last executing test programs:

12m17.777130859s ago: executing program 4 (id=5):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
modify_ldt$write2(0x11, &(0x7f0000002f40)={0x7, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300040000000a881fc10c10a428219c00000000e1fb31cfa89798ead3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2e0000006c0001002abd7000ff9bdf2500000000", @ANYRES32=0x0, @ANYBLOB="914001004000000014000300766574683000"/28], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r0, r7})
sendmmsg$inet(r8, 0x0, 0x0, 0x40)

12m16.738791036s ago: executing program 4 (id=12):
r0 = timerfd_create(0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1ed)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='8086 1237 FFFFFFFF ', 0x13)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mount(0x0, &(0x7f0000000340)='./sys/bus/pci/drivers/e1000e/new_id\x00', &(0x7f00000003c0)='nilfs2\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_ENTRY(r4, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x2000, 0x7, 0x0, 0x0, 0x5, 0xfff}}}, 0x90)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000020ff"], 0x42)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c005}, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write(r6, &(0x7f0000000100)='deny', 0x4)
ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0)
add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000002380)=']\\-$$\xdcM]\x00\x0e\xfb\x96\x10\xeb\xd8\xcc\xca4I\xfdF\xbe>\xfc\xf4\xf8L\xdd\xfb.\xe9lh\xb4Q\xd7=\xa9K\xdfxt%K\xba\x8c\xf8\xe9-J\x1a\xc5\xf8O\a\x87\x9a\xda`\xc6\xf4\xf7\x96\xed\x12(H\x96jR\xfa\x14\"]m~\xd3\x94g\t', 0xffffffffffffffff)

12m14.324314714s ago: executing program 4 (id=21):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x2, 0xfdfffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90d, 0x9c, '\x00', @p_u32=0x0}})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x11, 0x63, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="eb"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd35, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES64=r0, @ANYRESOCT=r4], 0xd0}}, 0x571f685418ec0180)
r5 = fsopen(&(0x7f0000000980)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

11m59.145135279s ago: executing program 32 (id=21):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x2, 0xfdfffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90d, 0x9c, '\x00', @p_u32=0x0}})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x11, 0x63, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="eb"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd35, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES64=r0, @ANYRESOCT=r4], 0xd0}}, 0x571f685418ec0180)
r5 = fsopen(&(0x7f0000000980)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

10m14.969623315s ago: executing program 0 (id=380):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800), 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0xc808, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0x1d8)

10m14.743877763s ago: executing program 0 (id=381):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001060000000000000000071f"], 0x18}], 0x1}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0xff, 0xf, 0x27f})

10m14.547094122s ago: executing program 0 (id=383):
getgroups(0x0, &(0x7f0000000180))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000280)=0x1c, 0x800)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0), 0x4)
getgroups(0x5, &(0x7f0000000100)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0])
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x6, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0xc880)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
recvmmsg(r5, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1}, 0x100}], 0x1, 0x12300, 0x0)
close(r4)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x8})
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000015000100fdffffff01000000021800c8", @ANYRES32, @ANYBLOB="1400030074756e6c30000000000000001a63521c"], 0x2c}}, 0x0)
r10 = accept4$alg(r1, 0x0, 0x0, 0x800)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000000)={0x0, 0xa7, 0x4})
sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0xfeb7}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080)

10m11.380440697s ago: executing program 0 (id=388):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x78}}, 0x0)

10m11.296102607s ago: executing program 0 (id=391):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800), 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0xc808, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="287810380a6c601bab2d8760c8a816e72cc4b67c552fce16e0c079608fad2f849284bebbf066e96c103be5de4b27b48e12a810d1529e1394d5673ccbbaa5ee4b26cf056c06bde1b0eca800499ad6a9e1caf8ff71fe808fab2148c4f010602bd34900b32534b914147f4e60af3aa1b4100cfca0bd87d247f8abdb17bcaa2361d74b8d080037f25bf906644b6e06c052412e393b28ca62f14260950673b369d7c3be1d04370991a187b24d48ef9a45214ed137e7cb02fb103014550972e61fa63bd04637cd500ffd131788450264b26e24bc4c455b47fa2f191f366865a4abcd010e8d00572fa1540d3123826ed70b7f202268fabc8014ddc979b230fc5f142afd89b2c821e8d1bfe63f1dd5866e0f936ee3615f4415c16087a53f3c1639e050ee7e798b512b05c4fe01ef9d71ed7a450e0ee2051046412c4c24e3504f4283a601ee73464d9c758d7fe90b0103590c7d0000000000dc4d869da66dbc44f75749e6fe22b797ff2988c32bd4aa9ba94c19ff75436b8ceb806aa114f241d3d8bcf8bd534a559258edd1063dafaeb09948c3d32cc033f14800466c9de0a6d61ad728b7d6060b8ea13578f5f285ec37187ecdc94e46b221a382649c64780b7c320e234f17e132114ddb796e1b377d030cd870e978cb3e3c3f0131e6", 0x1d8)

10m8.943945893s ago: executing program 0 (id=398):
prctl$PR_SET_MM(0x59616d61, 0x7, &(0x7f0000ffd000/0x3000)=nil)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setresuid(0x0, 0xee01, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x40, 0x8, 0x401, 0x0, 0x90, 0x2, 0x8}, &(0x7f0000000140)=0x9c) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x40, 0x8, 0x401, 0x0, 0x90, 0x2, 0x8}, &(0x7f0000000140)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x254}, &(0x7f00000001c0)=0x8)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xfffe, 0x2}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xfffe, 0x2}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

10m8.534487932s ago: executing program 33 (id=398):
prctl$PR_SET_MM(0x59616d61, 0x7, &(0x7f0000ffd000/0x3000)=nil)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setresuid(0x0, 0xee01, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x40, 0x8, 0x401, 0x0, 0x90, 0x2, 0x8}, &(0x7f0000000140)=0x9c) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x40, 0x8, 0x401, 0x0, 0x90, 0x2, 0x8}, &(0x7f0000000140)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x254}, &(0x7f00000001c0)=0x8)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xfffe, 0x2}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xfffe, 0x2}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

8m56.793166299s ago: executing program 2 (id=695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)="8824", 0x2}], 0x1}}], 0x2, 0x24004c41)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x11, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040000, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x208}}], 0x1, 0x0, 0x0)

8m55.82786026s ago: executing program 2 (id=699):
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r0=>0x0, 0x43, "5e17bd9aa32097747ce7bb6110e78437b3741996a2c303cddaf5f3c161484be4c7e827a98c8cd323688e23c4d3df49575d83e62442678fcc3c3dec1c84e9180d3fe235"}, &(0x7f0000000080)=0x4b)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r0, @in6={{0xa, 0x4e21, 0x3, @remote, 0x8}}, 0xe, 0x5, 0x5, 0x0, 0xd}, &(0x7f0000000180)=0x98) (async)
r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x8001, 0x10040)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x153480)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000240)={{0x1, 0x0, 0x7f, 0x0, 0x9}, 0x9, 0x10, 0x8})
r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x83, 0x404840) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={r0, 0x2, 0xe, 0x0, 0x800000, 0x4}, 0x14)
write(r4, &(0x7f0000000340)="bb5e573725f96ab4b11a81e792984a8c28e630e881bc7014ea87878e82bc53053c212b3e7b48ccfa5ce0fadfb7bf0b0d385d7a18e44469982034ac9863319c", 0x3f) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x90800, 0x0)
ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f00000003c0)=0x2)
ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000400)) (async)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0xc2a44, 0x0)
ioctl$TIOCCONS(r6, 0x541d) (async)
syz_usb_connect(0x5, 0x314, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x50, 0xb5, 0x48, 0x10, 0xbb4, 0xa38, 0x6ae1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0x12, 0x0, 0xe0, 0x4, "", [{{0x9, 0x4, 0x86, 0x6, 0x4, 0x69, 0x5e, 0x5b, 0xc7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x81, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0xfff, 0x7, "2b391e26"}]}, @hid_hid={0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0xb11}}], [{{0x9, 0x5, 0x9, 0xc, 0x28, 0x9, 0x2, 0x9, [@generic={0xa4, 0x5, "9c53f331c2b324fb1d22cad2009baf59c050538145941c9be4105eaa5a1718b27e0e5d607d787e98191e3ff57dccdcf859b113aeb1e6ac2a69a60afb164298c7586dae2b4c60354a373274d8e8c6adbd8b1468729ac74173a05cb397f69363522ba290ccd9e92e3f325692207d1fdc3126a5491ac3d12bbf55b713ff6a9701ffc7d7662beaf4726f6b4bebbcdcf99053fcdd93e20683f850c7cfe08f9759db02b131"}, @generic={0xc2, 0x2, "9109756aed383134571d2f442f0a5edddace31b34599e827b9c4957928eed134d84e62cc77518b3a8b4f3c8ebbfddeba27471d4be564404c133b64430c612cb6b9f897e7b384b51e68177169a338dfa9cf65b949887370fa8bd8947997d32ef3ed1a2a6f077b5d01f92221f8a822e73c99779fea0f9edb0042b6c4d47df9daa06fb6e27f1083673029df471010c924410470ddff884d0d43399a3c34a3002fa6c83539928a64c2b54ea80a041f40586f8feef0cd0a1655ac48150bfef9deb8b4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xe1, 0x7, 0x9, [@generic={0x36, 0x1, "32c1d69fdc4827ebc3ad836c95eb47880e45d809f3974b9d87c18e3e542a0970d2634e556db6dfbb8adfd3dd8041ae8aacb6b1cf"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x8, 0x3, 0x2, [@generic={0xe4, 0x30, "51ea57ace3c447235377e0a35cd9cbedcb4bd3ce9968933c9635502149bbbfc6e938abf21f0202cf7533cd1ce3f3bb8677bf8795d43548b601d17768f8255b401e802b9720bfc53a2b595b291ddbb0795331a797ddc47e39cea31ab33dba9858bca7b20ee8a572e54fd9dffe24f91be6a8d933143e6410ca8727b8b5e6105c2f003c6323418f899f26ca66a82d8eaa279adeef175f6d1fc58eb68a1a2a3d387d2554819772c49e064b69b035bf35372bc047f4ed28a1319f2e0ca06f02ec3d7d7223f5215b555b99041323ae4ba4bad9bf3de3752534e78e5c9b75f31b2e57e41fed"}, @generic={0x2f, 0x23, "5100cc93361c85051d989a903c75dcd3afd677b2b057687fed51c2db73d411d2c070b9b876783a18b9383c7b1d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x7, 0xc5}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0x1, 0x0, 0x25, 0x8, 0xc}, 0x10, &(0x7f0000000bc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x8, 0x90, 0x6, 0x8}]}, 0x3, [{0x39, &(0x7f0000000c00)=@string={0x39, 0x3, "e529b2d708090452e879fc9be17a993d01cba95ff1632821747e5ecd42ec3048f6e6b4f9724d49474a95860750c3265458ade9cffc69da"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x3042}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x180a}}]}) (async)
readv(r1, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/16, 0x10}, {&(0x7f0000000d40)=""/25, 0x19}], 0x2) (async)
r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0)
write$yama_ptrace_scope(r7, &(0x7f0000000e00)='1\x00', 0x2) (async)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async)
recvmsg$kcm(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/34, 0x22}, {&(0x7f0000000f00)=""/87, 0x57}, {&(0x7f0000000f80)=""/99, 0x63}, {&(0x7f0000001000)=""/19, 0x13}, {&(0x7f0000001040)=""/167, 0xa7}], 0x6}, 0x2042) (async)
read$qrtrtun(r6, &(0x7f00000011c0)=""/34, 0x22)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x80, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001280)=[0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000001400)}}, 0x10)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000001580)={r9, 0x1, 0x6, @remote}, 0x10) (async)
getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001600)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000001700)=0xe8)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, <r11=>0x0}, &(0x7f0000001780)=0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r8, {0xee01, <r12=>0xffffffffffffffff}}, './file0\x00'}) (async)
fstat(r3, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fsetxattr$system_posix_acl(r6, &(0x7f00000015c0)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x5, r10}, {0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x2, r11}, {0x8, 0x2, r12}, {0x8, 0x6, r13}], {0x10, 0x1}, {0x20, 0x5}}, 0x54, 0x3) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)

