATUS  =================
[  631.916813][T13885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  631.937141][T13885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  631.945242][T13902] Scaler: ==================  END STATUS  ==================
[  632.158387][T13885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  632.187470][T13885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  632.437035][   T30] audit: type=1400 audit(1777811552.838:890): avc:  denied  { map } for  pid=13918 comm="syz.4.2154" path="socket:[51231]" dev="sockfs" ino=51231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  632.502172][   T30] audit: type=1400 audit(1777811552.838:891): avc:  denied  { accept } for  pid=13918 comm="syz.4.2154" path="socket:[51231]" dev="sockfs" ino=51231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  632.814167][ T5776] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  633.224181][   T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  633.234676][   T10] asix 2-1:0.34: probe with driver asix failed with error -61
[  633.421632][ T5776] usb 1-1: Using ep0 maxpacket: 16
[  633.440598][ T5776] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  633.477516][ T5776] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  633.553753][ T5776] usb 1-1: config 1 has no interface number 1
[  633.559931][ T5776] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  633.570432][ T5776] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  633.583862][ T5776] usb 1-1: config 1 interface 105 has no altsetting 0
[  633.592505][ T5776] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  633.602223][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.699417][ T5776] usb 1-1: Product: syz
[  633.710409][ T5776] usb 1-1: Manufacturer: syz
[  633.715405][ T5776] usb 1-1: SerialNumber: syz
[  633.723050][T13922] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  633.807829][T13944] netlink: 'syz.2.2159': attribute type 11 has an invalid length.
[  635.854618][T13947] siw: device registration error -23
[  635.889336][   T10] usb 2-1: USB disconnect, device number 62
[  636.344184][   T30] audit: type=1400 audit(1777811556.740:892): avc:  denied  { watch } for  pid=13960 comm="syz.3.2164" path="/430/bus/file1" dev="overlay" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  636.682585][   T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  636.727777][T13953] hub 9-0:1.0: USB hub found
[  636.743375][T13953] hub 9-0:1.0: 1 port detected
[  636.852354][   T10] usb 5-1: Using ep0 maxpacket: 8
[  636.961390][   T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  637.174503][T13965] vivid-003: disconnect
[  637.194891][T13965] vivid-003: reconnect
[  637.239690][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  637.367243][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  637.391023][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  637.416575][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  637.434127][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  637.471887][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  637.497406][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.605770][ T5776] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22
[  637.642636][ T5776] usb 1-1: USB disconnect, device number 72
[  637.732183][   T10] usb 5-1: GET_CAPABILITIES returned 0
[  637.760249][   T10] usbtmc 5-1:16.0: can't read capabilities
[  637.854369][T13976] kAFS: unable to lookup cell '�'
[  637.984567][T13959] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32
[  638.111833][   T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  638.201673][ T5776] usb 5-1: USB disconnect, device number 69
[  638.263788][   T10] usb 4-1: device descriptor read/64, error -71
[  638.468312][   T30] audit: type=1400 audit(1777811558.881:893): avc:  denied  { write } for  pid=13987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  638.521297][ T5706] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  638.561270][T11602] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  638.561496][   T10] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  638.647610][   T30] audit: type=1400 audit(1777811559.061:894): avc:  denied  { write } for  pid=14004 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  638.676449][ T5706] usb 3-1: device descriptor read/64, error -71
[  638.761433][T11602] usb 1-1: Using ep0 maxpacket: 32
[  638.762086][   T10] usb 4-1: device descriptor read/64, error -71
[  638.772491][T11602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 79, changing to 10
[  638.797458][T11602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33058, setting to 1024
[  638.832974][T11602] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  638.840682][T14011] tipc: Started in network mode
[  638.842543][T11602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.859424][T14011] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  638.864323][T11602] usb 1-1: config 0 descriptor??
[  638.876547][T14011] tipc: Enabled bearer <eth:vlan0>, priority 10
[  638.879582][T11602] hub 1-1:0.0: USB hub found
[  638.911402][   T10] usb usb4-port1: attempt power cycle
[  638.921777][ T5706] usb 3-1: new low-speed USB device number 64 using dummy_hcd
[  639.051264][ T5776] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  639.061028][ T5706] usb 3-1: device descriptor read/64, error -71
[  639.079717][T11602] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  639.133618][   T30] audit: type=1400 audit(1777811559.551:895): avc:  denied  { write } for  pid=14008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  639.181362][ T5706] usb usb3-port1: attempt power cycle
[  639.210638][T14025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2176'.
[  639.228575][ T5776] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  639.320430][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  639.533011][ T5706] usb 3-1: new low-speed USB device number 65 using dummy_hcd
[  639.567564][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  639.583007][T11602] hid-generic 0003:046D:C31C.0014: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  639.600738][   T10] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  639.603876][ T5776] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  639.619182][ T5706] usb 3-1: device descriptor read/8, error -71
[  639.631971][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.632457][   T10] usb 4-1: device descriptor read/8, error -71
[  639.640215][ T5776] usb 2-1: Product: syz
[  639.652393][ T5776] usb 2-1: Manufacturer: syz
[  639.657073][ T5776] usb 2-1: SerialNumber: syz
[  639.664952][   T30] audit: type=1400 audit(1777811560.081:896): avc:  denied  { write } for  pid=14027 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  639.691750][ T5776] usb 2-1: config 0 descriptor??
[  639.707465][ T5776] iguanair 2-1:0.0: probe with driver iguanair failed with error -12
[  639.865438][ T5706] usb 3-1: new low-speed USB device number 66 using dummy_hcd
[  639.925467][   T10] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  639.941422][ T5706] usb 3-1: device descriptor read/8, error -71
[  639.957464][T11614] usb 2-1: USB disconnect, device number 63
[  639.965208][   T30] audit: type=1400 audit(1777811560.371:897): avc:  denied  { map } for  pid=14006 comm="syz.1.2174" path="socket:[52332]" dev="sockfs" ino=52332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  640.003507][  T803] tipc: Node number set to 10005162
[  640.006291][   T30] audit: type=1400 audit(1777811560.371:898): avc:  denied  { read accept } for  pid=14006 comm="syz.1.2174" path="socket:[52332]" dev="sockfs" ino=52332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  640.014537][   T10] usb 4-1: device descriptor read/8, error -71
[  640.041005][T11602] usb 1-1: USB disconnect, device number 73
[  640.072216][ T5706] usb usb3-port1: unable to enumerate USB device
[  640.103795][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2179'.
[  640.148925][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2180'.
[  640.190664][   T10] usb usb4-port1: unable to enumerate USB device
[  640.400383][ T5706] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  640.551510][ T5706] usb 5-1: Using ep0 maxpacket: 32
[  640.558535][ T5706] usb 5-1: config 5 has an invalid interface number: 211 but max is 0
[  640.568515][ T5706] usb 5-1: config 5 has no interface number 0
[  640.574816][ T5706] usb 5-1: config 5 interface 211 has no altsetting 0
[  640.583363][ T5706] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= e.aa
[  640.592564][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.600828][ T5706] usb 5-1: Product: syz
[  640.605051][ T5706] usb 5-1: Manufacturer: syz
[  640.609698][ T5706] usb 5-1: SerialNumber: syz
[  640.826159][ T5706] gspca_main: spca500-2.14.0 probing 046d:0900
[  640.833313][ T5706] gspca_spca500: reg write: error -71
[  640.839140][ T5706] gspca_spca500: reg write: error -71
[  640.845238][ T5706] gspca_spca500: reg write: error -71
[  640.851448][ T5706] gspca_spca500: reg write: error -71
[  640.857174][ T5706] gspca_spca500: reg write: error -71
[  640.863122][ T5706] gspca_spca500: reg write: error -71
[  640.870216][ T5706] gspca_spca500: reg write: error -71
[  640.898058][ T5706] gspca_spca500: reg write: error -71
[  640.907716][ T5706] gspca_spca500: reg write: error -71
[  640.914044][ T5706] gspca_spca500: reg write: error -71
[  640.919776][ T5706] gspca_spca500: reg write: error -71
[  640.925769][ T5706] gspca_spca500: reg write: error -71
[  640.930660][T14050] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  640.933834][ T5706] gspca_spca500: reg write: error -71
[  640.953332][ T5706] gspca_spca500: reg write: error -71
[  640.969652][ T5706] usb 5-1: USB disconnect, device number 70
[  640.995854][T14052] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  641.060345][T11602] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  641.212796][T11602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.224177][T11602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.252097][T11602] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  641.277007][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2187'.
[  641.300641][T11602] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  641.359059][T11602] usb 2-1: Manufacturer: syz
[  641.642349][T11602] usb 2-1: config 0 descriptor??
[  641.691600][T11602] uvcvideo 2-1:0.0: Found UVC 0.00 device <unnamed> (18ec:3288)
[  641.711865][T11602] uvcvideo 2-1:0.0: No valid video chain found.
[  641.815128][T14064] 9p: Bad value for 'rfdno'
[  641.949392][T14065] netlink: 'syz.1.2184': attribute type 10 has an invalid length.
[  642.257201][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'.
[  642.388660][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2190'.
[  642.412822][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'.
[  643.092193][T14085] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2192'.
[  643.816194][T11602] usb 2-1: USB disconnect, device number 64
[  645.057994][   T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  645.237892][  T803] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  645.260438][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  645.270969][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  645.334749][T14115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2201'.
[  645.718314][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  645.737625][  T803] usb 4-1: device descriptor read/64, error -71
[  646.042515][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  646.084331][   T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  646.103691][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.129739][   T10] usb 5-1: Product: syz
[  646.144745][   T10] usb 5-1: Manufacturer: syz
[  646.163809][   T10] usb 5-1: SerialNumber: syz
[  646.183112][   T10] usb 5-1: config 0 descriptor??
[  646.200661][T14102] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  646.220162][   T10] usb 5-1: ucan: probing device on interface #0
[  646.236683][   T10] usb 5-1: ucan: invalid in_ep MaxPacketSize
[  646.246306][   T10] usb 5-1: ucan: probe failed; try to update the device firmware
[  646.297873][  T803] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  646.575300][T14130] 9p: Bad value for 'rfdno'
[  646.757788][  T803] usb 4-1: device descriptor read/64, error -71
[  646.887608][  T803] usb usb4-port1: attempt power cycle
[  646.897542][T11602] usb 5-1: USB disconnect, device number 71
[  647.261742][  T803] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  647.422252][T14149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2214'.
[  648.138186][  T803] usb 4-1: device descriptor read/8, error -71
[  648.445195][T14167] Cannot find del_set index 0 as target
[  649.046439][T14191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'.
[  649.060324][    T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  649.348590][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.427534][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  649.446902][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.455144][    T9] usb 3-1: Product: syz
[  649.460136][    T9] usb 3-1: Manufacturer: syz
[  649.468235][    T9] usb 3-1: SerialNumber: syz
[  649.628766][T14203] SET target dimension over the limit!