8m55.734733752s ago: executing program 2 (id=700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0xa6, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

8m55.500145011s ago: executing program 2 (id=701):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000100), 0x1, 0x40580)
close(r0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
umount2(0x0, 0xf00)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000540)={0x1, 0xffffffff, 0x5, 0x1, 0x3, 0x8, 0x400, 0x0, 0x2006, 0x5, 0xc906, 0x5, 0x5, 0x7ffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000004, 0x12, r4, 0x50965000)
write$selinux_load(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757848006246439c220f6ffecc3531919a57bc772f628c9aa314640b40e6629fc309362874d78f9294815daff887645cb1a8dbbc29ac4d3559b8c0f6c638b61d302325540a7eaf7e5e8cfaafbc2d628e6ef9657850959169c814bfbf7e7ce0fed2dd313c380b053997310d5040fb60b397344004b65e0c67b2f071a4fccacf2d2a211670f81fca9800fe605429ae298219ac5570339813636c40967c91529ec167b90b8c9289d2eded330e61e71a97c914e60554368fbcf178d0a3cf30c6900dd89142cc326761952425b64d52bd25a86c99ecc61fdf4fc9660b7737c24e0e41"], 0x30)
syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
syz_genetlink_get_family_id$fou(&(0x7f0000000600), r4)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r1}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r4, &(0x7f0000000240)={0x1a, 0x30f, 0x0, 0x9, 0x2, 0x93, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf723e45966851802}}, 0x10)
listen(0xffffffffffffffff, 0xfffffffe)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x84}, 0x1, 0x0, 0x0, 0x40d5}, 0x4040050)
syz_io_uring_setup(0xefd, &(0x7f0000000240)={0x0, 0x6a2a, 0x10000, 0x3, 0x53}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080))
file_getattr(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x18, 0x400)
close(0x4)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2)

8m53.921545859s ago: executing program 2 (id=709):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
shmget(0x2, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
setresuid(0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
mount$pvfs2(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f0000000280), 0x2020006, &(0x7f0000000580)=ANY=[@ANYBLOB="666f773f4e26c70b2ed6e81fd66e65723d", @ANYRESDEC=0x0, @ANYBLOB=',measure,uid>', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC, @ANYBLOB=',smackfshat=^R^,\x00'])
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x100000001, 0x80, 0x4, 0x2, 0x5, 0x35, 0x4}, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x100, 0x1, 0x6c67, 0xffffffffffff0001, 0x4}, &(0x7f0000000100)={0x77359400}, 0x0)
chdir(&(0x7f0000000100)='./file1\x00')
r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)

8m50.864145012s ago: executing program 2 (id=716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e00000020000280050016000e00000006001800010000000600020000000000040012"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)

8m35.753550295s ago: executing program 34 (id=716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e00000020000280050016000e00000006001800010000000600020000000000040012"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)

10.924784673s ago: executing program 7 (id=2929):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0)
setns(0xc9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x3}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x4, 0x0, 0x4}}, 0x26)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010f40)={0x0, 0x0, &(0x7f0000010200)={0x0}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000820012201000905030f"], 0x0)

7.655774641s ago: executing program 1 (id=2944):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @remote, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x101, 0x4)

7.604366036s ago: executing program 7 (id=2945):
syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000008adff01a04000010203010902940003010ca8000904b2d199080100"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

6.72917375s ago: executing program 1 (id=2952):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

6.187995987s ago: executing program 7 (id=2953):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000300)='wg0\x00', 0x4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5.469886441s ago: executing program 1 (id=2959):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000073, 0x0, 0x8001}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000140))
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0xffffffff}, 0x1, 0x2, 0x1010002})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="c525080000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_usb_control_io(r4, 0x0, 0x0)
clock_gettime(0x6, &(0x7f0000000080))
openat$nvme_fabrics(0xffffff9c, &(0x7f00000001c0), 0x202000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, 0x0, 0x0)
write$binfmt_aout(r8, 0x0, 0xffffffdb)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
socket$nl_netfilter(0x10, 0x3, 0xc)

5.311323412s ago: executing program 7 (id=2963):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4)
shutdown(r0, 0x1)

5.100241522s ago: executing program 7 (id=2964):
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f000001a480)=[{&(0x7f0000019400)=""/4096, 0x1000}], 0x1, &(0x7f000001a800)=[{&(0x7f000001a500)=""/181, 0xb5}, {0x0}, {0x0}], 0x3, 0x0)

5.028202463s ago: executing program 5 (id=2965):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

5.006724844s ago: executing program 5 (id=2966):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_dev$cec(0x0, 0x0, 0xe8c00)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
sendmsg$nl_netfilter(r6, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

4.68101961s ago: executing program 7 (id=2968):
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000"], 0x70}}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
ioctl$VIDIOC_S_FBUF(r4, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}})
r5 = syz_usb_connect$uac3(0x5, 0xce, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c, 0x8}, [@feature_unit={0x1d, 0x24, 0x7, 0x6, 0x2, [0xd, 0x0, 0x2, 0x1, 0xa, 0x7]}, @mixer_unit={0xa, 0x24, 0x5, 0x1, 0x60, "63a0a2f316"}, @multiply_unit={0xb, 0x24, 0xd, 0x1, 0x3, 0x800000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x7b, &(0x7f0000000300)={0x5, 0xf, 0x7b, 0x5, [@generic={0x53, 0x10, 0xa, "5ebefce788db2ac8142cbbaef9f9abdd213c5be0753cc2b69b4bb34e59d0dd1026b9740d3d9a719a8746eb8ee4a1b69a2a9658c924a60fa096e5f6d8893cfd4f2618aeb1cbbe0f5a79cd38ed5978b21a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x401, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x9ee1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x4, 0x6}]}, 0x6, [{0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c331b"}}, {0xdb, &(0x7f0000000440)=@string={0xdb, 0x3, "d9c77b42585b6af1a12de73d480f5e8094d52d4145b1f8a533fc6a605b8e08f3e6ce7787aea53915ba33d32a8c74af1441c84fd4f07e3a9df36a54bf14548b3e3a936c9312264b9c2ca16d8eb47cb95587c288c5e91bd272aa5bc444880608365425ddb8c6e748fcb72a7912a4f8850a6ad512925acc69febed7b7cbbbaecfe627bfb1fbc32161b1a960982de9669d0bbdf848b1930c24559be4837cfbeb36d7e9123d097edfab94de34f396664b81f68dc06aa421b12238e1a0c390b3987e728c06ea98448052b9daef64fee8e6caae04da201b3afeb48221"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xe, &(0x7f00000005c0)=@string={0xe, 0x3, "5a1c41342fec26688802c7b1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]})
syz_usb_disconnect(r5)
write(r4, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'})

4.671778585s ago: executing program 5 (id=2969):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000780)={[{0x11, 0x4e00, "55b323f055d7b744041e8e99d454e7d6b1"}, {0x22, 0x4e00, "c7fab476c360e3298a5990d1a6445e63611c5cfa6c434698bb971ea327e0edbfc3b6"}, {}]})

4.373056586s ago: executing program 6 (id=2970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
sendto(0xffffffffffffffff, 0x0, 0x0, 0x812, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x4, @empty, 0x1004}, 0x80)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000000000000001fe800000000000000000000000000002"], 0x64)

4.061943015s ago: executing program 3 (id=2971):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x27, 0x400, 0x70bd2d, 0x25dfdbfb, {0x5}, [@nested={0x9f, 0x11d, 0x0, 0x1, [@generic="e76e9a522a14c4b24b95ba167d435a09063eff45953400db44d56177a7403896df475ace00ff51d42d41945ba87d0683cdefa50a3e58bc0e2783fa86ff991960bb95b7909604f79eff8dc648d05fd6b38d9ec2183479c683d4212f06262ae765ef61bec860838335b74075ab4998dca42d4358e00ff4163f0f844f84337b23cffc3c6b730a785afdbdf6bb73a59df911522035a4caaf919faaf787"]}, @typed={0x4, 0x3e}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x820)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300020f0000000000000000000000010008000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000002000100000000000000090000000040050005000000c6885835000000000000000000000000000000200000000000000100000000000000"], 0x78}, 0x1, 0x7}, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
mount(&(0x7f0000000500)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, 0x0)

3.956106586s ago: executing program 6 (id=2972):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

3.802482378s ago: executing program 6 (id=2973):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x84)
syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

2.69584304s ago: executing program 1 (id=2974):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240))
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
fcntl$setstatus(r1, 0x4, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0xffe9, 0x0, 0x1, 0xa, 0x4})
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10)
recvmmsg(r6, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x400000c2, 0x0)
r8 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x40045730, &(0x7f0000000080))
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00')
pread64(r9, &(0x7f0000000000)=""/81, 0x51, 0xfff)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc001}, 0x4008890)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r10 = openat$full(0xffffff9c, &(0x7f0000000000), 0x303002, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0xb3d5, @none, 0x2, 0x2}, 0xe)
close(r3)

2.519780135s ago: executing program 6 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r6 = add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.517622165s ago: executing program 3 (id=2976):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1, 0xfffffff9, 0x9)
sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x200080d0)

2.149406486s ago: executing program 1 (id=2977):
mkdirat(0xffffffffffffff9c, &(0x7f00000040c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004100)='./mnt\x00', &(0x7f0000004140)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004540)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f0000004580)=""/16384, 0x4000)

2.133266476s ago: executing program 3 (id=2978):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/apparmor/parameters/debug\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

1.911747356s ago: executing program 3 (id=2979):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x502, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd06, &(0x7f0000000000))

1.908992229s ago: executing program 1 (id=2980):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
lseek(r1, 0xffffff7f00000000, 0x1)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000)

1.635263856s ago: executing program 3 (id=2981):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1b00}}, 0x18)
mkdir(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8914c, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003cc0)}, 0x880)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x56, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="000000000021000008001b000000000024001a8020000a800500"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './cgroup/../file0\x00'})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c)
listen(0xffffffffffffffff, 0x50)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0)

1.188284073s ago: executing program 3 (id=2982):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0)
set_mempolicy(0x3, 0x0, 0x5)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0x6)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.015647743s ago: executing program 5 (id=2983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x94}, 0x1, 0x0, 0x0, 0x4004080}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl(r5, 0x4048aec9, &(0x7f0000000600)="010000000000000001")
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000004b00))
sendmmsg$unix(r2, 0x0, 0x0, 0x20008000)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r3, 0x407, 0x2000000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r7=>0x0, 0x4}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x6, 0xfffffff9, 0x5}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r8, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r9 = fcntl$dupfd(r8, 0x0, r8)
sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r11, 0x3}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={r11, @in={{0x2, 0x4e21, @broadcast}}, 0x4, 0x0, 0x1ff, 0x6, 0x2, 0xb9e8, 0x3}, &(0x7f00000001c0)=0x9c)

759.722162ms ago: executing program 6 (id=2984):
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x10000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

503.596831ms ago: executing program 5 (id=2985):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a)

264.216255ms ago: executing program 6 (id=2986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f3}, @device_a, @device_b, @from_mac=@broadcast, {0x2, 0x9}}, 0x5, @val={0x8c, 0x18, {0xabf, "ab043eb24356", @long="16042b52015a650317a00b5622b71af5"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

0s ago: executing program 5 (id=2987):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r4], 0x44}}, 0x804)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

kernel console output (not intermixed with test programs):