[  650.088482][T14212] siw: device registration error -23
[  650.117031][T14213] lo speed is unknown, defaulting to 1000
[  650.140699][T14213] lo speed is unknown, defaulting to 1000
[  650.153865][T14213] lo speed is unknown, defaulting to 1000
[  650.455207][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  650.521740][    T9] cdc_ncm 3-1:1.0: bind() failure
[  650.572760][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  650.616762][    T9] cdc_ncm 3-1:1.1: bind() failure
[  650.643701][    T9] usb 3-1: USB disconnect, device number 67
[  650.663404][   T30] audit: type=1400 audit(1777811571.077:899): avc:  denied  { connect } for  pid=14224 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  650.969059][   T30] audit: type=1400 audit(1777811571.377:900): avc:  denied  { read } for  pid=14224 comm="syz.2.2237" path="socket:[52056]" dev="sockfs" ino=52056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  651.199639][ T5776] lo speed is unknown, defaulting to 1000
[  651.207005][T11602] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  651.217609][T14213] infiniband syz0: set down
[  651.223542][T14213] infiniband syz0: added lo
[  651.230435][T14213] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  651.232719][T14213] infiniband syz0: Couldn't open port 1
[  651.247196][T14213] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  651.262392][T14213] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  651.281094][T14213] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  651.313770][T14213] RDS/IB: syz0: added
[  651.319070][T14213] smc: adding ib device syz0 with port count 1
[  651.325775][T14213] smc:    ib device syz0 port 1 has no pnetid
[  651.337577][ T5776] lo speed is unknown, defaulting to 1000
[  651.353541][T14213] lo speed is unknown, defaulting to 1000
[  651.368369][T11602] usb 2-1: unable to get BOS descriptor or descriptor too short
[  651.386913][T11602] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  651.404033][T11602] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  651.414408][ T5706] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  651.434921][T11602] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  651.459006][T11602] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  651.476261][T11602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.494849][T11602] usb 2-1: Product: syz
[  651.500532][T11602] usb 2-1: Manufacturer: syz
[  651.515226][T11602] usb 2-1: SerialNumber: syz
[  651.552189][T14213] lo speed is unknown, defaulting to 1000
[  651.597933][ T5706] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  651.617586][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.634703][ T5706] usb 3-1: Product: syz
[  651.638999][ T5706] usb 3-1: Manufacturer: syz
[  651.643617][ T5706] usb 3-1: SerialNumber: syz
[  651.655153][    T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  651.658452][ T5706] usb 3-1: config 0 descriptor??
[  651.732501][T14213] lo speed is unknown, defaulting to 1000
[  651.747592][T11602] usb 2-1: Can't get UAC3 power state for id 10
[  651.756466][T11602] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  651.769629][T11602] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  651.777486][T11602] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  651.788341][T11602] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  651.839870][    T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  651.873862][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.885337][    T9] usb 1-1: Product: syz
[  651.891698][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.894640][    T9] usb 1-1: Manufacturer: syz
[  651.919088][    T9] usb 1-1: SerialNumber: syz
[  651.922839][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.958126][ T5706] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22
[  651.993507][ T5706] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  652.009386][T11602] usb 2-1: USB disconnect, device number 65
[  652.028391][ T5706] usb 3-1: USB disconnect, device number 68
[  652.228355][    T9] rtl8150 1-1:1.0: couldn't reset the device
[  652.309041][    T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  652.549806][    T9] usb 1-1: USB disconnect, device number 74
[  652.679079][ T6986] udevd[6986]: setting mode of /dev/bus/usb/002/065 to 020664 failed: No such file or directory
[  652.700354][ T6986] udevd[6986]: setting owner of /dev/bus/usb/002/065 to uid=0, gid=0 failed: No such file or directory
[  652.711327][T14213] lo speed is unknown, defaulting to 1000
[  652.867211][ T7542] udevd[7542]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  653.114522][T14255] SET target dimension over the limit!
[  653.169977][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2244'.
[  653.918890][T14213] lo speed is unknown, defaulting to 1000
[  654.164789][ T5706] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  654.422476][ T5706] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  654.440578][ T5706] usb 1-1: can't read configurations, error -22
[  654.587832][ T5706] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  654.755420][ T5706] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  654.764237][ T5706] usb 1-1: can't read configurations, error -22
[  654.770926][ T5706] usb usb1-port1: attempt power cycle
[  654.780264][T14284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3739920483 (478709821824 ns) > initial count (167705171968 ns). Using initial count to start timer.
[  655.116207][ T5706] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  655.133064][ T5776] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  655.189676][ T5706] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  655.198265][ T5706] usb 1-1: can't read configurations, error -22
[  655.284734][ T5776] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  655.293586][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  655.303872][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  655.313460][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1331, setting to 64
[  655.325809][ T5776] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  655.334985][ T5706] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  655.342552][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  655.351048][ T5776] usb 4-1: Product: syz
[  655.355472][ T5776] usb 4-1: Manufacturer: syz
[  655.365490][ T5776] cdc_wdm 4-1:1.0: skipping garbage
[  655.370788][ T5776] cdc_wdm 4-1:1.0: skipping garbage
[  655.376405][ T5776] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  655.386309][ T5706] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  655.395542][ T5706] usb 1-1: can't read configurations, error -22
[  655.403105][ T5706] usb usb1-port1: unable to enumerate USB device
[  655.463098][   T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  655.612901][   T10] usb 3-1: Using ep0 maxpacket: 16
[  655.619441][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.632963][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.643205][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  655.656122][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  655.666095][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.677743][   T10] usb 3-1: config 0 descriptor??
[  656.300598][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.310782][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.331610][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.347963][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.373054][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  656.379119][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  656.394731][   T10] usb 3-1: USB disconnect, device number 69
[  657.265110][ T5706] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  657.487563][   T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  657.661824][   T10] usb 5-1: Using ep0 maxpacket: 8
[  657.678306][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  657.687631][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  657.701785][ T5706] usb 2-1: Using ep0 maxpacket: 8
[  657.714517][ T5706] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  657.715392][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  657.729450][ T5706] usb 2-1: config 0 has no interface number 0
[  657.733155][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  657.749043][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  657.749154][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  657.749179][ T5706] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  657.749203][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  657.749240][ T5706] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  657.749259][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.753085][ T5706] usb 2-1: config 0 descriptor??
[  657.761483][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  657.810919][ T5706] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  657.840828][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  657.850075][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.013529][T11602] usb 4-1: USB disconnect, device number 74
[  658.162578][T14331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.171458][T14331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.227043][   T10] usb 5-1: usb_control_msg returned -32
[  658.235810][   T10] usbtmc 5-1:16.0: can't read capabilities
[  658.243252][T14350] SET target dimension over the limit!
[  658.382845][T14352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2274'.
[  659.322364][T14370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2279'.
[  659.670847][T11602] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  659.824770][T11602] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  659.846965][T11602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.871034][T11602] usb 4-1: Product: syz
[  659.882011][T11602] usb 4-1: Manufacturer: syz
[  659.891564][T11602] usb 4-1: SerialNumber: syz
[  660.127056][ T5776] usb 2-1: USB disconnect, device number 66
[  660.155475][ T5776] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  660.393358][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'.
[  662.719603][T11602] rtl8150 4-1:1.0: couldn't reset the device
[  662.796199][T11602] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  662.821222][ T5706] usb 5-1: USB disconnect, device number 72
[  663.139577][T11614] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  663.180623][   T10] usb 2-1: new low-speed USB device number 67 using dummy_hcd
[  663.311036][T11614] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  663.319362][   T10] usb 2-1: device descriptor read/64, error -71
[  663.327238][T11614] usb 1-1: config 0 has no interface number 0
[  663.338815][T11614] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 43297, setting to 64
[  663.353090][T11614] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  663.366698][T11614] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  663.376083][T11614] usb 1-1: Product: syz
[  663.382010][T11614] usb 1-1: SerialNumber: syz
[  663.393772][T11614] usb 1-1: config 0 descriptor??
[  663.403034][T14398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  663.419655][T11614] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  663.478881][ T5706] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  663.569024][   T10] usb 2-1: new low-speed USB device number 68 using dummy_hcd
[  663.593470][ T5776] usb 4-1: USB disconnect, device number 75
[  663.632406][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short
[  663.642100][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  663.665747][ T5706] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  663.676183][ T5706] usb 3-1: too many endpoints for config 1 interface 1 altsetting 26: 225, using maximum allowed: 30
[  663.704760][ T5706] usb 3-1: config 1 interface 1 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 225
[  663.708984][   T10] usb 2-1: device descriptor read/64, error -71
[  663.725573][ T5706] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  663.737521][ T5706] usb 3-1: config 1 interface 1 has no altsetting 0
[  663.757960][ T5706] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  663.786520][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.798576][ T5706] usb 3-1: Product: syz
[  663.807169][ T5706] usb 3-1: Manufacturer: syz
[  663.818024][ T5706] usb 3-1: SerialNumber: syz
[  663.839507][   T10] usb usb2-port1: attempt power cycle
[  663.973243][T11614] usb 1-1: USB disconnect, device number 79
[  664.201322][   T10] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[  664.364497][   T10] usb 2-1: device descriptor read/8, error -71
[  664.669067][   T10] usb 2-1: new low-speed USB device number 70 using dummy_hcd
[  664.840002][   T10] usb 2-1: device descriptor read/8, error -71
[  664.972989][   T10] usb usb2-port1: unable to enumerate USB device
[  665.305360][T11603] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  665.416318][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2293'.
[  665.657617][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  665.897349][T14435] hub 8-0:1.0: USB hub found
[  665.903255][T14435] hub 8-0:1.0: 1 port detected
[  666.206822][ T5706] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor
[  666.226999][ T5706] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 0
[  666.245360][ T5706] usb 3-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes
[  666.278336][ T5706] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  666.314720][ T5706] usb 3-1: selecting invalid altsetting 0
[  666.327918][ T5706] usb 3-1: selecting invalid altsetting 0
[  666.340028][ T5706] usb 3-1: unit 2 not found!
[  666.350905][ T5706] usb 3-1: unit 0 not found!
[  666.445311][ T5706] usb 3-1: USB disconnect, device number 70
[  666.603563][ T6989] udevd[6989]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  666.972326][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'.
[  667.097026][ T5706] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  667.156693][T14451] siw: device registration error -23
[  667.247459][   T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  667.286247][ T5706] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  667.334776][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  667.411064][ T5706] usb 3-1: Product: syz
[  667.528039][ T5706] usb 3-1: Manufacturer: syz
[  667.606312][ T5706] usb 3-1: SerialNumber: syz
[  668.089049][ T5706] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  668.228318][   T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  668.239769][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.254202][   T10] usb 2-1: config 0 descriptor??
[  668.273267][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  668.477537][ T5706] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  668.500884][   T30] audit: type=1326 audit(1777811588.926:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  668.502295][ T5706] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  668.530584][   T30] audit: type=1326 audit(1777811588.926:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  668.573254][   T30] audit: type=1326 audit(1777811588.926:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  668.611162][T11614] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  669.131942][   T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  669.140567][   T30] audit: type=1326 audit(1777811588.926:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.241127][   T30] audit: type=1326 audit(1777811588.926:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.296481][T11614] usb 4-1: Using ep0 maxpacket: 16
[  669.308528][T11614] usb 4-1: unable to get BOS descriptor or descriptor too short
[  669.317600][   T30] audit: type=1326 audit(1777811588.966:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.373133][T11614] usb 4-1: too many configurations: 241, using maximum allowed: 8
[  669.383596][   T10] gspca_cpia1: usb_control_msg 02, error -71
[  669.403143][   T10] gspca_cpia1: usb_control_msg 05, error -71
[  669.420105][   T10] cpia1 2-1:0.0: unexpected systemstate: 00
[  669.426539][T11614] usb 4-1: unable to read config index 0 descriptor/start: -61
[  669.436407][T11614] usb 4-1: can't read configurations, error -61
[  669.450606][   T10] usb 2-1: USB disconnect, device number 71
[  669.461501][   T30] audit: type=1326 audit(1777811588.966:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.522534][   T30] audit: type=1326 audit(1777811588.966:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.559527][   T30] audit: type=1326 audit(1777811588.986:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.588470][   T30] audit: type=1326 audit(1777811588.986:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.4.2303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42eaf9cdd9 code=0x7ffc0000
[  669.617198][T11614] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  669.865604][T11614] usb 4-1: Using ep0 maxpacket: 16
[  669.873013][T11614] usb 4-1: unable to get BOS descriptor or descriptor too short
[  669.880978][T11614] usb 4-1: too many configurations: 241, using maximum allowed: 8
[  669.890099][T11614] usb 4-1: unable to read config index 0 descriptor/start: -61
[  669.904160][T11614] usb 4-1: can't read configurations, error -61
[  669.912395][T11614] usb usb4-port1: attempt power cycle
[  670.255419][T11614] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  670.284726][T14491] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2310'.