ed USB device number 49 using dummy_hcd
[  677.833542][ T5713] usb 8-1: Using ep0 maxpacket: 32
[  677.849151][ T5713] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  677.912765][ T5713] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  678.105493][ T5713] usb 8-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  679.089611][ T5713] usb 8-1: config 1 interface 0 has no altsetting 0
[  679.108747][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.690532][ T5713] usb 8-1: Product: syz
[  679.695691][ T5713] usb 8-1: Manufacturer: syz
[  679.700590][ T5713] usb 8-1: SerialNumber: syz
[  679.735074][T14341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.767466][T14341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.795108][ T5697] usb 7-1: USB disconnect, device number 53
[  679.801112][    C0] usb 7-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  679.813361][T14341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.852375][T15494] netlink: 'syz.1.2493': attribute type 1 has an invalid length.
[  679.855894][T14341] usb 4-1: config 0 descriptor??
[  679.869473][ T5697] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  679.911550][ T5697] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  681.255457][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  681.261822][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  681.296071][T15480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.313552][ T5697] mos7720 7-1:1.0: device disconnected
[  681.806154][T15494] 8021q: adding VLAN 0 to HW filter on device bond17
[  681.822457][T15480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.856809][T14341] usbhid 4-1:0.0: can't add hid device: -71
[  681.889617][T14341] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  681.942384][T14341] usb 4-1: USB disconnect, device number 92
[  681.971072][ T5713] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  682.022590][ T5713] usb 8-1: USB disconnect, device number 49
[  682.048683][   T30] audit: type=1400 audit(1787020778.147:1159): avc:  denied  { write } for  pid=15509 comm="syz.5.2495" name="nullb" dev="configfs" ino=3038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  682.118225][T15513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15513 comm=syz.7.2497
[  683.343969][ T5713] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[  683.423575][ T1209] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  683.524591][ T5713] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  683.545496][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.558041][ T5713] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  683.573583][ T1209] usb 8-1: Using ep0 maxpacket: 32
[  683.582159][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.591018][ T1209] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  683.604988][ T5713] usb 4-1: config 0 descriptor??
[  683.614063][ T5731] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  683.624098][ T1209] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  683.633636][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  683.647485][ T1209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.658230][ T5713] dvb-usb: bulk message failed: -22 (3/0)
[  683.669763][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  683.679155][ T1209] usb 8-1: config 0 has no interface number 0
[  683.685326][ T1209] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  683.699412][ T5713] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  683.706792][ T5713] usb 4-1: media controller created
[  683.714518][ T1209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.724112][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  683.732438][ T1209] usb 8-1: Product: syz
[  683.736951][ T1209] usb 8-1: Manufacturer: syz
[  683.745029][ T1209] usb 8-1: SerialNumber: syz
[  683.752288][ T5713] dvb-usb: bulk message failed: -22 (6/0)
[  683.769979][ T1209] usb 8-1: config 0 descriptor??
[  683.778320][ T5713] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  683.797832][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59
[  683.810323][ T1209] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  683.818087][ T5731] usb 7-1: Using ep0 maxpacket: 8
[  683.826973][ T5731] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  683.840985][ T1209] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  683.851125][ T5713] dvb-usb: schedule remote query interval to 150 msecs.
[  683.865726][ T5731] usb 7-1: config 3 has an invalid interface number: 45 but max is 0
[  683.878592][ T5713] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  683.888056][ T5731] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  683.903010][ T5731] usb 7-1: config 3 has no interface number 0
[  683.905199][ T5713] usb 4-1: USB disconnect, device number 93
[  683.919495][ T5731] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  683.934413][ T5731] usb 7-1: config 3 interface 45 has no altsetting 0
[  683.958694][ T5713] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  683.971570][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.982083][ T5731] usb 7-1: Product: syz
[  683.997166][ T1209] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  684.010690][ T5731] usb 7-1: Manufacturer: syz
[  684.025794][ T5731] usb 7-1: SerialNumber: syz
[  684.241820][ T1209] radio-raremono 8-1:0.35: V4L2 device registered as radio48
[  684.264473][T15534] netlink: 'syz.6.2505': attribute type 1 has an invalid length.
[  684.276329][T15548] jffs2: notice: (15548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 2 orphan) found.
[  684.356005][T15534] 8021q: adding VLAN 0 to HW filter on device bond6
[  684.428075][T14341] usb 8-1: USB disconnect, device number 50
[  684.460454][T14341] radio-raremono 8-1:0.35: Thanko's Raremono disconnected
[  684.912326][T15558] batman_adv: batadv0: Adding interface: dummy0
[  684.918926][T15558] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.934800][T15561] netlink: 'syz.1.2511': attribute type 1 has an invalid length.
[  684.952427][T15558] batman_adv: batadv0: Interface activated: dummy0
[  685.008274][ T5731] usb 7-1: USB disconnect, device number 54
[  685.082320][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  685.112873][T15561] 8021q: adding VLAN 0 to HW filter on device bond18
[  685.150560][T15565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15565 comm=syz.3.2512
[  685.453796][ T5713] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  686.032811][ T5597] Bluetooth: hci0: unexpected event for opcode 0x2016
[  686.525649][ T5713] usb 8-1: Using ep0 maxpacket: 16
[  686.560311][ T5713] usb 8-1: unable to get BOS descriptor or descriptor too short
[  686.575408][ T5713] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  686.586691][ T5713] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.598770][ T5713] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  686.626346][ T5713] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  686.640651][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.657532][ T5713] usb 8-1: Product: syz
[  686.666642][ T5713] usb 8-1: Manufacturer: syz
[  686.673938][ T5713] usb 8-1: SerialNumber: syz
[  687.340815][ T5713] usb 8-1: Audio class v2/v3 interfaces need an interface association
[  687.435162][ T5731] usb 7-1: new full-speed USB device number 55 using dummy_hcd
[  687.448997][ T5713] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  687.562835][ T5713] usb 8-1: 2:1 : can't get High Capability descriptor
[  687.644274][ T5731] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  687.688943][ T5731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.739358][ T5731] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  687.776879][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.828412][ T5731] usb 7-1: config 0 descriptor??
[  687.852626][ T5731] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  687.858396][   T10] usb 8-1: USB disconnect, device number 51
[  687.888624][ T5731] dvb-usb: bulk message failed: -22 (3/0)
[  687.918496][ T5731] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  687.942977][ T5731] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  687.973390][ T5731] usb 7-1: media controller created
[  687.982744][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  688.038932][ T5731] dvb-usb: bulk message failed: -22 (6/0)
[  688.067313][ T5731] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  688.090286][ T5731] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60
[  688.129062][ T5731] dvb-usb: schedule remote query interval to 150 msecs.
[  688.151196][ T5731] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  688.184020][ T5731] usb 7-1: USB disconnect, device number 55
[  688.226247][ T5731] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  689.094398][T14341] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  689.374339][T14341] usb 8-1: Using ep0 maxpacket: 8
[  689.418731][T15627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15627 comm=syz.6.2528
[  689.451254][T14341] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  689.566354][T14341] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  690.330489][ T4915] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  690.371877][ T4915] Bluetooth: hci0: Injecting HCI hardware error event
[  690.404023][ T5597] Bluetooth: hci0: hardware error 0x00
[  690.578331][T14341] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  690.711975][T14341] usb 8-1: config 0 has no interface number 0
[  690.787692][T14341] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  690.909527][T14341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.979524][T14341] usb 8-1: config 0 descriptor??
[  692.047880][ T5731] usb 4-1: new full-speed USB device number 94 using dummy_hcd
[  692.071099][T14341] ldusb 8-1:0.55: Interrupt in endpoint not found
[  692.526298][ T5731] usb 4-1: not running at top speed; connect to a high speed hub
[  692.533745][ T5597] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  692.557150][ T5731] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  692.621969][ T5731] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4
[  692.646326][T14341] usb 8-1: USB disconnect, device number 52
[  692.661770][ T5731] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  692.782041][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.790678][ T5731] usb 4-1: Product: syz
[  692.795835][ T5731] usb 4-1: Manufacturer: syz
[  692.800804][T15645] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  692.801652][ T5731] usb 4-1: SerialNumber: syz
[  693.291769][   T30] audit: type=1400 audit(1787020788.352:1160): avc:  denied  { relabelto } for  pid=15643 comm="syz.7.2536" name="291" dev="tmpfs" ino=1624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  693.400942][   T30] audit: type=1400 audit(1787020788.382:1161): avc:  denied  { associate } for  pid=15643 comm="syz.7.2536" name="291" dev="tmpfs" ino=1624 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  693.548918][ T5731] usb 4-1: Unsupported UAC3 BADD profile
[  693.586151][   T30] audit: type=1400 audit(1787020788.532:1162): avc:  denied  { map } for  pid=15655 comm="syz.7.2537" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  693.589625][T15658] cgroup: No subsys list or none specified
[  693.632683][ T5731] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  693.684237][   T30] audit: type=1400 audit(1787020788.542:1163): avc:  denied  { execmod } for  pid=15655 comm="syz.7.2537" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  693.684882][ T5731] usb 4-1: USB disconnect, device number 94
[  693.741443][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  693.743658][   T30] audit: type=1400 audit(1787020788.542:1164): avc:  denied  { execute } for  pid=15655 comm="syz.7.2537" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  693.829325][   T30] audit: type=1400 audit(1787020788.552:1165): avc:  denied  { setopt } for  pid=15655 comm="syz.7.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  693.993512][ T5697] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  694.144302][ T5697] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  694.156484][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  694.170473][ T5697] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  694.186900][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.360837][ T5697] usb 6-1: config 0 descriptor??
[  694.409990][T15661] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  694.516875][T15662] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  694.561256][ T5697] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  694.586147][ T5697] dvb-usb: bulk message failed: -22 (3/0)
[  694.616286][ T5697] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  694.635893][ T5697] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  694.648317][ T5697] usb 6-1: media controller created
[  694.655902][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  694.692352][ T5697] dvb-usb: bulk message failed: -22 (6/0)
[  694.699450][ T5697] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  694.715698][ T5697] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61
[  694.730369][ T5697] dvb-usb: schedule remote query interval to 150 msecs.
[  694.743266][ T5697] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  694.764666][ T5697] usb 6-1: USB disconnect, device number 11
[  694.815829][ T5697] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  694.923092][T15681] jffs2: notice: (15681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 2 orphan) found.
[  695.244123][T15685] CIFS: Attempting to mount //127.0.0.1/share
[  695.251274][T15685] CIFS: VFS: Error connecting to socket. Aborting operation.
[  695.258716][T15685] CIFS: VFS: cifs_mount failed w/return code = -111
[  695.462823][T15688] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2546'.
[  695.488712][   T30] audit: type=1400 audit(1787020790.592:1166): avc:  denied  { write } for  pid=15679 comm="syz.7.2546" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  695.547079][   T30] audit: type=1400 audit(1787020790.642:1167): avc:  denied  { create } for  pid=15679 comm="syz.7.2546" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  695.608458][   T30] audit: type=1400 audit(1787020790.712:1168): avc:  denied  { read write open } for  pid=15679 comm="syz.7.2546" path="/293/file0/test" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  695.798957][   T30] audit: type=1400 audit(1787020790.872:1169): avc:  denied  { mounton } for  pid=15704 comm="syz.6.2554" path="/373/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  695.818423][T15705] FAT-fs (mtdblock0): bogus logical sector size 65508
[  695.877902][T15705] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  696.354760][ T5731] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  696.544871][ T5731] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  696.575308][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  696.593789][ T5731] usb 6-1: Product: syz
[  696.599657][ T5731] usb 6-1: Manufacturer: syz
[  696.621193][ T5731] usb 6-1: SerialNumber: syz
[  696.640139][ T5731] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  696.665198][T14729] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  696.824240][T14729] usb 8-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00
[  696.844379][T14729] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  696.862502][T14729] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  696.882757][T14729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.061975][ T5731] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  697.073523][ T5731] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  697.149345][T14341] usb 8-1: USB disconnect, device number 53
[  697.276450][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.286064][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.301479][ T5697] usb 6-1: USB disconnect, device number 12
[  697.659152][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'.
[  697.669588][T15761] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2567'.
[  699.117083][T15797] trusted_key: encrypted_key: insufficient parameters specified
[  699.166872][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  699.166889][   T30] audit: type=1400 audit(1787020794.242:1172): avc:  denied  { connect } for  pid=15796 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  699.233520][ T5697] usb 8-1: new full-speed USB device number 54 using dummy_hcd
[  699.424094][ T5697] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  699.508601][ T5697] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  699.651006][ T5697] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  699.707146][ T5697] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.729718][ T5697] usb 8-1: config 0 descriptor??
[  699.768195][ T5697] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  699.802740][   T30] audit: type=1400 audit(1787020794.892:1173): avc:  denied  { watch } for  pid=15811 comm="syz.5.2582" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  699.838975][ T5697] dvb-usb: bulk message failed: -22 (3/0)
[  699.854504][   T30] audit: type=1400 audit(1787020794.892:1174): avc:  denied  { watch_sb watch_reads } for  pid=15811 comm="syz.5.2582" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1
[  699.885880][ T5697] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  699.911498][ T5697] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  699.922185][ T5697] usb 8-1: media controller created
[  699.930437][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  699.986215][ T5697] dvb-usb: bulk message failed: -22 (6/0)
[  700.018746][ T5697] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  700.274502][T15821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2585'.
[  701.341831][ T5697] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input62
[  701.419026][ T5697] dvb-usb: schedule remote query interval to 150 msecs.
[  701.482895][ T5697] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  701.549206][ T5697] usb 8-1: USB disconnect, device number 54
[  701.646890][ T5697] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  701.879402][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2589'.
[  702.000595][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2589'.
[  702.074867][T14341] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  702.114349][   T30] audit: type=1400 audit(1787020797.202:1175): avc:  denied  { setattr } for  pid=15838 comm="syz.6.2589" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  702.243598][T14341] usb 4-1: Using ep0 maxpacket: 32
[  702.260117][T14341] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  702.286549][T14341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.312277][T14341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.339178][T14341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.369289][T14341] usb 4-1: config 0 descriptor??
[  703.034775][T14341] usbhid 4-1:0.0: can't add hid device: -71
[  703.056940][T14341] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  703.095445][T14341] usb 4-1: USB disconnect, device number 95
[  703.795119][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2596'.
[  703.874699][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2596'.
[  703.908285][T15863] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  703.923089][T15863] bond6 (unregistering): Released all slaves
[  704.057902][T14341] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  704.235252][T14341] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  704.254006][T14341] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  704.278064][T14341] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  704.291962][T14341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.318209][T14341] usb 6-1: config 0 descriptor??
[  704.338134][T14341] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  704.356068][T14341] dvb-usb: bulk message failed: -22 (3/0)
[  704.377447][T14341] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  704.396892][ T5713] usb 7-1: new full-speed USB device number 56 using dummy_hcd
[  704.400501][T14341] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  704.426332][T14341] usb 6-1: media controller created
[  704.439212][T14341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  704.466515][T15898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15898 comm=syz.1.2605
[  704.474644][T14341] dvb-usb: bulk message failed: -22 (6/0)
[  704.519544][T14341] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  704.549561][T14341] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63
[  704.564394][T14341] dvb-usb: schedule remote query interval to 150 msecs.
[  704.658564][ T5713] usb 7-1: not running at top speed; connect to a high speed hub
[  704.659266][T14341] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  704.673557][ T5713] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  704.687869][ T5713] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  704.696324][T14341] usb 6-1: USB disconnect, device number 13
[  705.231495][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.247610][ T5713] usb 7-1: Product: syz
[  705.248596][T14341] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  705.254955][ T5713] usb 7-1: Manufacturer: syz
[  705.267504][ T5713] usb 7-1: SerialNumber: syz
[  705.290083][ T5713] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected
[  705.310071][ T5713] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  705.336445][ T5713] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  705.358705][ T5713] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  705.379655][ T5713] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  705.610875][T15906] FAULT_INJECTION: forcing a failure.
[  705.610875][T15906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.668257][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.7.2608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  705.668287][T15906] Tainted: [L]=SOFTLOCKUP
[  705.668293][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  705.668303][T15906] Call Trace:
[  705.668308][T15906]  <TASK>
[  705.668315][T15906]  dump_stack_lvl+0x100/0x190
[  705.668344][T15906]  should_fail_ex.cold+0x5/0xa
[  705.668368][T15906]  strncpy_from_user+0x3b/0x2d0
[  705.668394][T15906]  do_getname+0x78/0x390
[  705.668420][T15906]  __x64_sys_mkdirat+0x78/0xc0
[  705.668442][T15906]  do_syscall_64+0x115/0x870
[  705.668462][T15906]  ? clear_bhb_loop+0x70/0xc0
[  705.668483][T15906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.668500][T15906] RIP: 0033:0x7f18bfd9e0d9
[  705.668514][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.668531][T15906] RSP: 002b:00007f18c0b83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  705.668548][T15906] RAX: ffffffffffffffda RBX: 00007f18c0025fa0 RCX: 00007f18bfd9e0d9
[  705.668559][T15906] RDX: 0000000000000001 RSI: 0000200000001580 RDI: ffffffffffffff9c
[  705.668569][T15906] RBP: 00007f18c0b83090 R08: 0000000000000000 R09: 0000000000000000
[  705.668579][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.668589][T15906] R13: 00007f18c0026038 R14: 00007f18c0025fa0 R15: 00007ffd996dca28
[  705.668612][T15906]  </TASK>
[  707.155235][T14341] usb 7-1: USB disconnect, device number 56
[  707.222705][T15933] 
: renamed from bond_slave_0 (while UP)
[  707.238924][T14341] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  707.274442][T14341] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  707.298138][T14341] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  707.349909][T14341] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  707.378826][T14341] keyspan 7-1:1.0: device disconnected
[  707.463130][T15942] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2618'.
[  707.473080][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'.
[  708.277760][   T30] audit: type=1400 audit(1787020803.362:1176): avc:  denied  { write } for  pid=15947 comm="syz.6.2619" name="cluster" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  708.332543][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'.
[  708.438395][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'.
[  708.462781][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2620'.
[  708.504804][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2619'.
[  708.612006][   T30] audit: type=1400 audit(1787020803.702:1177): avc:  denied  { write } for  pid=15947 comm="syz.6.2619" name="heartbeat" dev="configfs" ino=47838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  708.637731][T15958] netlink: 'syz.7.2617': attribute type 6 has an invalid length.
[  708.679664][ T5597] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  708.724945][ T5713] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  708.776253][    C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  708.789355][    C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  708.800054][    C0] Buffer I/O error on dev loop0, logical block 496, async page read
[  708.884227][ T5713] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  708.912127][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.923965][ T5713] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  708.933056][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.965057][ T5713] usb 6-1: config 0 descriptor??
[  708.996013][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  709.009902][ T5713] dvb-usb: bulk message failed: -22 (3/0)
[  709.036839][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  709.064596][ T5713] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  709.077822][ T5713] usb 6-1: media controller created
[  709.085861][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  709.119334][ T5713] dvb-usb: bulk message failed: -22 (6/0)
[  709.143716][ T5713] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  709.152052][T15972] ref_ctr_offset mismatch. inode: 0xc94 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a
[  709.187356][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input64
[  709.239316][ T5713] dvb-usb: schedule remote query interval to 150 msecs.
[  709.264821][ T5713] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  709.320077][ T5713] usb 6-1: USB disconnect, device number 14
[  709.337105][T15969] bridge0: port 3(veth0) entered disabled state
[  709.343665][T15969] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.350945][T15969] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.392378][T15974] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9041] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15974]
[  709.418408][T14729] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  709.447386][ T5713] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  709.607764][T14729] usb 7-1: Using ep0 maxpacket: 8
[  709.615759][T14729] usb 7-1: unable to get BOS descriptor or descriptor too short
[  709.750744][T14729] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  709.772935][T14729] usb 7-1: config 4 interface 0 has no altsetting 0
[  709.783785][T14729] usb 7-1: string descriptor 0 read error: -22
[  709.796386][T14729] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  709.853424][T14729] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  710.131427][T15987] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[  710.393654][T15987] usb 8-1: device descriptor read/64, error -71
[  710.428813][T14729] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  710.834857][T15987] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  710.933904][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.944335][T14729] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  710.975144][T14729] usb 7-1: media controller created
[  710.986841][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.093834][T15987] usb 8-1: device descriptor read/64, error -71
[  711.790272][T15987] usb usb8-port1: attempt power cycle
[  712.728957][   T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  712.882113][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.182646][T14729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  713.228122][ T6902] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  713.420180][ T6902] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.600276][ T6902] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  713.709130][ T6902] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.781394][ T6902] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  713.831235][ T6902] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.860391][T14729] zl10353_read_register: readreg error (reg=127, ret==0)
[  713.889354][T16008] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2633'.
[  713.898739][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  714.107171][T14729] usb 7-1: USB disconnect, device number 57
[  714.764918][   T30] audit: type=1400 audit(1787020809.622:1178): avc:  denied  { append } for  pid=16003 comm="syz.7.2632" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  714.919122][T14729] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  714.922923][T16020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2634'.
[  715.247711][ T5728] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  715.282758][   T10] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[  716.167390][ T5728] usb 6-1: device descriptor read/64, error -71
[  716.214450][   T10] usb 8-1: Using ep0 maxpacket: 16
[  716.222414][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  716.243461][T14729] usb 7-1: Using ep0 maxpacket: 16
[  716.245835][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.249135][T14729] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  716.267831][T14729] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  716.276007][T14729] usb 7-1: config 0 has no interface number 0
[  716.278810][   T10] usb 8-1: config 0 descriptor??
[  716.282265][T14729] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  716.282299][T14729] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  716.285154][T14729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.316321][T14729] usb 7-1: Product: syz
[  716.320501][T14729] usb 7-1: Manufacturer: syz
[  716.325901][T14729] usb 7-1: SerialNumber: syz
[  716.333339][T14729] usb 7-1: config 0 descriptor??
[  716.339342][T16015] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  716.356443][T16015] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  716.383609][ T5787] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  716.413589][ T5728] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  716.533561][ T4915] Bluetooth: hci4: command 0x0405 tx timeout
[  716.558161][ T5728] usb 6-1: device descriptor read/64, error -71
[  716.565439][ T5787] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00
[  716.596188][T16015] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  716.605318][T16015] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  716.613111][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.625901][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  716.636256][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.724116][ T5728] usb usb6-port1: attempt power cycle
[  716.786435][   T10] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  716.826862][T14729] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  716.855664][ T5787] usb 4-1: USB disconnect, device number 96