[  670.297030][T11614] usb 4-1: Using ep0 maxpacket: 16
[  670.340949][T11614] usb 4-1: unable to get BOS descriptor or descriptor too short
[  670.349292][T11614] usb 4-1: too many configurations: 241, using maximum allowed: 8
[  670.391847][T11614] usb 4-1: unable to read config index 0 descriptor/start: -61
[  670.399701][T11614] usb 4-1: can't read configurations, error -61
[  670.519827][T14498] siw: device registration error -23
[  670.535274][T11614] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  670.566105][T11614] usb 4-1: Using ep0 maxpacket: 16
[  670.573232][T11614] usb 4-1: unable to get BOS descriptor or descriptor too short
[  670.607821][T11614] usb 4-1: too many configurations: 241, using maximum allowed: 8
[  670.648724][T11614] usb 4-1: unable to read config index 0 descriptor/start: -61
[  670.659716][T11614] usb 4-1: can't read configurations, error -61
[  670.673743][ T5706] usb 3-1: USB disconnect, device number 71
[  671.347896][T11614] usb usb4-port1: unable to enumerate USB device
[  671.599529][T14506] SET target dimension over the limit!
[  671.681916][T14513] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  671.688472][T14513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  671.698677][T14513] vhci_hcd vhci_hcd.0: Device attached
[  671.708948][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.713010][T14515] vhci_hcd: connection closed
[  671.727674][   T13] vhci_hcd vhci_hcd.4: stop threads
[  671.782585][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.794667][   T13] vhci_hcd vhci_hcd.4: release socket
[  671.809503][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  671.905649][   T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  672.064600][ T5706] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  672.226086][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.236413][ T5706] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  672.245524][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.255310][ T5776] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  672.263729][ T5706] usb 2-1: config 0 descriptor??
[  672.271799][ T5706] smsusb:smsusb_probe: board id=8, interface number 0
[  672.285521][ T5706] smsusb:smsusb_probe: Device initialized with return code -19
[  672.332596][T14533] lo speed is unknown, defaulting to 1000
[  672.340393][T14533] lo speed is unknown, defaulting to 1000
[  672.477416][T14534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.486270][T14534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.528433][T11614] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  672.685122][T11614] usb 3-1: Using ep0 maxpacket: 32
[  672.696128][T11614] usb 3-1: config 0 interface 0 has no altsetting 0
[  672.734438][ T5776] usb 4-1: Using ep0 maxpacket: 32
[  672.860900][ T5776] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  672.999603][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.148083][ T5776] usb 4-1: Product: syz
[  673.198636][ T5776] usb 4-1: Manufacturer: syz
[  673.217585][T11614] usb 3-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  673.229393][ T5776] usb 4-1: SerialNumber: syz
[  673.232930][T11614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.240505][ T5776] usb 4-1: config 0 descriptor??
[  673.268123][T11614] usb 3-1: config 0 descriptor??
[  673.458866][ T5776] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  673.484259][ T5776] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  673.556988][ T5776] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  673.589175][ T5776] usb 4-1: USB disconnect, device number 80
[  673.679826][T14549] siw: device registration error -23
[  673.698104][T11614] thrustmaster 0003:044F:B323.0015: ignoring exceeding usage max
[  673.710849][T11614] thrustmaster 0003:044F:B323.0015: unknown main item tag 0x5
[  673.722745][T11614] thrustmaster 0003:044F:B323.0015: item fetching failed at offset 10/43
[  673.733345][T11614] thrustmaster 0003:044F:B323.0015: parse failed
[  673.740186][T11614] thrustmaster 0003:044F:B323.0015: probe with driver thrustmaster failed with error -22
[  673.901191][T11614] usb 3-1: USB disconnect, device number 72
[  675.002645][T11614] usb 2-1: USB disconnect, device number 72
[  675.571459][T14571] SET target dimension over the limit!
[  675.629832][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  675.659073][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  675.753413][   T10] usb 1-1: can't read configurations, error -71
[  675.922751][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  675.922767][   T30] audit: type=1400 audit(1777811596.359:922): avc:  denied  { read } for  pid=14569 comm="syz.1.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  676.213691][T14574] batadv_slave_0: entered promiscuous mode
[  676.289765][T14576] batadv_slave_0: left promiscuous mode
[  676.791132][T11614] Process accounting resumed
[  676.800107][ T5706] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  676.925013][ T5706] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  676.940781][T14602] netlink: 'syz.0.2339': attribute type 1 has an invalid length.
[  676.968141][T14602] 8021q: adding VLAN 0 to HW filter on device bond4
[  677.009289][T14602] bond4: (slave gretap2): making interface the new active one
[  677.017644][T14602] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  677.066181][T14602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14602 comm=syz.0.2339
[  677.405958][   T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  677.540562][T14615] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2342'.
[  677.565062][   T10] usb 1-1: device descriptor read/64, error -71
[  677.708419][T14620] SET target dimension over the limit!
[  677.979123][T14626] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2344'.
[  678.053993][   T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  678.191765][   T10] usb 1-1: device descriptor read/64, error -71
[  678.231596][T11614] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  678.251412][ T5713] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  678.301967][   T10] usb usb1-port1: attempt power cycle
[  678.381489][T11614] usb 4-1: Using ep0 maxpacket: 8
[  678.387892][T11614] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  678.439025][T11614] usb 4-1: config 0 has no interface number 0
[  678.451463][ T5713] usb 5-1: Using ep0 maxpacket: 16
[  678.462811][T11614] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  678.474268][T11614] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  678.486159][T11614] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  678.497546][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.508868][T11614] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  678.521997][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  678.541985][T11614] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  678.551400][ T5713] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  678.560456][T11614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.569157][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.596072][T11614] usb 4-1: config 0 descriptor??
[  678.602635][ T5713] usb 5-1: config 0 descriptor??
[  678.632395][T11614] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  678.656424][   T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  678.753608][   T10] usb 1-1: device descriptor read/8, error -71
[  678.873722][ T5776] usb 4-1: USB disconnect, device number 81
[  678.873811][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  679.021091][   T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  679.061605][   T10] usb 1-1: device descriptor read/8, error -71
[  679.075040][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.084517][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.099748][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.158256][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.203692][   T10] usb usb1-port1: unable to enumerate USB device
[  679.240569][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.375061][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.449978][ T5776] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  679.476936][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.498167][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.507129][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.514523][ T5713] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  679.523891][ T5713] zeroplus 0003:0C12:0030.0017: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0
[  679.536648][ T5713] zeroplus 0003:0C12:0030.0017: no inputs found
[  679.567796][ T5713] usb 5-1: USB disconnect, device number 74
[  679.580758][ T5706] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  679.830533][ T5706] usb 3-1: Using ep0 maxpacket: 32
[  680.146251][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  681.057530][ T5706] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  681.149474][ T5706] usb 3-1: config 0 has no interface number 0
[  681.156070][ T5706] usb 3-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  681.169443][ T5706] usb 3-1: config 0 interface 89 has no altsetting 0
[  681.179519][ T5706] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  681.191772][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.200149][ T5706] usb 3-1: Product: syz
[  681.204361][ T5706] usb 3-1: Manufacturer: syz
[  681.209006][ T5706] usb 3-1: SerialNumber: syz
[  681.216430][ T5706] usb 3-1: config 0 descriptor??
[  681.312963][ T5713] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  681.445021][   T30] audit: type=1400 audit(1777811601.872:923): avc:  denied  { create } for  pid=14655 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  681.478675][   T10] libceph: connect (1)[c::]:6789 error -22
[  681.485177][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  681.571728][ T5713] usb 2-1: Using ep0 maxpacket: 8
[  681.581670][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short
[  681.590759][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.603755][ T5713] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  681.619467][ T5713] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  681.660483][ T5713] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  681.672699][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.686952][ T5713] usb 2-1: Product: syz
[  681.695438][ T5713] usb 2-1: Manufacturer: syz
[  681.709660][ T5713] usb 2-1: SerialNumber: syz
[  681.750176][   T10] libceph: connect (1)[c::]:6789 error -22
[  681.756392][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  681.962244][ T5713] usb 2-1: unit 1 not found!
[  682.003878][ T5713] usb 2-1: USB disconnect, device number 73
[  682.031905][ T6986] udevd[6986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  682.131043][T14661] ceph: No mds server is up or the cluster is laggy
[  682.320948][T14677] siw: device registration error -23
[  682.536704][ T5713] usb 3-1: USB disconnect, device number 73
[  683.709538][T14706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2366'.
[  684.428364][ T5713] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  684.518394][  T803] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  684.578207][ T5713] usb 2-1: device descriptor read/64, error -71
[  684.655772][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.672714][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.695641][  T803] usb 5-1: Using ep0 maxpacket: 8
[  684.701712][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.716881][  T803] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  684.733500][  T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  684.744297][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.754396][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  684.765277][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.774329][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  684.785815][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.795201][  T803] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  684.808710][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.819292][  T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  684.828548][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.837468][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.846916][ T5713] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  684.861286][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  684.875842][T14723] siw: device registration error -23
[  685.080079][  T803] usb 5-1: usb_control_msg returned -32
[  685.086015][ T5713] usb 2-1: device descriptor read/64, error -71
[  685.097555][  T803] usbtmc 5-1:16.0: can't read capabilities
[  685.258326][ T5776] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  685.277535][ T5713] usb usb2-port1: attempt power cycle
[  685.419517][ T5776] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  685.428672][ T5776] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  685.439865][ T5776] usb 4-1: config 0 has no interface number 0
[  685.447978][ T5776] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  685.457263][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.462966][   T30] audit: type=1400 audit(1777811605.884:924): avc:  denied  { connect } for  pid=14736 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  685.465582][ T5776] usb 4-1: Product: syz
[  685.489515][ T5776] usb 4-1: Manufacturer: syz
[  685.494220][ T5776] usb 4-1: SerialNumber: syz
[  685.502307][ T5776] usb 4-1: config 0 descriptor??
[  685.504108][   T30] audit: type=1400 audit(1777811605.924:925): avc:  denied  { bind } for  pid=14736 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  685.519347][ T5776] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  685.533455][ T5776] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  685.617747][ T5713] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  685.638855][ T5713] usb 2-1: device descriptor read/8, error -71
[  685.747747][   T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  685.757168][T14732] libceph: resolve '0' (ret=-3): failed
[  685.796054][T14738] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0
[  685.854540][  T803] usb 4-1: USB disconnect, device number 83
[  685.907890][ T5713] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  685.948007][   T10] usb 1-1: Using ep0 maxpacket: 32
[  685.953944][ T5713] usb 2-1: device descriptor read/8, error -71
[  685.961944][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  685.975534][   T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  685.985874][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.994532][   T10] usb 1-1: Product: syz
[  685.999562][   T10] usb 1-1: Manufacturer: syz
[  686.004381][   T10] usb 1-1: SerialNumber: syz
[  686.096336][ T5713] usb usb2-port1: unable to enumerate USB device
[  686.259358][T14748] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  686.268674][T14748] overlayfs: failed to set xattr on upper
[  686.274437][T14748] overlayfs: ...falling back to redirect_dir=nofollow.
[  686.281484][T14748] overlayfs: ...falling back to index=off.