[  717.073559][ T5728] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  717.106291][ T5728] usb 6-1: device descriptor read/8, error -71
[  718.085197][T14729] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  718.125147][T14729] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  718.163749][T14729] asix 7-1:0.34: probe with driver asix failed with error -71
[  718.209227][T14729] usb 7-1: USB disconnect, device number 58
[  718.315902][ T5728] usb 8-1: USB disconnect, device number 58
[  718.460201][T16056] nvme_fabrics: unknown parameter or missing value 'tra��port=loop' in ctrl creation request
[  720.123940][T16076] FAULT_INJECTION: forcing a failure.
[  720.123940][T16076] name failslab, interval 1, probability 0, space 0, times 0
[  721.312934][T16076] CPU: 1 UID: 0 PID: 16076 Comm: syz.3.2651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.312964][T16076] Tainted: [L]=SOFTLOCKUP
[  721.312971][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  721.312981][T16076] Call Trace:
[  721.312987][T16076]  <TASK>
[  721.312995][T16076]  dump_stack_lvl+0x100/0x190
[  721.313023][T16076]  should_fail_ex.cold+0x5/0xa
[  721.313046][T16076]  should_failslab+0xc2/0x120
[  721.313070][T16076]  __kmalloc_noprof+0xfc/0x820
[  721.313090][T16076]  ? __pfx___mutex_lock+0x10/0x10
[  721.313111][T16076]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  721.313141][T16076]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  721.313176][T16076]  genl_start+0x18f/0x970
[  721.313210][T16076]  __netlink_dump_start+0x60e/0x990
[  721.313232][T16076]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  721.313257][T16076]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  721.313279][T16076]  ? genl_get_cmd+0x47d/0x760
[  721.313303][T16076]  ? __pfx_genl_get_cmd+0x10/0x10
[  721.313322][T16076]  ? __pfx_genl_start+0x10/0x10
[  721.313341][T16076]  ? __pfx_genl_dumpit+0x10/0x10
[  721.313360][T16076]  ? __pfx_genl_done+0x10/0x10
[  721.313386][T16076]  ? trace_sched_exit_tp+0x120/0x160
[  721.313411][T16076]  ? __radix_tree_lookup+0x217/0x2b0
[  721.313434][T16076]  genl_rcv_msg+0x471/0x800
[  721.313459][T16076]  ? __pfx_genl_rcv_msg+0x10/0x10
[  721.313488][T16076]  ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10
[  721.313519][T16076]  ? __lock_acquire+0x49f/0x1a40
[  721.313547][T16076]  netlink_rcv_skb+0x159/0x420
[  721.313566][T16076]  ? __pfx_genl_rcv_msg+0x10/0x10
[  721.313589][T16076]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  721.313620][T16076]  ? netlink_deliver_tap+0x1ae/0xcc0
[  721.313638][T16076]  ? __rcu_read_unlock+0x27f/0x5e0
[  721.313670][T16076]  genl_rcv+0x28/0x40
[  721.313689][T16076]  netlink_unicast+0x585/0x850
[  721.313712][T16076]  ? __pfx_netlink_unicast+0x10/0x10
[  721.313739][T16076]  netlink_sendmsg+0x8b0/0xda0
[  721.313764][T16076]  ? __pfx_netlink_sendmsg+0x10/0x10
[  721.313786][T16076]  ? selinux_socket_sendmsg+0x198/0x2f0
[  721.313817][T16076]  ____sys_sendmsg+0xa4d/0xbe0
[  721.313833][T16076]  ? __pfx_netlink_sendmsg+0x10/0x10
[  721.313854][T16076]  ? __pfx_____sys_sendmsg+0x10/0x10
[  721.313875][T16076]  ? __lock_acquire+0x49f/0x1a40
[  721.313897][T16076]  ? __lock_acquire+0x49f/0x1a40
[  721.313922][T16076]  ___sys_sendmsg+0x190/0x1e0
[  721.313942][T16076]  ? __pfx____sys_sendmsg+0x10/0x10
[  721.313958][T16076]  ? __lock_acquire+0x49f/0x1a40
[  721.313979][T16076]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  721.314033][T16076]  __sys_sendmsg+0x160/0x210
[  721.314058][T16076]  ? __pfx___sys_sendmsg+0x10/0x10
[  721.314087][T16076]  ? trace_hardirqs_off+0x70/0x170
[  721.314117][T16076]  do_syscall_64+0x115/0x870
[  721.314137][T16076]  ? clear_bhb_loop+0x70/0xc0
[  721.314165][T16076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.314183][T16076] RIP: 0033:0x7fc01f19e0d9
[  721.314198][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.314214][T16076] RSP: 002b:00007fc0200f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  721.314232][T16076] RAX: ffffffffffffffda RBX: 00007fc01f425fa0 RCX: 00007fc01f19e0d9
[  721.314243][T16076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  721.314254][T16076] RBP: 00007fc0200f6090 R08: 0000000000000000 R09: 0000000000000000
[  721.314265][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.314275][T16076] R13: 00007fc01f426038 R14: 00007fc01f425fa0 R15: 00007fff48854e28
[  721.314299][T16076]  </TASK>
[  722.409007][T16100] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2654'.
[  723.204077][ T5787] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  723.266237][T14729] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[  723.274415][T15985] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  723.433563][ T5787] usb 6-1: Using ep0 maxpacket: 16
[  723.435379][T14729] usb 8-1: Using ep0 maxpacket: 32
[  723.445547][T15985] usb 7-1: Using ep0 maxpacket: 32
[  723.465922][T15985] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  723.483959][T14729] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  723.501610][T15985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.531832][T14729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.531929][ T5787] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  723.550399][T15985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.578596][T14729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.578638][T14729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.594142][T14729] usb 8-1: config 0 descriptor??
[  723.614052][ T5787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.614106][ T5787] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  723.614154][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.622293][T15985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.628374][ T5787] usb 6-1: config 0 descriptor??
[  723.630394][T15985] usb 7-1: config 0 descriptor??
[  724.157693][T16103] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  724.249988][T16103] SELinux: failed to load policy
[  724.317367][T16101] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  724.348054][T16101] SELinux: failed to load policy
[  724.362545][T14729] usbhid 8-1:0.0: can't add hid device: -71
[  724.399956][T14729] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  724.414611][T15985] usbhid 7-1:0.0: can't add hid device: -71
[  724.430561][T15985] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  724.453201][T14729] usb 8-1: USB disconnect, device number 59
[  724.474502][T15985] usb 7-1: USB disconnect, device number 59
[  724.866523][T16116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16116 comm=syz.1.2662
[  725.060347][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2661'.
[  726.388530][   T10] usb 6-1: USB disconnect, device number 19
[  726.521124][T16135] batman_adv: batadv0: Adding interface: veth0
[  726.540570][T16135] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.567198][T16135] batman_adv: batadv0: Interface activated: veth0
[  726.580674][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  726.589777][T16135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.603262][T16138] netlink: 'syz.3.2669': attribute type 9 has an invalid length.
[  726.626598][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  726.634521][T16135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.650359][T16135] batman_adv: batadv0: Interface deactivated: veth0
[  726.663445][T16135] batman_adv: batadv0: Removing interface: veth0
[  728.460087][   T30] audit: type=1400 audit(1787020823.552:1179): avc:  denied  { ioctl } for  pid=16158 comm="syz.3.2672" path="socket:[48721]" dev="sockfs" ino=48721 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  728.577322][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2676'.
[  728.775100][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2676'.
[  728.940357][T16168] CIFS: Attempting to mount //127.0.0.1/share
[  728.984011][T16168] CIFS: VFS: Error connecting to socket. Aborting operation.
[  731.387661][T16179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16179 comm=syz.3.2680
[  731.507503][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'.
[  731.516817][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'.
[  731.526141][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2681'.
[  731.807219][   T30] audit: type=1400 audit(1787020826.772:1180): avc:  denied  { getopt } for  pid=16182 comm="syz.5.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  731.833083][T16168] CIFS: VFS: cifs_mount failed w/return code = -22
[  732.824735][T16190] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2679'.
[  733.351099][T16194] netlink: 'syz.1.2683': attribute type 9 has an invalid length.
[  733.462116][T16194] fuse: fd is not a fuse device
[  733.716026][T16201] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2685'.
[  733.725430][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'.
[  734.546680][T16213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=16213 comm=syz.6.2684
[  735.634627][T16224] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  736.053545][T15985] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  736.274822][T15985] usb 4-1: Using ep0 maxpacket: 8
[  736.334461][T15985] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  736.467259][T15985] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  736.584726][T15985] usb 4-1: config 0 has no interface number 0
[  736.688185][T15985] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  736.823353][T15985] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  738.822033][T15985] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  738.834288][T15985] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  738.847552][T15985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.863875][T15985] usb 4-1: config 0 descriptor??
[  739.488054][T15985] usb 4-1: can't set config #0, error -71
[  739.802096][T16256] netlink: 'syz.1.2695': attribute type 21 has an invalid length.
[  739.810252][T16256] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2695'.
[  739.827890][T15985] usb 4-1: USB disconnect, device number 97
[  739.839643][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2692'.
[  739.918271][T16260] netlink: 'syz.1.2697': attribute type 1 has an invalid length.
[  739.989470][   T30] audit: type=1400 audit(1787020835.082:1181): avc:  denied  { map } for  pid=16239 comm="syz.5.2692" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  739.989519][   T30] audit: type=1400 audit(1787020835.082:1182): avc:  denied  { execute } for  pid=16239 comm="syz.5.2692" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  740.007117][T16260] 8021q: adding VLAN 0 to HW filter on device bond19
[  740.195945][T16265] syzkaller0: entered promiscuous mode
[  740.195970][T16265] syzkaller0: entered allmulticast mode
[  740.206804][T16265] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  740.313531][T15985] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  740.438813][T16267] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  740.438860][T16267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  740.448645][T16267] vhci_hcd vhci_hcd.0: Device attached
[  740.486163][T15985] usb 4-1: device descriptor read/64, error -71
[  740.645044][T16278] overlayfs: failed to clone upperpath
[  740.683938][ T5697] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  740.721602][   T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  740.733532][T15985] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  740.864568][ T5697] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  740.867348][T15985] usb 4-1: device descriptor read/64, error -71
[  740.891470][ T5697] usb 6-1: config 0 has no interfaces?
[  740.907682][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.932237][ T5697] usb 6-1: config 0 descriptor??
[  741.027444][T15985] usb usb4-port1: attempt power cycle
[  741.405024][T15985] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  741.443730][   T10] usb 43-1: device descriptor read/64, error -71
[  741.664065][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  741.730334][T15985] usb 4-1: device descriptor read/8, error -71
[  741.757678][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  741.945157][   T10] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[  742.255149][T15985] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  742.714017][T15985] usb 4-1: device descriptor read/8, error -71
[  743.811722][T16271] vhci_hcd: connection closed
[  743.812371][ T5787] usb 6-1: USB disconnect, device number 20
[  743.825136][ T6902] vhci_hcd vhci_hcd.5: stop threads
[  743.833300][ T6902] vhci_hcd vhci_hcd.5: release socket
[  743.863841][T15985] usb usb4-port1: unable to enumerate USB device
[  743.873793][ T6902] vhci_hcd vhci_hcd.5: disconnect device
[  746.087643][ T5787] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  746.098354][T16309] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  746.107470][T16309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.120885][T16317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16317 comm=syz.7.2711
[  746.183626][ T5728] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  746.530195][ T5728] usb 6-1: device descriptor read/64, error -71
[  746.605595][ T5787] usb 7-1: Using ep0 maxpacket: 8
[  746.888746][ T5787] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  747.318455][ T5728] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  747.463721][   T10] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  747.626609][ T5787] usb 7-1: unable to read config index 0 descriptor/start: -71
[  747.634804][ T5787] usb 7-1: can't read configurations, error -71
[  747.748263][    C1] Unknown status report in ack skb
[  748.414179][ T5728] usb 6-1: device descriptor read/64, error -71
[  748.628723][ T5728] usb usb6-port1: attempt power cycle
[  748.867649][T16349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2718'.
[  749.053590][ T5728] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  749.115398][ T5728] usb 6-1: Invalid ep0 maxpacket: 9
[  749.284351][ T5728] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  749.305774][ T5728] usb 6-1: Invalid ep0 maxpacket: 9
[  749.313249][ T5728] usb usb6-port1: unable to enumerate USB device
[  749.446197][T16364] syzkaller0: entered promiscuous mode
[  749.453737][T16364] syzkaller0: entered allmulticast mode
[  749.729455][T16371] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2724'.
[  749.928123][T15985] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  750.083959][T15985] usb 4-1: Using ep0 maxpacket: 32
[  750.094379][T15985] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  750.116329][T15985] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 254, using maximum allowed: 30
[  750.134125][T15985] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  750.157964][T15985] usb 4-1: config 0 interface 0 has no altsetting 0
[  750.166649][T15985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.180073][T15985] usb 4-1: config 0 descriptor??
[  750.648758][T15985] monterey 0003:0566:3004.0010: ignoring exceeding usage max
[  750.673595][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2732'.
[  750.687878][T15985] monterey 0003:0566:3004.0010: hidraw0: USB HID v0.01 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0
[  750.797112][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  750.818283][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  750.831814][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  750.856972][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  750.879721][ T5787] usb 4-1: USB disconnect, device number 102
[  750.886644][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  750.963201][T16395] fido_id[16395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  750.996132][T16401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16401 comm=syz.6.2733
[  751.519411][   T30] audit: type=1400 audit(1787020846.612:1183): avc:  denied  { read } for  pid=16406 comm="syz.5.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  751.755129][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'.
[  752.035599][T16413] netlink: 'syz.5.2738': attribute type 9 has an invalid length.
[  752.171399][T16419] netlink: 'syz.7.2739': attribute type 9 has an invalid length.
[  752.325792][T15987] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  752.458692][T16396] lo speed is unknown, defaulting to 1000
[  752.484263][T15987] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  752.495477][T15987] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  752.587574][T15987] usb 4-1: Product: syz
[  752.729886][T15987] usb 4-1: config 0 descriptor??
[  752.843530][T15987] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  753.004602][T15987] usb 4-1: Detected FT232H
[  753.013790][ T4915] Bluetooth: hci5: command tx timeout
[  753.408726][T15987] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  753.424008][T15987] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  753.443994][T15987] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  753.477965][T16447] FAULT_INJECTION: forcing a failure.
[  753.477965][T16447] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  753.499396][T15987] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  753.616038][T15987] usb 4-1: USB disconnect, device number 103
[  753.813965][T16447] CPU: 1 UID: 0 PID: 16447 Comm: syz.6.2744 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.813993][T16447] Tainted: [L]=SOFTLOCKUP
[  753.813999][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  753.814009][T16447] Call Trace:
[  753.814016][T16447]  <TASK>
[  753.814024][T16447]  dump_stack_lvl+0x100/0x190
[  753.814052][T16447]  should_fail_ex.cold+0x5/0xa
[  753.814070][T16447]  ? prepare_alloc_pages+0x16d/0x5f0
[  753.814097][T16447]  should_fail_alloc_page+0xeb/0x140
[  753.814123][T16447]  prepare_alloc_pages+0x1f0/0x5f0
[  753.814150][T16447]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  753.814176][T16447]  ? find_held_lock+0x2b/0x80
[  753.814193][T16447]  ? is_bpf_text_address+0x8a/0x1a0
[  753.814217][T16447]  ? is_bpf_text_address+0x8a/0x1a0
[  753.814240][T16447]  ? bpf_ksym_find+0x128/0x1c0
[  753.814266][T16447]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  753.814287][T16447]  ? is_bpf_text_address+0x94/0x1a0
[  753.814311][T16447]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  753.814334][T16447]  ? __kernel_text_address+0xd/0x30
[  753.814355][T16447]  ? unwind_get_return_address+0x59/0xa0
[  753.814375][T16447]  ? arch_stack_walk+0xa6/0xf0
[  753.814402][T16447]  ? __pfx_stack_trace_save+0x10/0x10
[  753.814420][T16447]  ? __lock_acquire+0x49f/0x1a40
[  753.814448][T16447]  ? stack_depot_save_flags+0x27/0x9d0
[  753.814476][T16447]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  753.814499][T16447]  ? policy_nodemask+0xed/0x4f0
[  753.814526][T16447]  alloc_pages_mpol+0x1fb/0x540
[  753.814551][T16447]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  753.814582][T16447]  alloc_pages_noprof+0x1a/0x160
[  753.814610][T16447]  get_free_pages_noprof+0x10/0xb0
[  753.814632][T16447]  __kasan_populate_vmalloc+0xa0/0x210
[  753.814658][T16447]  alloc_vmap_area+0x95d/0x2bb0
[  753.814688][T16447]  ? kasan_save_track+0x14/0x30
[  753.814709][T16447]  ? __kasan_kmalloc+0xaa/0xb0
[  753.814733][T16447]  ? __pfx_alloc_vmap_area+0x10/0x10
[  753.814756][T16447]  ? __get_vm_area_node+0x101/0x330
[  753.814783][T16447]  __get_vm_area_node+0x1ca/0x330
[  753.814812][T16447]  __vmalloc_node_range_noprof+0x228/0x1630
[  753.814838][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  753.814865][T16447]  ? find_held_lock+0x2b/0x80
[  753.814881][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  753.814902][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  753.814926][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  753.814957][T16447]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  753.814984][T16447]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  753.815009][T16447]  ? nf_sockopt_find.isra.0+0x2a/0x290
[  753.815031][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  753.815055][T16447]  ? rcu_is_watching+0x12/0xc0
[  753.815082][T16447]  ? cap_capable+0x107/0x430
[  753.815105][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  753.815130][T16447]  __vmalloc_node_noprof+0xad/0xf0
[  753.815155][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  753.815183][T16447]  ip_set_sockfn_get+0x18e/0xd20
[  753.815212][T16447]  ? __pfx_ip_set_sockfn_get+0x10/0x10
[  753.815240][T16447]  ? nf_sockopt_find.isra.0+0x222/0x290
[  753.815265][T16447]  nf_getsockopt+0x7c/0xe0
[  753.815288][T16447]  ip_getsockopt+0x192/0x1e0
[  753.815315][T16447]  ? __pfx_ip_getsockopt+0x10/0x10
[  753.815342][T16447]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  753.815372][T16447]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  753.815408][T16447]  raw_getsockopt+0x4d/0x1f0
[  753.815437][T16447]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  753.815465][T16447]  do_sock_getsockopt+0x50a/0x6e0
[  753.815491][T16447]  ? __lock_acquire+0x49f/0x1a40
[  753.815515][T16447]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  753.815541][T16447]  ? rcu_read_lock_any_held+0x6a/0xa0
[  753.815565][T16447]  ? find_held_lock+0x2b/0x80
[  753.815588][T16447]  ? __fget_files+0x21f/0x3d0
[  753.815613][T16447]  __sys_getsockopt+0x148/0x260
[  753.815642][T16447]  ? __x64_sys_getsockopt+0xbd/0x160
[  753.815663][T16447]  __x64_sys_getsockopt+0xbd/0x160
[  753.815684][T16447]  ? do_syscall_64+0x90/0x870
[  753.815705][T16447]  ? lockdep_hardirqs_on+0x78/0x100
[  753.815725][T16447]  do_syscall_64+0x115/0x870
[  753.815744][T16447]  ? clear_bhb_loop+0x70/0xc0
[  753.815766][T16447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.815784][T16447] RIP: 0033:0x7f0fcef9e0d9
[  753.815799][T16447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.815816][T16447] RSP: 002b:00007f0fcfe89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  753.815833][T16447] RAX: ffffffffffffffda RBX: 00007f0fcf225fa0 RCX: 00007f0fcef9e0d9
[  753.815845][T16447] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  753.815855][T16447] RBP: 00007f0fcfe89090 R08: 0000200000000040 R09: 0000000000000000
[  753.815866][T16447] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.815876][T16447] R13: 00007f0fcf226038 R14: 00007f0fcf225fa0 R15: 00007ffc67db0fd8
[  753.815899][T16447]  </TASK>
[  754.461355][T16454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16454 comm=syz.7.2746
[  754.479844][T16447] syz.6.2744: vmalloc error: size 40, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  754.494051][T16447] CPU: 1 UID: 0 PID: 16447 Comm: syz.6.2744 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  754.494079][T16447] Tainted: [L]=SOFTLOCKUP
[  754.494085][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  754.494095][T16447] Call Trace:
[  754.494101][T16447]  <TASK>
[  754.494106][T16447]  dump_stack_lvl+0x100/0x190
[  754.494132][T16447]  warn_alloc.cold+0x94/0xa8
[  754.494150][T16447]  ? __pfx_warn_alloc+0x10/0x10
[  754.494169][T16447]  ? lockdep_hardirqs_on+0x78/0x100
[  754.494191][T16447]  ? __get_vm_area_node+0x2cd/0x330
[  754.494217][T16447]  ? __get_vm_area_node+0x208/0x330
[  754.494243][T16447]  __vmalloc_node_range_noprof+0xccd/0x1630
[  754.494267][T16447]  ? find_held_lock+0x2b/0x80
[  754.494282][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  754.494301][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  754.494325][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  754.494354][T16447]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  754.494380][T16447]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  754.494403][T16447]  ? nf_sockopt_find.isra.0+0x2a/0x290
[  754.494423][T16447]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  754.494444][T16447]  ? rcu_is_watching+0x12/0xc0
[  754.494468][T16447]  ? cap_capable+0x107/0x430
[  754.494490][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  754.494511][T16447]  __vmalloc_node_noprof+0xad/0xf0
[  754.494534][T16447]  ? ip_set_sockfn_get+0x18e/0xd20
[  754.494561][T16447]  ip_set_sockfn_get+0x18e/0xd20
[  754.494586][T16447]  ? __pfx_ip_set_sockfn_get+0x10/0x10
[  754.494612][T16447]  ? nf_sockopt_find.isra.0+0x222/0x290
[  754.494636][T16447]  nf_getsockopt+0x7c/0xe0
[  754.494657][T16447]  ip_getsockopt+0x192/0x1e0
[  754.494684][T16447]  ? __pfx_ip_getsockopt+0x10/0x10
[  754.494710][T16447]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  754.494738][T16447]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  754.494769][T16447]  raw_getsockopt+0x4d/0x1f0
[  754.494792][T16447]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  754.494817][T16447]  do_sock_getsockopt+0x50a/0x6e0
[  754.494840][T16447]  ? __lock_acquire+0x49f/0x1a40
[  754.494861][T16447]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  754.494886][T16447]  ? rcu_read_lock_any_held+0x6a/0xa0
[  754.494908][T16447]  ? find_held_lock+0x2b/0x80
[  754.494931][T16447]  ? __fget_files+0x21f/0x3d0
[  754.494953][T16447]  __sys_getsockopt+0x148/0x260
[  754.494980][T16447]  ? __x64_sys_getsockopt+0xbd/0x160
[  754.495000][T16447]  __x64_sys_getsockopt+0xbd/0x160
[  754.495026][T16447]  ? do_syscall_64+0x90/0x870
[  754.495046][T16447]  ? lockdep_hardirqs_on+0x78/0x100
[  754.495063][T16447]  do_syscall_64+0x115/0x870
[  754.495082][T16447]  ? clear_bhb_loop+0x70/0xc0
[  754.495103][T16447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.495120][T16447] RIP: 0033:0x7f0fcef9e0d9
[  754.495136][T16447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.495153][T16447] RSP: 002b:00007f0fcfe89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  754.495171][T16447] RAX: ffffffffffffffda RBX: 00007f0fcf225fa0 RCX: 00007f0fcef9e0d9
[  754.495182][T16447] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  754.495190][T16447] RBP: 00007f0fcfe89090 R08: 0000200000000040 R09: 0000000000000000
[  754.495200][T16447] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.495210][T16447] R13: 00007f0fcf226038 R14: 00007f0fcf225fa0 R15: 00007ffc67db0fd8
[  754.495230][T16447]  </TASK>
[  754.495241][T16447] Mem-Info:
[  754.843919][T15987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  756.156060][ T5597] Bluetooth: hci5: command tx timeout
[  756.177387][T15987] ftdi_sio 4-1:0.0: device disconnected
[  756.201215][T16447] active_anon:17866 inactive_anon:0 isolated_anon:0
[  756.201215][T16447]  active_file:0 inactive_file:26214 isolated_file:0
[  756.201215][T16447]  unevictable:0 dirty:359 writeback:0
[  756.201215][T16447]  slab_reclaimable:8116 slab_unreclaimable:106365
[  756.201215][T16447]  mapped:35345 shmem:3414 pagetables:1778
[  756.201215][T16447]  sec_pagetables:0 bounce:0
[  756.201215][T16447]  kernel_misc_reclaimable:0
[  756.201215][T16447]  free:1314787 free_pcp:12061 free_cma:0
[  757.608694][T16462] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2747'.
[  757.630476][T16447] Node 0 active_anon:71792kB inactive_anon:0kB active_file:0kB inactive_file:104720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143516kB dirty:1452kB writeback:0kB shmem:13664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14920kB pagetables:6900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  757.671350][T16447] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  757.708516][T16447] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  757.798596][T16447] lowmem_reserve[]: 0 2472 2472 2472 2472
[  757.816083][T16447] Node 0 DMA32 free:1296684kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71792kB inactive_anon:0kB active_file:0kB inactive_file:104720kB unevictable:0kB writepending:1452kB zspages:0kB present:3129332kB managed:2532080kB mlocked:0kB bounce:0kB free_pcp:41648kB local_pcp:30524kB free_cma:0kB
[  757.893530][T16447] lowmem_reserve[]: 0 0 0 0 0
[  757.899493][T16447] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:124kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  758.023750][T16447] lowmem_reserve[]: 0 0 0 0 0
[  758.030425][T16447] Node 1 Normal free:3949432kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3080kB local_pcp:2048kB free_cma:0kB
[  758.103457][T16447] lowmem_reserve[]: 0 0 0 0 0
[  758.128377][T16468] batadv_slave_1: entered promiscuous mode
[  758.142155][T16447] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  758.183022][T16471] batadv_slave_1: left promiscuous mode
[  758.207717][T16447] Node 0 DMA32: 2243*4kB (UME) 1592*8kB (UME) 1161*16kB (UME) 1272*32kB (UME) 687*64kB (UME) 392*128kB (UME) 264*256kB (UME) 107*512kB (UME) 49*1024kB (UME) 22*2048kB (UME) 221*4096kB (UM) = 1297948kB
[  758.228365][ T4915] Bluetooth: hci5: command tx timeout
[  758.240801][T16396] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.255982][T16396] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.264333][T16396] bridge_slave_0: entered allmulticast mode
[  758.264848][T16447] Node 0 
[  758.273023][T16396] bridge_slave_0: entered promiscuous mode
[  758.281319][T16447] Normal: 
[  758.299672][T16396] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.308801][T16447] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  758.311464][T16396] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.323178][T16475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16475 comm=syz.7.2749
[  758.329195][T16396] bridge_slave_1: entered allmulticast mode
[  758.351243][T16396] bridge_slave_1: entered promiscuous mode
[  758.359831][T16447] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 7*16kB (UM) 10*32kB (UM) 10*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (UM) = 3949432kB
[  758.380279][T16447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  758.400661][T16478] netlink: 'syz.3.2750': attribute type 9 has an invalid length.
[  758.404270][T16447] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  758.434023][T16447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  758.456026][T16447] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  758.467087][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.477017][T16447] 26756 total pagecache pages
[  758.486896][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.496699][T16447] 0 pages in swap cache
[  758.501120][T16447] Free swap  = 124996kB
[  758.506141][T16447] Total swap = 124996kB
[  758.519094][T16447] 2097051 pages RAM
[  758.529182][T16447] 0 pages HighMem/MovableOnly
[  758.543750][T16447] 432385 pages reserved
[  758.552079][T16447] 0 pages cma reserved
[  758.560084][T16396] team0: Port device team_slave_0 added
[  758.581443][T16396] team0: Port device team_slave_1 added
[  759.056939][T16483] misc userio: The device must be registered before sending interrupts
[  759.095615][T16483] misc userio: The device must be registered before sending interrupts
[  759.192547][   T30] audit: type=1400 audit(1787020854.252:1184): avc:  denied  { create } for  pid=16481 comm="syz.3.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  759.306386][T16488] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2751'.
[  759.372968][   T30] audit: type=1400 audit(1787020854.342:1185): avc:  denied  { shutdown } for  pid=16481 comm="syz.3.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  760.305330][ T4915] Bluetooth: hci5: command tx timeout