[  686.287419][T14748] overlayfs: ...falling back to uuid=null.
[  686.326795][T14749] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  686.336866][   T30] audit: type=1400 audit(1777811606.674:926): avc:  denied  { mounton } for  pid=14744 comm="syz.2.2379" path="/file0" dev="ramfs" ino=56009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  686.553114][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  686.664570][   T10] usb 1-1: USB disconnect, device number 86
[  686.691411][ T6989] udevd[6989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  686.887133][ T5706] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  687.038398][ T5706] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  687.046554][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.057258][ T5706] usb 4-1: config 0 has no interface number 0
[  687.065480][ T5706] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  687.075151][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.083489][ T5706] usb 4-1: Product: syz
[  687.087953][ T5706] usb 4-1: Manufacturer: syz
[  687.089769][T14761] SET target dimension over the limit!
[  687.092615][ T5706] usb 4-1: SerialNumber: syz
[  687.105717][ T5706] usb 4-1: config 0 descriptor??
[  687.118134][ T5706] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  687.124570][ T5706] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  687.178220][   T10] usb 3-1: new low-speed USB device number 74 using dummy_hcd
[  687.330525][   T10] usb 3-1: device descriptor read/64, error -71
[  687.386826][  T803] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  687.563312][T14753] libceph: resolve '0' (ret=-3): failed
[  687.614723][ T5706] usb 5-1: USB disconnect, device number 75
[  687.649389][  T803] usb 1-1: Using ep0 maxpacket: 32
[  687.664438][  T803] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  687.677144][  T803] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  687.686227][  T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.697222][   T10] usb 3-1: new low-speed USB device number 75 using dummy_hcd
[  687.704822][    T9] usb 4-1: USB disconnect, device number 84
[  687.711101][  T803] usb 1-1: Product: syz
[  687.716483][  T803] usb 1-1: Manufacturer: syz
[  687.722194][  T803] usb 1-1: SerialNumber: syz
[  687.734413][  T803] usb 1-1: config 0 descriptor??
[  687.742834][T14763] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  687.751745][  T803] hub 1-1:0.0: bad descriptor, ignoring hub
[  687.758782][  T803] hub 1-1:0.0: probe with driver hub failed with error -5
[  687.768144][  T803] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30
[  687.847139][   T10] usb 3-1: device descriptor read/64, error -71
[  687.956709][ T5706] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  687.967527][   T10] usb usb3-port1: attempt power cycle
[  688.028972][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.038162][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.049912][ T5776] usb 1-1: USB disconnect, device number 87
[  688.049953][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  688.106487][ T5706] usb 5-1: device descriptor read/64, error -71
[  688.304861][T14773] IPVS: length: 4096 != 8
[  688.354100][ T5706] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  688.370560][   T10] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[  688.443215][   T10] usb 3-1: device descriptor read/8, error -71
[  688.548315][ T5706] usb 5-1: device descriptor read/64, error -71
[  688.700743][T14777] netlink: 'syz.1.2390': attribute type 1 has an invalid length.
[  688.741717][ T5706] usb usb5-port1: attempt power cycle
[  688.752063][T14780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14780 comm=syz.1.2390
[  688.807579][T14777] 8021q: adding VLAN 0 to HW filter on device bond4
[  688.846385][   T10] usb 3-1: new low-speed USB device number 77 using dummy_hcd
[  688.866699][   T10] usb 3-1: device descriptor read/8, error -71
[  688.976480][   T10] usb usb3-port1: unable to enumerate USB device
[  689.135940][ T5706] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  689.153225][T14792] __nla_validate_parse: 41 callbacks suppressed
[  689.153238][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2395'.
[  689.170178][ T5706] usb 5-1: device descriptor read/8, error -71
[  689.226190][    T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  689.299889][T14798] Cannot find del_set index 0 as target
[  689.365822][    T9] usb 1-1: device descriptor read/64, error -71
[  689.428493][ T5706] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  689.468011][ T5706] usb 5-1: device descriptor read/8, error -71
[  689.589556][ T5706] usb usb5-port1: unable to enumerate USB device
[  689.625994][    T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  689.725759][ T5706] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  689.755665][    T9] usb 1-1: device descriptor read/64, error -71
[  689.795679][   T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  689.876221][    T9] usb usb1-port1: attempt power cycle
[  689.885623][ T5706] usb 4-1: Using ep0 maxpacket: 8
[  689.892098][ T5706] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  689.900344][ T5706] usb 4-1: config 0 has no interface number 0
[  689.906522][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  689.917437][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  689.929186][ T5706] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  689.940359][ T5706] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  689.955021][ T5706] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  689.976909][   T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  689.985040][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.995330][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.016346][   T24] usb 2-1: config 0 has no interface number 0
[  690.023505][ T5706] usb 4-1: config 0 descriptor??
[  690.030711][   T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  690.042414][ T5706] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  690.051496][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.064628][   T24] usb 2-1: Product: syz
[  690.077132][   T24] usb 2-1: Manufacturer: syz
[  690.084035][   T24] usb 2-1: SerialNumber: syz
[  690.090994][   T24] usb 2-1: config 0 descriptor??
[  690.105795][   T24] ims_pcu 2-1:0.41: Missing CDC union descriptor
[  690.112240][   T24] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22
[  690.112366][T14812] Cannot find del_set index 2 as target
[  690.215569][    T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  690.237206][    T9] usb 1-1: device descriptor read/8, error -71
[  690.242742][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.252129][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.303079][T14813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2403'.
[  690.319784][T14805] libceph: resolve '0' (ret=-3): failed
[  691.213007][ T5706] usb 2-1: USB disconnect, device number 78
[  691.324887][    T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  691.365975][    T9] usb 1-1: device descriptor read/8, error -71
[  691.485094][    T9] usb usb1-port1: unable to enumerate USB device
[  691.511614][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2407'.
[  691.792146][T14832] netlink: 'syz.2.2406': attribute type 1 has an invalid length.
[  691.927242][T14839] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2408'.
[  691.983296][T14832] zonefs (nullb0) ERROR: Not a zoned block device
[  692.135761][ T5706] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  692.304847][ T5706] usb 2-1: Using ep0 maxpacket: 32
[  692.324574][ T5706] usb 2-1: config index 0 descriptor too short (expected 3659, got 75)
[  692.344196][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.378028][ T5706] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  692.388109][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.399649][ T5706] usb 2-1: Product: syz
[  692.471541][ T5706] usb 2-1: Manufacturer: syz
[  692.506497][   T10] usb 4-1: USB disconnect, device number 85
[  692.569519][ T5706] usb 2-1: SerialNumber: syz
[  692.612031][   T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  692.621350][ T5706] usb 2-1: config 0 descriptor??
[  692.817441][T14853] overlayfs: conflicting lowerdir path
[  692.821677][ T5706] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  693.803926][   T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  693.963814][   T10] usb 4-1: Using ep0 maxpacket: 32
[  693.974132][   T10] usb 4-1: too many configurations: 243, using maximum allowed: 8
[  693.985629][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  693.999962][   T10] usb 4-1: can't read configurations, error -61
[  694.073579][ T5706] gspca_sunplus: reg_r err -110
[  694.142259][   T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  694.313310][   T10] usb 4-1: Using ep0 maxpacket: 32
[  694.327740][   T10] usb 4-1: too many configurations: 243, using maximum allowed: 8
[  694.347431][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  694.357181][   T10] usb 4-1: can't read configurations, error -61
[  694.366176][   T10] usb usb4-port1: attempt power cycle
[  694.795371][   T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  694.978061][   T10] usb 4-1: Using ep0 maxpacket: 32
[  695.053046][ T5706] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  695.083878][   T10] usb 4-1: too many configurations: 243, using maximum allowed: 8
[  695.121011][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  695.121109][   T10] usb 4-1: can't read configurations, error -61
[  695.282987][   T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  695.307604][   T10] usb 4-1: Using ep0 maxpacket: 32
[  695.315564][   T10] usb 4-1: too many configurations: 243, using maximum allowed: 8
[  695.346801][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  695.346900][   T10] usb 4-1: can't read configurations, error -61
[  695.356732][   T10] usb usb4-port1: unable to enumerate USB device
[  695.732918][T14882] binder: 14881:14882 ioctl c0306201 200000000080 returned -14
[  695.761000][T14882] binder: 14881:14882 ioctl c0306201 2000000003c0 returned -14
[  696.106073][ T5776] usb 2-1: USB disconnect, device number 79
[  696.199508][T14898] Cannot find del_set index 0 as target
[  697.316795][T14906] veth11: entered promiscuous mode
[  697.332528][   T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  697.352461][T14906] veth11: entered allmulticast mode
[  697.513400][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  697.687319][   T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  697.744457][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.783543][   T10] usb 2-1: config 0 descriptor??
[  697.791402][T14926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2435'.
[  697.970082][T14934] SET target dimension over the limit!
[  698.106009][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2427'.
[  698.177659][   T30] audit: type=1400 audit(1777811618.620:927): avc:  denied  { getopt } for  pid=14903 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  698.297833][T14952] netlink: 'syz.3.2442': attribute type 10 has an invalid length.
[  698.305965][T14952] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2442'.
[  698.585015][T14962] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2440'.
[  699.076394][   T30] audit: type=1400 audit(1777811619.521:928): avc:  denied  { write } for  pid=14958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.331574][T14977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2443'.
[  699.698608][T14975] loop7: detected capacity change from 0 to 16384
[  699.834911][   T30] audit: type=1400 audit(1777811620.281:929): avc:  denied  { write } for  pid=14979 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.863250][T14976] loop7: detected capacity change from 16384 to 0
[  699.864936][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2
[  699.894430][    C1] I/O error, dev loop7, sector 16256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  700.078675][T14985] fuse: Unknown parameter '0xffffffffffffffff'
[  700.127875][T14985] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  700.175392][T11603] usb 2-1: USB disconnect, device number 80
[  700.246110][T14987] veth13: entered promiscuous mode
[  700.337286][T14987] veth13: entered allmulticast mode
[  700.501743][   T10] usb 5-1: new low-speed USB device number 80 using dummy_hcd
[  701.017520][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  701.047044][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  701.072792][   T10] usb 5-1: can't read configurations, error -71
[  701.093101][   T30] audit: type=1400 audit(1777811621.541:930): avc:  denied  { write } for  pid=14983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  701.226950][   T30] audit: type=1400 audit(1777811621.671:931): avc:  denied  { write } for  pid=15024 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  701.251097][  T803] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  701.421689][  T803] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  701.429827][  T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.443763][  T803] usb 4-1: config 0 has no interface number 0
[  701.452993][  T803] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  701.462555][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.470706][  T803] usb 4-1: Product: syz
[  701.474931][  T803] usb 4-1: Manufacturer: syz
[  701.481569][  T803] usb 4-1: SerialNumber: syz
[  701.492068][  T803] usb 4-1: config 0 descriptor??
[  701.500859][  T803] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  701.507263][  T803] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  701.930971][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2458'.
[  701.959585][T15015] libceph: resolve '0' (ret=-3): failed
[  702.077051][T15048] ubi16: attaching mtd0
[  702.751756][T15048] ubi16: scanning is finished
[  702.759255][T15048] ubi16: empty MTD device detected
[  702.766892][   T10] usb 4-1: USB disconnect, device number 90
[  702.937336][T15062] veth17: entered promiscuous mode
[  702.943376][T15062] veth17: entered allmulticast mode
[  702.994300][T15048] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[  703.193453][    T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  703.361864][   T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  703.409349][    T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  703.458572][T15073] macsec2: entered promiscuous mode
[  703.522318][T15073] macsec2: entered allmulticast mode
[  703.527834][    T9] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  703.601057][    T9] usb 1-1: Product: syz
[  703.630524][   T10] usb 5-1: Using ep0 maxpacket: 32
[  703.644979][    T9] usb 1-1: Manufacturer: syz
[  703.679784][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.705856][    T9] usb 1-1: SerialNumber: syz
[  703.872574][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.985070][    T9] usb 1-1: config 0 descriptor??
[  704.098329][    T9] ch341 1-1:0.0: ch341-uart converter detected
[  704.109456][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  704.144929][   T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  704.783929][   T10] usb 5-1: Product: syz
[  705.162985][   T10] usb 5-1: Manufacturer: syz
[  705.189585][   T10] hub 5-1:4.0: USB hub found
[  705.228720][    T9] ch341-uart ttyUSB0: break control not supported, using simulated break
[  705.255730][    T9] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  705.266081][    T9] usb 1-1: USB disconnect, device number 92
[  705.275838][    T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  705.285850][    T9] ch341 1-1:0.0: device disconnected
[  705.397883][   T10] hub 5-1:4.0: 2 ports detected
[  705.677917][   T30] audit: type=1400 audit(1777811626.121:932): avc:  denied  { write } for  pid=15096 comm="syz.2.2472" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  706.203648][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.224789][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.235580][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.240682][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.260519][T15105] hfsplus: unable to find HFS+ superblock
[  706.296656][   T10] usb 5-1: USB disconnect, device number 82
[  706.330798][   T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  706.480465][   T24] usb 1-1: Using ep0 maxpacket: 16
[  706.519713][  T803] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  706.541963][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.553618][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.564225][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  706.573757][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.777872][T15117] netlink: 'syz.2.2478': attribute type 2 has an invalid length.
[  706.834269][T15117] : entered promiscuous mode
[  707.672862][   T24] usb 1-1: config 0 descriptor??
[  707.686492][   T24] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  707.694603][   T24] usbhid 1-1:0.0: can't add hid device: -22
[  707.700613][   T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  707.705871][  T803] usb 4-1: Using ep0 maxpacket: 16
[  707.725353][  T803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  707.740320][T15112] comedi comedi3: pcl812: I/O port conflict (0x100,16)
[  707.747400][  T803] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  707.758354][  T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.546567][  T803] usb 4-1: config 0 descriptor??
[  708.571846][   T30] audit: type=1400 audit(1777811628.891:933): avc:  denied  { listen } for  pid=15100 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  708.880193][T15106] netlink: 'syz.3.2474': attribute type 7 has an invalid length.
[  708.988261][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'.
[  708.998076][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'.
[  709.009781][T11603] usb 1-1: USB disconnect, device number 93
[  709.231909][  T803] logitech 0003:046D:C20E.0018: rdesc size test failed for formula gp
[  710.012895][  T803] hid_parser_main: 28 callbacks suppressed
[  710.012922][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.026423][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.034135][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.041640][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.048798][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.056601][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.066780][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.074661][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.082112][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.089388][  T803] logitech 0003:046D:C20E.0018: unknown main item tag 0x0
[  710.099870][  T803] logitech 0003:046D:C20E.0018: hidraw0: USB HID v0.0a Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0
[  710.308154][  T803] usb 4-1: USB disconnect, device number 91
[  710.713344][T15166] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  710.720979][T15166] UDF-fs: Scanning with blocksize 512 failed
[  710.727292][T15166] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  710.734779][T15166] UDF-fs: Scanning with blocksize 1024 failed
[  710.741152][T15166] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  710.748607][T15166] UDF-fs: Scanning with blocksize 2048 failed
[  710.754984][T15166] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  710.762598][T15166] UDF-fs: Scanning with blocksize 4096 failed
[  710.842977][T15166] netlink: 'syz.0.2493': attribute type 2 has an invalid length.
[  710.850786][T15166] netlink: 'syz.0.2493': attribute type 2 has an invalid length.
[  710.906601][   T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  711.290404][   T24] usb 3-1: Using ep0 maxpacket: 32
[  711.511162][   T24] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  711.519870][   T24] usb 3-1: config 2 has no interface number 0
[  711.613832][   T24] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  711.661752][   T24] usb 3-1: config 2 interface 88 has no altsetting 0
[  711.683124][   T24] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  711.750651][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.759483][   T24] usb 3-1: Product: syz
[  711.790394][   T24] usb 3-1: Manufacturer: syz
[  711.809958][   T24] usb 3-1: SerialNumber: syz
[  711.835022][T15163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  712.257214][T15163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  712.921402][ T5776] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  713.099934][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.135409][ T5776] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df
[  713.263285][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.278835][T15231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.290503][T15231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.498600][ T5776] usb 2-1: config 0 descriptor??
[  713.511345][ T5776] pwc: Askey VC010 type 2 USB webcam detected.
[  713.836629][T15238] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  713.923219][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00
[  713.969364][ T5776] pwc: recv_control_msg error -32 req 02 val 2700
[  713.981072][ T5776] pwc: recv_control_msg error -32 req 02 val 2c00
[  714.249886][    T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  714.265707][ T5776] pwc: recv_control_msg error -32 req 04 val 1300
[  714.285743][ T5776] pwc: recv_control_msg error -71 req 04 val 1400
[  714.293055][ T5776] pwc: recv_control_msg error -71 req 02 val 2000
[  714.302463][ T5776] pwc: recv_control_msg error -71 req 02 val 2100
[  714.316196][ T5776] pwc: recv_control_msg error -71 req 04 val 1500
[  714.331248][ T5776] pwc: recv_control_msg error -71 req 02 val 2500
[  714.345213][ T5776] pwc: recv_control_msg error -71 req 02 val 2400
[  714.359411][ T5776] pwc: recv_control_msg error -71 req 02 val 2600
[  714.374381][ T5776] pwc: recv_control_msg error -71 req 02 val 2900
[  714.389255][ T5776] pwc: recv_control_msg error -71 req 02 val 2800
[  714.404745][ T5776] pwc: recv_control_msg error -71 req 04 val 1100
[  714.418238][ T5776] pwc: recv_control_msg error -71 req 04 val 1200
[  714.426618][ T5776] pwc: Registered as video103.
[  714.432443][    T9] usb 5-1: Using ep0 maxpacket: 16
[  714.439998][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31
[  714.456694][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  714.481056][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  714.504519][ T5776] usb 2-1: USB disconnect, device number 82
[  714.524609][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.547228][    T9] usb 5-1: Product: syz
[  714.568678][    T9] usb 5-1: Manufacturer: syz
[  714.587451][    T9] usb 5-1: SerialNumber: syz
[  714.629171][    T9] usb 5-1: config 0 descriptor??
[  714.678381][    T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  714.730231][    T9] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  714.735765][   T24] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  714.786843][   T24] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  714.818815][   T24] asix 3-1:2.88: probe with driver asix failed with error -71
[  714.854356][   T24] usb 3-1: USB disconnect, device number 78
[  715.170428][   T30] audit: type=1400 audit(1777811635.581:934): avc:  denied  { bind } for  pid=15258 comm="syz.0.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  716.022980][    T9] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  716.102653][   T30] audit: type=1400 audit(1777811635.581:935): avc:  denied  { name_bind } for  pid=15258 comm="syz.0.2520" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  716.125310][   T30] audit: type=1400 audit(1777811635.581:936): avc:  denied  { node_bind } for  pid=15258 comm="syz.0.2520" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  716.334654][T15265] netlink: 'syz.2.2522': attribute type 1 has an invalid length.
[  716.359068][    T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  716.367723][    T9] em28xx 5-1:0.0: board has no eeprom
[  716.434415][T15265] 8021q: adding VLAN 0 to HW filter on device bond2
[  716.568172][   T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  716.596559][T15275] binder: 15274:15275 ioctl c0306201 0 returned -14
[  716.670713][    T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  716.691984][    T9] em28xx 5-1:0.0: dvb set to bulk mode.
[  716.710775][   T10] em28xx 5-1:0.0: Binding DVB extension
[  716.726424][    T9] usb 5-1: USB disconnect, device number 83
[  716.751525][    T9] em28xx 5-1:0.0: Disconnecting em28xx
[  716.767655][   T24] usb 2-1: Using ep0 maxpacket: 32
[  716.778677][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  716.798397][   T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  716.820720][   T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  716.852557][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.882268][   T24] usb 2-1: Product: syz
[  716.890453][   T24] usb 2-1: Manufacturer: syz
[  716.906262][   T10] em28xx 5-1:0.0: Registering input extension
[  716.912841][   T24] usb 2-1: SerialNumber: syz
[  716.944367][    T9] em28xx 5-1:0.0: Closing input extension
[  717.144325][   T24] usb 2-1: Cannot retrieve CPort count: 0
[  717.156438][   T24] usb 2-1: Cannot retrieve CPort count: -5
[  717.172216][   T24] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -5
[  717.222452][    T9] em28xx 5-1:0.0: Freeing device
[  717.794613][T15313] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2535'.
[  717.983913][T15315] lo speed is unknown, defaulting to 1000
[  718.043915][T15315] lo speed is unknown, defaulting to 1000
[  718.798093][T15323] binder: 15322:15323 ioctl c0306201 0 returned -14
[  718.844994][ T5776] usb 2-1: USB disconnect, device number 83
[  719.300357][ T5776] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  719.509887][   T30] audit: type=1400 audit(1777811639.871:937): avc:  denied  { write } for  pid=15342 comm="syz.3.2545" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  719.544848][ T5776] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  719.553136][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  719.564786][ T5776] usb 2-1: config 0 has no interface number 0
[  719.577991][ T5776] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  719.601301][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.628241][ T5776] usb 2-1: config 0 descriptor??
[  719.939307][    T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  719.955508][  T803] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  720.005341][   T10] usb 2-1: USB disconnect, device number 84
[  720.120657][    T9] usb 3-1: Using ep0 maxpacket: 8
[  720.127426][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.137654][  T803] usb 5-1: config 2 has an invalid interface number: 3 but max is 0
[  720.146331][  T803] usb 5-1: config 2 has no interface number 0
[  720.153002][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  720.162553][  T803] usb 5-1: config 2 interface 3 has no altsetting 0
[  720.169239][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.179154][  T803] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.a2
[  720.190426][    T9] usb 3-1: config 0 descriptor??
[  720.196169][  T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.205300][  T803] usb 5-1: Product: syz
[  720.213212][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  720.224166][  T803] usb 5-1: Manufacturer: syz
[  720.232796][  T803] usb 5-1: SerialNumber: syz
[  720.477901][  T803] usb 5-1: No union descriptors
[  720.489758][  T803] usb 5-1: USB disconnect, device number 84
[  720.809436][T15367] overlayfs: failed to clone upperpath
[  721.604314][T15370] fuse: Unknown parameter '0xffffffffffffffff'
[  721.642162][T15370] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  721.732599][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2557'.
[  721.900366][  T803] usb 2-1: new low-speed USB device number 85 using dummy_hcd
[  722.280699][    T9] gspca_vc032x: reg_w err -110
[  722.285657][    T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -110
[  722.979697][T15394] libceph: resolve '0' (ret=-3): failed
[  722.991169][  T803] usb 2-1: unable to get BOS descriptor or descriptor too short
[  723.002019][  T803] usb 2-1: unable to read config index 0 descriptor/start: -71
[  723.019651][  T803] usb 2-1: can't read configurations, error -71
[  723.374267][ T5776] usb 3-1: USB disconnect, device number 79
[  723.460520][   T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  723.612391][   T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  723.622673][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.634342][   T24] usb 4-1: config 0 has no interface number 0
[  723.646900][   T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  723.657101][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.667549][   T24] usb 4-1: Product: syz
[  723.729604][   T24] usb 4-1: Manufacturer: syz
[  723.764912][   T24] usb 4-1: SerialNumber: syz
[  723.790606][ T5776] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  724.000535][ T5776] usb 3-1: Using ep0 maxpacket: 16
[  724.128812][   T24] usb 4-1: config 0 descriptor??
[  724.182864][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.490770][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.500921][   T24] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  724.547278][   T24] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  724.568297][T15413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2568'.
[  724.583095][T15401] libceph: resolve '0' (ret=-3): failed
[  724.615211][ T5776] usb 3-1: unable to get BOS descriptor or descriptor too short
[  724.674248][ T5776] usb 3-1: unable to read config index 0 descriptor/start: -71
[  724.693185][ T5776] usb 3-1: can't read configurations, error -71
[  724.859199][   T24] usb 4-1: USB disconnect, device number 92
[  725.030590][ T5776] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  725.251260][ T5776] usb 3-1: device descriptor read/64, error -71
[  725.272653][T15441] SET target dimension over the limit!
[  725.372209][ T5776] usb usb3-port1: attempt power cycle
[  725.432714][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'.
[  725.500547][  T803] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[  725.612575][T15448] veth15: entered promiscuous mode
[  725.617793][T15448] veth15: entered allmulticast mode
[  725.652174][  T803] usb 5-1: unable to get BOS descriptor or descriptor too short
[  725.660694][  T803] usb 5-1: not running at top speed; connect to a high speed hub
[  725.669697][  T803] usb 5-1: config 1 has an invalid descriptor of length 232, skipping remainder of the config
[  725.680751][    T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  725.691538][  T803] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  725.708485][  T803] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  725.745191][  T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.765754][  T803] usb 5-1: Product: syz
[  725.775129][  T803] usb 5-1: Manufacturer: syz
[  725.786586][  T803] usb 5-1: SerialNumber: syz
[  725.790386][ T5776] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  725.832250][ T5776] usb 3-1: device descriptor read/8, error -71
[  725.903559][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  725.924308][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 48, changing to 7
[  725.947233][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24624, setting to 1024
[  725.963434][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2582'.
[  725.975079][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  725.986611][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.021750][    T9] usb 2-1: Product: syz
[  726.037183][    T9] usb 2-1: Manufacturer: syz
[  726.063757][    T9] usb 2-1: SerialNumber: syz
[  726.078664][    T9] usb 2-1: config 0 descriptor??
[  726.100573][  T803] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  726.640393][ T5776] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[  726.644663][    T9] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 09, bLength 9, bSynchAddress 30
[  726.657651][  T803] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  726.672761][  T803] usb 5-1: USB disconnect, device number 85
[  726.680669][ T5776] usb 3-1: device descriptor read/8, error -71
[  726.701303][ T6986] udevd[6986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  726.764699][    T9] usb 2-1: USB disconnect, device number 87
[  726.801263][ T5776] usb usb3-port1: unable to enumerate USB device
[  727.650347][ T5776] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  727.928189][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'.
[  728.064161][T15497] netlink: 'syz.1.2590': attribute type 2 has an invalid length.
[  728.077558][T15497] : entered promiscuous mode
[  728.143903][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'.
[  728.166682][T15494] netlink: 'syz.2.2591': attribute type 19 has an invalid length.
[  728.180866][T15494] netlink: 'syz.2.2591': attribute type 20 has an invalid length.
[  728.192484][ T5776] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  728.201320][ T5776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.212088][ T5776] usb 5-1: config 0 has no interface number 0
[  728.220036][ T5776] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  728.221688][  T370] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  728.245487][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.253092][T15499] veth17: entered promiscuous mode
[  728.263796][ T5776] usb 5-1: Product: syz
[  728.273284][ T5776] usb 5-1: Manufacturer: syz
[  728.277447][T15499] veth17: entered allmulticast mode
[  728.282914][ T5776] usb 5-1: SerialNumber: syz
[  728.391030][ T5776] usb 5-1: config 0 descriptor??
[  728.399761][ T5776] ims_pcu 5-1:0.41: Missing CDC union descriptor
[  728.418493][ T5776] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22
[  728.433768][  T370] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  728.457180][  T370] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  728.478975][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2594'.
[  728.506021][  T370] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  728.524882][T15505] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  728.608121][T15480] libceph: resolve '0' (ret=-3): failed
[  728.723414][  T803] usb 5-1: USB disconnect, device number 86
[  729.533703][T15527] fuse: Unknown parameter ''
[  729.561992][T15531] fuse: Bad value for 'fd'
[  729.667182][T15536] netlink: 'syz.0.2605': attribute type 1 has an invalid length.
[  729.714586][T15536] 8021q: adding VLAN 0 to HW filter on device bond5
[  729.740616][  T803] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  729.754114][T15541] 8021q: adding VLAN 0 to HW filter on device bond5
[  729.761976][T15541] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  729.773466][T15541] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  729.799091][T15536] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  729.807807][T15536] bond5: (slave wlan0): Opening slave failed
[  729.875418][   T30] audit: type=1400 audit(1777811650.321:938): avc:  denied  { getopt } for  pid=15544 comm="syz.4.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  729.911947][   T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  729.924725][  T803] usb 2-1: Using ep0 maxpacket: 8
[  729.937387][  T803] usb 2-1: unable to get BOS descriptor or descriptor too short
[  729.954703][  T803] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  729.965766][  T803] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  729.977328][  T803] usb 2-1: SerialNumber: ર볠㍫㒁箶ꇶ鬵폎弍贔侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧右曁쫉齤鱔喺猪퍒觭䄚慉赎㶧ꅺ룹ᯒ輓纁絃舍Ⴅꌁ솪囘밊ꋨ珴在
[  730.094341][   T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  730.111981][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.118768][   T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  730.138167][   T10] usb 4-1: Product: syz
[  730.144361][   T10] usb 4-1: Manufacturer: syz
[  730.149175][   T10] usb 4-1: SerialNumber: syz
[  730.167231][   T10] usb 4-1: config 0 descriptor??
[  730.282380][T15562] bridge12: entered promiscuous mode
[  730.352063][  T803] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  730.663834][  T803] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  730.688059][  T803] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  730.706792][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.706810][  T803] usb 2-1: media controller created
[  730.726068][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.731139][  T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.736353][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  730.757663][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  730.795189][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.954244][   T24] usb 3-1: config 0 descriptor??
[  730.961755][  T803] zl10353_read_register: readreg error (reg=127, ret==0)
[  731.044851][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2612'.
[  731.448089][   T10] usb 4-1: USB disconnect, device number 93
[  731.503031][   T24] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  731.607382][  T803] usb 2-1: USB disconnect, device number 88
[  731.670929][   T24] usb 3-1: USB disconnect, device number 84
[  732.058574][T15575] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  732.061655][T15576] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  732.097742][T15575] bond5: entered promiscuous mode
[  732.102897][T15575] bond5: entered allmulticast mode
[  732.108341][T15575] 8021q: adding VLAN 0 to HW filter on device bond5
[  732.119559][T15579] erspan1: entered allmulticast mode
[  732.139079][T15579] bond5: (slave erspan1): making interface the new active one
[  732.147287][T15579] erspan1: entered promiscuous mode
[  732.153574][T15579] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  732.188530][T15580] hsr0: entered promiscuous mode
[  732.285274][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'.
[  733.580647][   T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  733.754209][   T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  733.786217][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  733.810146][   T24] usb 4-1: config 0 has no interface number 0
[  733.930652][   T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  733.948409][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.991060][   T24] usb 4-1: Product: syz
[  734.006176][   T24] usb 4-1: Manufacturer: syz
[  734.028160][   T24] usb 4-1: SerialNumber: syz
[  734.086112][   T24] usb 4-1: config 0 descriptor??
[  734.232477][   T24] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  734.254256][   T24] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  734.906933][T15592] libceph: resolve '0' (ret=-3): failed
[  735.037481][T15622] fuse: Unknown parameter ''
[  735.041164][T15619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2627'.
[  735.172222][  T803] usb 4-1: USB disconnect, device number 94
[  735.437371][T11603] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  736.131906][T15632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.172538][T15632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.247483][T11603] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  736.260068][T11603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.268452][T11603] usb 5-1: Product: syz
[  736.272759][T11603] usb 5-1: Manufacturer: syz
[  736.277504][T11603] usb 5-1: SerialNumber: syz
[  736.290077][T11603] usb 5-1: config 0 descriptor??
[  736.371121][  T803] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  736.453837][T15640] netlink: 'syz.2.2635': attribute type 4 has an invalid length.
[  736.494995][T15640] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2635'.
[  736.512270][T11603] usb 5-1: USB disconnect, device number 87
[  736.540388][  T803] usb 4-1: Using ep0 maxpacket: 8
[  736.551727][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2635'.
[  736.569682][  T803] usb 4-1: unable to get BOS descriptor or descriptor too short
[  736.581109][  T803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  736.615431][  T803] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C
[  736.635541][  T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  736.657531][  T803] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  736.673350][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.684045][  T803] usb 4-1: Product: syz
[  736.689001][  T803] usb 4-1: Manufacturer: syz
[  736.777698][  T803] usb 4-1: SerialNumber: syz
[  737.240340][  T803] usb 4-1: selecting invalid altsetting 1
[  737.292477][T15656] SET target dimension over the limit!
[  737.343500][  T803] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  737.396117][  T803] usb 4-1: USB disconnect, device number 95
[  737.432156][ T6986] udevd[6986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  737.536581][T15666] 9p: Bad value for 'rfdno'
[  737.842866][T15678] fuse: Unknown parameter '0xffffffffffffffff'
[  737.888099][T15678] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  738.170499][T11603] usb 2-1: new low-speed USB device number 89 using dummy_hcd
[  738.710193][T11603] usb 2-1: unable to get BOS descriptor or descriptor too short
[  738.742880][T11603] usb 2-1: unable to read config index 0 descriptor/start: -71
[  738.778647][T11603] usb 2-1: can't read configurations, error -71
[  739.269309][T15694] overlayfs: failed to resolve './file2/file0': -20
[  740.057158][T15706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2655'.
[  741.110829][T15714] fuse: Bad value for 'fd'
[  741.139340][T11603] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  741.390789][T11603] usb 2-1: device descriptor read/64, error -71
[  741.481504][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  741.520593][T11603] usb usb2-port1: attempt power cycle
[  741.882451][T15741] binder: 15739:15741 ioctl c0306201 0 returned -14
[  742.000810][   T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  742.031229][T11603] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  742.661080][T11603] usb 2-1: device descriptor read/8, error -71
[  742.800736][   T10] usb 5-1: device descriptor read/64, error -71
[  742.902319][T11603] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  742.971208][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'.
[  743.060726][   T10] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  743.142165][T11603] usb 2-1: device not accepting address 92, error -71
[  743.192427][T11603] usb usb2-port1: unable to enumerate USB device
[  743.210442][   T10] usb 5-1: device descriptor read/64, error -71
[  743.212233][T15747] overlayfs: failed to resolve './bus': -2
[  743.403302][T15752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2668'.
[  743.767115][   T10] usb usb5-port1: attempt power cycle
[  743.878306][T15747] overlayfs: overlapping lowerdir path
[  743.982613][T15751] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  744.161143][T15751] bond6 (unregistering): Released all slaves
[  744.303153][   T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  745.464814][T15774] netlink: 'syz.0.2671': attribute type 4 has an invalid length.
[  745.788805][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'.
[  745.935762][   T10] usb 5-1: device descriptor read/8, error -71
[  746.733683][T15787] xt_TPROXY: Can be used only with -p tcp or -p udp
[  747.885253][T15798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2678'.
[  747.953269][   T30] audit: type=1400 audit(1777811668.294:939): avc:  denied  { getopt } for  pid=15797 comm="syz.0.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  748.964165][   T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  749.155561][   T10] usb 2-1: Using ep0 maxpacket: 16
[  749.168677][   T10] usb 2-1: config index 0 descriptor too short (expected 29114, got 36)
[  749.183155][   T10] usb 2-1: config 225 has too many interfaces: 157, using maximum allowed: 32
[  749.195224][   T10] usb 2-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config
[  749.208123][   T10] usb 2-1: config 225 has 1 interface, different from the descriptor's value: 157
[  749.218080][   T10] usb 2-1: config 225 has no interface number 0
[  749.227380][   T10] usb 2-1: config 225 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  749.244709][   T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  749.293887][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.312264][   T10] usb 2-1: Product: syz
[  749.320971][   T10] usb 2-1: Manufacturer: syz
[  749.325616][   T10] usb 2-1: SerialNumber: syz
[  749.572617][T11617] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  749.585457][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.626897][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.664809][   T10] asix 2-1:225.34: probe with driver asix failed with error -22
[  749.722204][   T10] usb 2-1: USB disconnect, device number 93
[  749.766124][T11617] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  749.786813][T11617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.802540][T15829] binder: BINDER_SET_CONTEXT_MGR already set
[  749.837953][T15829] binder: 15828:15829 ioctl 4018620d 200000004a80 returned -16
[  749.846640][T11617] usb 5-1: config 0 descriptor??
[  749.871914][T15829] binder: 15828:15829 ioctl c0306201 0 returned -14
[  750.124453][T15841] Cannot find del_set index 0 as target
[  750.207933][T15844] lo speed is unknown, defaulting to 1000
[  750.215178][T15844] lo speed is unknown, defaulting to 1000
[  750.233426][T15847] 8021q: adding VLAN 0 to HW filter on device team0
[  750.240588][T15847] team0: Cannot enslave team device to itself
[  750.500033][T15853] 9p: Unknown uid 00000000004294967295
[  751.087371][T15847] orangefs_mount: mount request failed with -4
[  751.275170][T11617] usb 5-1: Cannot set autoneg
[  751.282366][T11617] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  751.419747][   T30] audit: type=1400 audit(1777811671.541:940): avc:  denied  { load_policy } for  pid=15860 comm="syz.2.2696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  751.453261][T15862] SELinux: failed to load policy
[  751.696042][T11617] usb 5-1: USB disconnect, device number 92
[  751.852782][T15866] fuse: Unknown parameter ''
[  752.232959][T11603] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  752.397737][T11603] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  752.408621][T11603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.416838][T11603] usb 2-1: Product: syz
[  752.421235][T11603] usb 2-1: Manufacturer: syz
[  752.426457][T11603] usb 2-1: SerialNumber: syz
[  752.457097][T11603] usb 2-1: config 0 descriptor??
[  752.768639][T11603] usb 2-1: USB disconnect, device number 94
[  752.860191][T15889] SET target dimension over the limit!
[  753.179654][T15897] xt_hashlimit: size too large, truncated to 1048576
[  754.459365][T15891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.774191][T15891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.357643][T15922] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  755.362459][T15891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.387117][   T30] audit: type=1400 audit(1777811675.247:941): avc:  denied  { getopt } for  pid=15920 comm="syz.1.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  755.567553][   T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  755.689771][T15934] SET target dimension over the limit!
[  755.744727][T15891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.765396][   T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  755.835648][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.896474][   T10] usb 3-1: config 0 has no interface number 0
[  755.919339][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2717'.
[  755.944853][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  755.972238][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.012962][   T10] usb 3-1: Product: syz
[  756.034175][   T10] usb 3-1: Manufacturer: syz
[  756.057029][   T10] usb 3-1: SerialNumber: syz
[  756.083015][   T10] usb 3-1: config 0 descriptor??
[  756.127205][   T10] ims_pcu 3-1:0.41: Missing CDC union descriptor
[  756.152371][   T10] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22
[  756.363211][T15918] libceph: resolve '0' (ret=-3): failed
[  756.575764][ T5776] usb 3-1: USB disconnect, device number 85
[  757.341237][ T5776] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  757.409653][  T111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.573043][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  758.183216][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  758.225978][ T1033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  758.255637][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  758.278755][T15950] netlink: 'syz.4.2720': attribute type 4 has an invalid length.
[  758.286617][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2720'.
[  758.298144][T15950] .`: renamed from bond0
[  758.307147][ T5776] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  758.317317][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.345660][T15950] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2720'.
[  758.362151][ T5776] usb 4-1: config 0 descriptor??
[  758.378586][  T111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  758.430554][  T111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  758.523223][T15954] fuse: Unknown parameter ''
[  758.549574][T15892] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.555988][T15956] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  758.605360][  T111] ==================================================================
[  758.613453][  T111] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1580/0x1b10
[  758.614234][T15956] CIFS mount error: No usable UNC path provided in device string!
[  758.614234][T15956] 
[  758.621093][  T111] Read of size 8 at addr ffff888035d8bca8 by task kworker/u8:5/111
[  758.621113][  T111] 
[  758.621126][  T111] CPU: 1 UID: 0 PID: 111 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  758.621149][  T111] Tainted: [L]=SOFTLOCKUP
[  758.621156][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  758.621169][  T111] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  758.621195][  T111] Call Trace:
[  758.621202][  T111]  <TASK>
[  758.621209][  T111]  dump_stack_lvl+0x100/0x190
[  758.621228][  T111]  print_report+0x13d/0x4b0
[  758.621250][  T111]  ? __virt_addr_valid+0x239/0x430
[  758.621268][  T111]  ? __mutex_lock+0x1580/0x1b10
[  758.621287][  T111]  kasan_report+0xdf/0x1d0
[  758.621304][  T111]  ? __mutex_lock+0x1580/0x1b10
[  758.621324][  T111]  __mutex_lock+0x1580/0x1b10
[  758.621342][  T111]  ? udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  758.621364][  T111]  ? __pfx___mutex_lock+0x10/0x10
[  758.621385][  T111]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  758.621402][  T111]  ? debug_object_deactivate+0x2e4/0x3b0
[  758.621422][  T111]  ? pwq_dec_nr_in_flight+0x965/0xed0
[  758.621444][  T111]  ? udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  758.621462][  T111]  udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  758.621483][  T111]  ? rcu_is_watching+0x12/0xc0
[  758.621512][  T111]  process_one_work+0xa0e/0x1980
[  758.621536][  T111]  ? __pfx_process_one_work+0x10/0x10
[  758.621558][  T111]  ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10
[  758.621579][  T111]  worker_thread+0x5ef/0xe50
[  758.621601][  T111]  ? kthread+0x13a/0x450
[  758.621619][  T111]  ? __pfx_worker_thread+0x10/0x10
[  758.621637][  T111]  kthread+0x370/0x450
[  758.621654][  T111]  ? __pfx_kthread+0x10/0x10
[  758.621672][  T111]  ret_from_fork+0x72b/0xd50
[  758.621692][  T111]  ? __pfx_ret_from_fork+0x10/0x10
[  758.621711][  T111]  ? __switch_to+0x800/0x1100
[  758.621733][  T111]  ? __pfx_kthread+0x10/0x10
[  758.621751][  T111]  ret_from_fork_asm+0x1a/0x30
[  758.621776][  T111]  </TASK>
[  758.621782][  T111] 
[  758.655843][T15956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  758.656488][  T111] Allocated by task 15891:
[  758.839167][  T111]  kasan_save_stack+0x30/0x50
[  758.843839][  T111]  kasan_save_track+0x14/0x30
[  758.848523][  T111]  __kasan_kmalloc+0xaa/0xb0
[  758.853090][  T111]  __kmalloc_noprof+0x301/0x850
[  758.857915][  T111]  udp_tunnel_nic_netdevice_event+0x12c6/0x1dd0
[  758.864130][  T111]  notifier_call_chain+0x99/0x400
[  758.869132][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  758.875021][  T111]  register_netdevice+0x18fe/0x24b0
[  758.880217][  T111]  nsim_create+0xc8d/0x1420
[  758.884705][  T111]  __nsim_dev_port_add+0x3ba/0x8f0
[  758.889807][  T111]  nsim_dev_reload_up+0x586/0x830
[  758.894807][  T111]  devlink_reload+0x2f2/0x7a0
[  758.899459][  T111]  devlink_nl_reload_doit+0xd1a/0x11c0
[  758.904894][  T111]  genl_family_rcv_msg_doit+0x214/0x300
[  758.910418][  T111]  genl_rcv_msg+0x560/0x800
[  758.914895][  T111]  netlink_rcv_skb+0x159/0x420
[  758.919644][  T111]  genl_rcv+0x28/0x40
[  758.923611][  T111]  netlink_unicast+0x585/0x850
[  758.928360][  T111]  netlink_sendmsg+0x8b0/0xda0
[  758.932169][   T30] audit: type=1400 audit(1777811678.569:942): avc:  denied  { create } for  pid=15961 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  758.933100][  T111]  ____sys_sendmsg+0x9e1/0xb70
[  758.933122][  T111]  ___sys_sendmsg+0x190/0x1e0
[  758.933139][  T111]  __sys_sendmsg+0x170/0x220
[  758.958348][   T30] audit: type=1400 audit(1777811678.569:943): avc:  denied  { write } for  pid=15961 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  758.961843][  T111]  do_syscall_64+0x10b/0xf80
[  758.961869][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.996070][  T111] 
[  758.998372][  T111] Freed by task 15892:
[  759.002420][  T111]  kasan_save_stack+0x30/0x50
[  759.007089][  T111]  kasan_save_track+0x14/0x30
[  759.011736][  T111]  kasan_save_free_info+0x3b/0x70
[  759.016749][  T111]  __kasan_slab_free+0x5f/0x80
[  759.021494][  T111]  kfree+0x223/0x6c0
[  759.025362][  T111]  udp_tunnel_nic_netdevice_event+0xb7d/0x1dd0
[  759.031492][  T111]  notifier_call_chain+0x99/0x400
[  759.036491][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  759.042361][  T111]  unregister_netdevice_many_notify+0x118f/0x24f0
[  759.048747][  T111]  unregister_netdevice_queue+0x30b/0x3c0
[  759.054448][  T111]  nsim_destroy+0x1ce/0x8e0
[  759.058926][  T111]  __nsim_dev_port_del+0x194/0x2b0
[  759.064010][  T111]  nsim_dev_reload_destroy+0x10a/0x4a0
[  759.069460][  T111]  nsim_dev_reload_down+0x66/0xd0
[  759.074640][  T111]  devlink_reload+0x1ae/0x7a0
[  759.079299][  T111]  devlink_nl_reload_doit+0xd1a/0x11c0
[  759.082946][   T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  759.084735][  T111]  genl_family_rcv_msg_doit+0x214/0x300
[  759.084760][  T111]  genl_rcv_msg+0x560/0x800
[  759.102272][  T111]  netlink_rcv_skb+0x159/0x420
[  759.107014][  T111]  genl_rcv+0x28/0x40
[  759.110971][  T111]  netlink_unicast+0x585/0x850
[  759.115711][  T111]  netlink_sendmsg+0x8b0/0xda0
[  759.120458][  T111]  ____sys_sendmsg+0x9e1/0xb70
[  759.125198][  T111]  ___sys_sendmsg+0x190/0x1e0
[  759.129849][  T111]  __sys_sendmsg+0x170/0x220
[  759.134415][  T111]  do_syscall_64+0x10b/0xf80
[  759.138981][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.144863][  T111] 
[  759.147161][  T111] Last potentially related work creation:
[  759.152846][  T111]  kasan_save_stack+0x30/0x50
[  759.157503][  T111]  kasan_record_aux_stack+0xa7/0xc0
[  759.162676][  T111]  insert_work+0x36/0x230
[  759.166980][  T111]  __queue_work+0x3fd/0x1130
[  759.171545][  T111]  queue_work_on+0x180/0x1e0
[  759.176118][  T111]  __udp_tunnel_nic_add_port+0x6cd/0xd60
[  759.181723][  T111]  udp_tunnel_push_rx_port+0x1af/0x230
[  759.187153][  T111]  geneve_offload_rx_ports+0xbc/0x190
[  759.192499][  T111]  geneve_netdevice_event+0x77/0xb0
[  759.197701][  T111]  notifier_call_chain+0x99/0x400
[  759.202700][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  759.208572][  T111]  call_netdevice_notifiers+0x7c/0xb0
[  759.213918][  T111]  udp_tunnel_nic_netdevice_event+0x1240/0x1dd0
[  759.220134][  T111]  notifier_call_chain+0x99/0x400
[  759.225135][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  759.231015][  T111]  register_netdevice+0x18fe/0x24b0
[  759.236192][  T111]  nsim_create+0xc8d/0x1420
[  759.240669][  T111]  __nsim_dev_port_add+0x3ba/0x8f0
[  759.245758][  T111]  nsim_dev_reload_up+0x586/0x830
[  759.250773][  T111]  devlink_reload+0x2f2/0x7a0
[  759.255435][  T111]  devlink_nl_reload_doit+0xd1a/0x11c0
[  759.260871][  T111]  genl_family_rcv_msg_doit+0x214/0x300
[  759.266391][  T111]  genl_rcv_msg+0x560/0x800
[  759.270868][  T111]  netlink_rcv_skb+0x159/0x420
[  759.275606][  T111]  genl_rcv+0x28/0x40
[  759.279562][  T111]  netlink_unicast+0x585/0x850
[  759.284305][  T111]  netlink_sendmsg+0x8b0/0xda0
[  759.289042][  T111]  ____sys_sendmsg+0x9e1/0xb70
[  759.293778][  T111]  ___sys_sendmsg+0x190/0x1e0
[  759.298428][  T111]  __sys_sendmsg+0x170/0x220
[  759.302998][  T111]  do_syscall_64+0x10b/0xf80
[  759.307562][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.313439][  T111] 
[  759.315748][  T111] Second to last potentially related work creation:
[  759.322309][  T111]  kasan_save_stack+0x30/0x50
[  759.326974][  T111]  kasan_record_aux_stack+0xa7/0xc0
[  759.332152][  T111]  insert_work+0x36/0x230
[  759.336457][  T111]  __queue_work+0x9a2/0x1130
[  759.341037][  T111]  queue_work_on+0x180/0x1e0
[  759.345603][  T111]  __udp_tunnel_nic_add_port+0x6cd/0xd60
[  759.351218][  T111]  udp_tunnel_push_rx_port+0x1af/0x230
[  759.353415][   T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  759.356674][  T111]  geneve_offload_rx_ports+0xbc/0x190
[  759.356702][  T111]  geneve_netdevice_event+0x77/0xb0
[  759.356722][  T111]  notifier_call_chain+0x99/0x400
[  759.366064][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.371065][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  759.371089][  T111]  call_netdevice_notifiers+0x7c/0xb0
[  759.371106][  T111]  udp_tunnel_nic_netdevice_event+0x1240/0x1dd0
[  759.371125][  T111]  notifier_call_chain+0x99/0x400
[  759.371142][  T111]  call_netdevice_notifiers_info+0xbe/0x110
[  759.380050][   T10] usb 3-1: Product: syz
[  759.381324][  T111]  register_netdevice+0x18fe/0x24b0
[  759.381345][  T111]  nsim_create+0xc8d/0x1420
[  759.381361][  T111]  __nsim_dev_port_add+0x3ba/0x8f0
[  759.389807][   T10] usb 3-1: Manufacturer: syz
[  759.395187][  T111]  nsim_dev_reload_up+0x586/0x830
[  759.395213][  T111]  devlink_reload+0x2f2/0x7a0
[  759.395233][  T111]  devlink_nl_reload_doit+0xd1a/0x11c0
[  759.395254][  T111]  genl_family_rcv_msg_doit+0x214/0x300
[  759.401182][   T10] usb 3-1: SerialNumber: syz
[  759.406829][  T111]  genl_rcv_msg+0x560/0x800
[  759.406856][  T111]  netlink_rcv_skb+0x159/0x420
[  759.406874][  T111]  genl_rcv+0x28/0x40
[  759.406890][  T111]  netlink_unicast+0x585/0x850
[  759.406907][  T111]  netlink_sendmsg+0x8b0/0xda0
[  759.406924][  T111]  ____sys_sendmsg+0x9e1/0xb70
[  759.406940][  T111]  ___sys_sendmsg+0x190/0x1e0
[  759.406958][  T111]  __sys_sendmsg+0x170/0x220
[  759.406980][  T111]  do_syscall_64+0x10b/0xf80
[  759.406998][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.407015][  T111] 
[  759.407021][  T111] The buggy address belongs to the object at ffff888035d8bc00
[  759.407021][  T111]  which belongs to the cache kmalloc-256 of size 256
[  759.407036][  T111] The buggy address is located 168 bytes inside of
[  759.407036][  T111]  freed 256-byte region [ffff888035d8bc00, ffff888035d8bd00)
[  759.407052][  T111] 
[  759.407057][  T111] The buggy address belongs to the physical page:
[  759.407066][  T111] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35d8a
[  759.407080][  T111] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  759.407094][  T111] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  759.407110][  T111] page_type: f5(slab)
[  759.407125][  T111] raw: 00fff00000000040 ffff88813fe34b40 dead000000000100 dead000000000122
[  759.407141][  T111] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  759.407156][  T111] head: 00fff00000000040 ffff88813fe34b40 dead000000000100 dead000000000122
[  759.407171][  T111] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  759.407187][  T111] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  759.407201][  T111] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  759.407211][  T111] page dumped because: kasan: bad access detected
[  759.407220][  T111] page_owner tracks the page as allocated
[  759.407226][  T111] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19511091358, free_ts 0
[  759.407255][  T111]  post_alloc_hook+0x153/0x170
[  759.407278][  T111]  get_page_from_freelist+0x11a6/0x33b0
[  759.407299][  T111]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[  759.416954][   T30] audit: type=1400 audit(1777811679.018:944): avc:  denied  { read } for  pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  759.418168][  T111]  new_slab+0xa6/0x6c0
[  759.418193][  T111]  refill_objects+0x277/0x420
[  759.422417][   T30] audit: type=1400 audit(1777811679.018:945): avc:  denied  { search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  759.427491][  T111]  __pcs_replace_empty_main+0x375/0x650
[  759.427517][  T111]  __kmalloc_node_track_caller_noprof+0x694/0x850
[  759.427542][  T111]  krealloc_node_align_noprof+0x1f9/0x3e0
[  759.432632][   T30] audit: type=1400 audit(1777811679.018:946): avc:  denied  { write search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  759.437105][  T111]  add_sysfs_param+0xdb/0x970
[  759.437132][  T111]  param_sysfs_builtin_init+0x313/0x3f0
[  759.437149][  T111]  do_one_initcall+0x121/0x750
[  759.437171][  T111]  kernel_init_freeable+0x6ea/0x7b0
[  759.443883][   T30] audit: type=1400 audit(1777811679.018:947): avc:  denied  { add_name } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  759.446719][  T111]  kernel_init+0x1f/0x1e0
[  759.446745][  T111]  ret_from_fork+0x72b/0xd50
[  759.446764][  T111]  ret_from_fork_asm+0x1a/0x30
[  759.451760][   T30] audit: type=1400 audit(1777811679.018:948): avc:  denied  { create } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  759.456848][  T111] page_owner free stack trace missing
[  759.456856][  T111] 
[  759.456860][  T111] Memory state around the buggy address:
[  759.456870][  T111]  ffff888035d8bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  759.456882][  T111]  ffff888035d8bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  759.456894][  T111] >ffff888035d8bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  759.456903][  T111]                                   ^
[  759.456911][  T111]  ffff888035d8bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  759.456922][  T111]  ffff888035d8bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  759.456932][  T111] ==================================================================
[  759.493042][ T5776] hid_parser_main: 28 callbacks suppressed
[  759.493062][ T5776] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  759.516156][   T10] usb 3-1: config 0 descriptor??
[  759.517535][ T5776] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  759.598557][   T30] audit: type=1400 audit(1777811679.018:949): avc:  denied  { append open } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  759.602059][ T5776] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  759.633584][   T30] audit: type=1400 audit(1777811679.018:950): avc:  denied  { getattr } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  759.637345][ T5776] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0
[  759.653074][  T111] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  759.653092][  T111] CPU: 0 UID: 0 PID: 111 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.653114][  T111] Tainted: [L]=SOFTLOCKUP
[  759.653120][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  759.653131][  T111] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  759.653157][  T111] Call Trace:
[  759.653163][  T111]  <TASK>
[  759.653169][  T111]  dump_stack_lvl+0x100/0x190
[  759.653190][  T111]  vpanic+0x552/0x970
[  759.653205][  T111]  ? __pfx_vpanic+0x10/0x10
[  759.653222][  T111]  ? __mutex_lock+0x1580/0x1b10
[  759.653241][  T111]  panic+0xd1/0xe0
[  759.653255][  T111]  ? __pfx_panic+0x10/0x10
[  759.653270][  T111]  ? __mutex_lock+0x1580/0x1b10
[  759.653288][  T111]  ? preempt_schedule_common+0x42/0xc0
[  759.653307][  T111]  ? check_panic_on_warn+0x1f/0x90
[  759.653326][  T111]  check_panic_on_warn.cold+0x19/0x34
[  759.653346][  T111]  end_report.part.0+0x3a/0x90
[  759.653367][  T111]  kasan_report.cold+0xe/0x18
[  759.653388][  T111]  ? __mutex_lock+0x1580/0x1b10
[  759.653409][  T111]  __mutex_lock+0x1580/0x1b10
[  759.653427][  T111]  ? udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  759.653449][  T111]  ? __pfx___mutex_lock+0x10/0x10
[  759.653472][  T111]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  759.653489][  T111]  ? debug_object_deactivate+0x2e4/0x3b0
[  759.653510][  T111]  ? pwq_dec_nr_in_flight+0x965/0xed0
[  759.653532][  T111]  ? udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  759.653551][  T111]  udp_tunnel_nic_device_sync_work+0x3b/0xa50
[  759.653572][  T111]  ? rcu_is_watching+0x12/0xc0
[  759.653597][  T111]  process_one_work+0xa0e/0x1980
[  759.653620][  T111]  ? __pfx_process_one_work+0x10/0x10
[  759.653643][  T111]  ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10
[  759.653663][  T111]  worker_thread+0x5ef/0xe50
[  759.653686][  T111]  ? kthread+0x13a/0x450
[  759.653704][  T111]  ? __pfx_worker_thread+0x10/0x10
[  759.653722][  T111]  kthread+0x370/0x450
[  759.653739][  T111]  ? __pfx_kthread+0x10/0x10
[  759.653757][  T111]  ret_from_fork+0x72b/0xd50
[  759.653777][  T111]  ? __pfx_ret_from_fork+0x10/0x10
[  759.653796][  T111]  ? __switch_to+0x800/0x1100
[  759.653826][  T111]  ? __pfx_kthread+0x10/0x10
[  759.653844][  T111]  ret_from_fork_asm+0x1a/0x30
[  759.653870][  T111]  </TASK>
[  759.669524][  T111] Kernel Offset: disabled