[  760.328059][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.336183][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.365555][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  760.381513][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  760.487024][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2753'.
[  761.245296][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.276653][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.337414][T16396] hsr_slave_0: entered promiscuous mode
[  761.346029][T16396] hsr_slave_1: entered promiscuous mode
[  761.353202][T16396] debugfs: 'hsr0' already exists in 'hsr'
[  761.359627][T16396] Cannot create hsr debugfs directory
[  761.474218][T16507] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2758'.
[  762.889553][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2759'.
[  762.968358][T16521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16521 comm=syz.3.2762
[  763.630193][    C1] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  764.681984][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'.
[  765.930804][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'.
[  766.927181][T16560] netlink: 'syz.6.2771': attribute type 1 has an invalid length.
[  767.827787][T16560] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  768.186982][T16579] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2774'.
[  768.367707][T16593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  768.594891][T16396] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  768.612762][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  768.644952][T16396] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  769.238520][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  769.434681][T16600] FAULT_INJECTION: forcing a failure.
[  769.434681][T16600] name failslab, interval 1, probability 0, space 0, times 0
[  769.483175][T16600] CPU: 1 UID: 0 PID: 16600 Comm: syz.6.2778 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  769.483204][T16600] Tainted: [L]=SOFTLOCKUP
[  769.483210][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  769.483220][T16600] Call Trace:
[  769.483227][T16600]  <TASK>
[  769.483234][T16600]  dump_stack_lvl+0x100/0x190
[  769.483261][T16600]  should_fail_ex.cold+0x5/0xa
[  769.483285][T16600]  should_failslab+0xc2/0x120
[  769.483309][T16600]  __kmalloc_noprof+0xfc/0x820
[  769.483331][T16600]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  769.483350][T16600]  ? ioctl_standard_iw_point+0x3e9/0xc90
[  769.483376][T16600]  ioctl_standard_iw_point+0x3e9/0xc90
[  769.483396][T16600]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  769.483426][T16600]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  769.483452][T16600]  ? dev_load+0x8e/0x240
[  769.483473][T16600]  ? full_name_hash+0xbc/0x100
[  769.483496][T16600]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  769.483522][T16600]  ioctl_standard_call+0x167/0x1d0
[  769.483542][T16600]  ? __pfx_ioctl_standard_call+0x10/0x10
[  769.483561][T16600]  ? __pfx_cfg80211_wext_siwessid+0x10/0x10
[  769.483586][T16600]  wext_ioctl_dispatch.constprop.0+0x312/0x3e0
[  769.483610][T16600]  wext_handle_ioctl+0x105/0x1b0
[  769.483631][T16600]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  769.483655][T16600]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  769.483681][T16600]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  769.483713][T16600]  sock_ioctl+0x2d4/0x6b0
[  769.483734][T16600]  ? __pfx_sock_ioctl+0x10/0x10
[  769.483750][T16600]  ? hook_file_ioctl_common+0x140/0x440
[  769.483776][T16600]  ? selinux_file_ioctl+0x13b/0x290
[  769.483802][T16600]  ? selinux_file_ioctl+0xb6/0x290
[  769.483829][T16600]  ? __pfx_sock_ioctl+0x10/0x10
[  769.483848][T16600]  __x64_sys_ioctl+0x18e/0x210
[  769.483881][T16600]  do_syscall_64+0x115/0x870
[  769.483901][T16600]  ? clear_bhb_loop+0x70/0xc0
[  769.483923][T16600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.483940][T16600] RIP: 0033:0x7f0fcef9e0d9
[  769.483956][T16600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.483972][T16600] RSP: 002b:00007f0fcfe89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  769.483991][T16600] RAX: ffffffffffffffda RBX: 00007f0fcf225fa0 RCX: 00007f0fcef9e0d9
[  769.484001][T16600] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003
[  769.484012][T16600] RBP: 00007f0fcfe89090 R08: 0000000000000000 R09: 0000000000000000
[  769.484022][T16600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.484032][T16600] R13: 00007f0fcf226038 R14: 00007f0fcf225fa0 R15: 00007ffc67db0fd8
[  769.484057][T16600]  </TASK>
[  770.063437][T16396] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  770.774906][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  770.783999][T16396] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  771.226234][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  771.632906][T16396] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.710622][T16396] 8021q: adding VLAN 0 to HW filter on device team0
[  771.726760][T16249] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.733958][T16249] bridge0: port 1(bridge_slave_0) entered forwarding state
[  771.758976][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.767786][ T6903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  771.901509][T16638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2787'.
[  772.660856][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2787'.
[  772.932085][T16636] syz.7.2786 (16636) used greatest stack depth: 19416 bytes left
[  773.163842][T15987] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[  773.207394][T16648] netlink: 'syz.5.2789': attribute type 9 has an invalid length.
[  773.317478][T15987] usb 8-1: Using ep0 maxpacket: 8
[  773.346640][T15987] usb 8-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  773.366037][T15987] usb 8-1: config 3 has an invalid interface number: 45 but max is 0
[  773.520606][T15987] usb 8-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  773.530887][T15987] usb 8-1: config 3 has no interface number 0
[  773.537229][T15987] usb 8-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  773.550534][T15987] usb 8-1: config 3 interface 45 has no altsetting 0
[  773.572671][T15987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.638917][T15987] usb 8-1: Product: syz
[  773.665863][T15987] usb 8-1: Manufacturer: syz
[  773.697763][T15987] usb 8-1: SerialNumber: syz
[  774.016467][T16657] netlink: 'syz.7.2790': attribute type 1 has an invalid length.
[  774.255963][T16657] 8021q: adding VLAN 0 to HW filter on device bond6
[  774.456852][ T4915] Bluetooth: hci4: command 0x0405 tx timeout
[  774.537558][T15987] usb 8-1: USB disconnect, device number 60
[  774.622706][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  774.975117][T16687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16687 comm=syz.3.2796
[  775.111489][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.852374][T16396] veth0_vlan: entered promiscuous mode
[  775.936372][T16700] netlink: 'syz.7.2797': attribute type 9 has an invalid length.
[  775.970009][T16396] veth1_vlan: entered promiscuous mode
[  776.016271][T16396] veth0_macvtap: entered promiscuous mode
[  776.033317][T16396] veth1_macvtap: entered promiscuous mode
[  776.047177][T16702] netlink: Conntrack attr has 4 unknown bytes
[  776.071700][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.081231][T16702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.107968][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.197442][T16705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16705 comm=syz.3.2799
[  776.243880][ T6902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.270167][ T6902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.336607][  T196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.414503][ T1319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.423476][T15985] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  776.639170][T15985] usb 6-1: Using ep0 maxpacket: 32
[  776.664468][T15985] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  776.730091][T15985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  776.912611][T15985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  776.989848][T15985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.027187][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2804'.
[  777.064357][T15985] usb 6-1: config 0 descriptor??
[  777.239514][   T30] audit: type=1400 audit(1787020872.332:1186): avc:  denied  { connect } for  pid=16716 comm="syz.6.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  777.330889][   T30] audit: type=1400 audit(1787020872.392:1187): avc:  denied  { write } for  pid=16716 comm="syz.6.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  777.556061][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.584900][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.622948][T16707] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  777.633133][T14729] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  777.662849][T16707] SELinux: failed to load policy
[  777.697428][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.730510][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.751797][T15985] usbhid 6-1:0.0: can't add hid device: -71
[  777.782099][T15985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  777.804041][T14729] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[  777.830940][T15985] usb 6-1: USB disconnect, device number 25
[  777.845150][T14729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  777.906865][T14729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.474027][T14729] hackrf 4-1:1.0: Board ID: 00
[  778.488700][T14729] hackrf 4-1:1.0: Firmware version: 
[  778.802506][T14729] hackrf 4-1:1.0: Registered as swradio24
[  778.986384][T14729] videodev: could not get a free minor
[  779.058891][T14729] hackrf 4-1:1.0: Failed to register as video device (-23)
[  779.446148][T14729] hackrf 4-1:1.0: probe with driver hackrf failed with error -23
[  779.511206][T14729] usb 4-1: USB disconnect, device number 104
[  779.517312][T16742] tipc: Started in network mode
[  779.532788][T16742] tipc: Node identity b2e6d368e6a2, cluster identity 4711
[  779.603440][T16742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  779.637723][T16745] syzkaller0: entered promiscuous mode
[  779.647858][T16745] syzkaller0: entered allmulticast mode
[  779.725476][T16742] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  779.823292][T16758] 9p: Unknown uid 00000000004294967295
[  779.849117][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2810'.
[  779.866521][T16758] tipc: Resetting bearer <eth:syzkaller0>
[  779.894400][T16741] tipc: Resetting bearer <eth:syzkaller0>
[  779.903098][T16760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  779.989164][T16741] tipc: Disabling bearer <eth:syzkaller0>
[  780.001168][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.029446][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.041145][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.050270][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.143026][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.152393][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.162120][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.171780][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2814'.
[  780.776558][   T30] audit: type=1400 audit(1787020875.842:1188): avc:  denied  { write } for  pid=16768 comm="syz.1.2818" name="cluster" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  782.102796][T16803] IPVS: Unknown mcast interface: dvmrp0
[  782.282548][T16803] __nla_validate_parse: 25 callbacks suppressed
[  782.282591][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'.
[  782.671745][T15987] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  782.877921][   T30] audit: type=1400 audit(1787020877.972:1189): avc:  denied  { getopt } for  pid=16797 comm="syz.7.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  782.909099][T15987] usb 7-1: Using ep0 maxpacket: 32
[  782.942202][T15987] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  782.988848][T15987] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  783.018812][   T30] audit: type=1400 audit(1787020878.002:1190): avc:  denied  { write } for  pid=16797 comm="syz.7.2821" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  783.080418][T15987] usb 7-1: config 0 has no interface number 0
[  783.125659][T15987] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  783.190555][T15987] usb 7-1: config 0 interface 184 has no altsetting 0
[  783.211121][    T8] veth0: left allmulticast mode
[  783.216628][    T8] veth0: left promiscuous mode
[  783.221651][    T8] bridge0: port 3(veth0) entered disabled state
[  783.233480][   T30] audit: type=1400 audit(1787020878.022:1191): avc:  denied  { ioctl } for  pid=16797 comm="syz.7.2821" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  783.268141][    T8] bridge_slave_1: left allmulticast mode
[  783.276375][    T8] bridge_slave_1: left promiscuous mode
[  783.287641][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.303284][    T8] bridge_slave_0: left allmulticast mode
[  783.312676][    T8] bridge_slave_0: left promiscuous mode
[  783.320661][T16845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16845 comm=syz.1.2825
[  783.321155][T15987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.341752][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.413555][T15990] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  783.526709][    T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.537139][    T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.547032][    T8] bond0 (unregistering): Released all slaves
[  783.559325][    T8] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  783.568246][    T8] veth0_to_bond: left promiscuous mode
[  783.580171][    T8] veth0_to_bond: left allmulticast mode
[  783.588489][    T8] bond1 (unregistering): Released all slaves
[  783.642266][    T8] bond2 (unregistering): Released all slaves
[  783.661509][    T8] bond3 (unregistering): Released all slaves
[  783.677253][    T8] bond4 (unregistering): Released all slaves
[  783.698906][    T8] bond5 (unregistering): Released all slaves
[  783.705496][T15990] usb 4-1: Using ep0 maxpacket: 32
[  783.725097][    T8] bond6 (unregistering): Released all slaves
[  783.742755][    T8] bond7 (unregistering): Released all slaves
[  783.766315][    T8] bond8 (unregistering): Released all slaves
[  783.781957][    T8] bond9 (unregistering): Released all slaves
[  783.801116][    T8] bond10 (unregistering): Released all slaves
[  783.818375][    T8] bond11 (unregistering): Released all slaves
[  783.834121][    T8] bond12 (unregistering): Released all slaves
[  783.850893][    T8] bond13 (unregistering): Released all slaves
[  783.868468][    T8] bond14 (unregistering): Released all slaves
[  783.883994][    T8] bond15 (unregistering): Released all slaves
[  783.904220][    T8] bond16 (unregistering): Released all slaves
[  783.921325][    T8] bond17 (unregistering): Released all slaves
[  783.938433][    T8] bond18 (unregistering): Released all slaves
[  783.955010][    T8] bond19 (unregistering): Released all slaves
[  783.972626][T15990] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  784.464819][T15987] usb 7-1: Product: syz
[  784.478408][T15990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  784.496095][T15987] usb 7-1: Manufacturer: syz
[  784.528958][T15987] usb 7-1: SerialNumber: syz
[  784.553164][T15990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.556304][    T8] tipc: Left network mode
[  784.578016][T15987] usb 7-1: config 0 descriptor??
[  784.633703][T15990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.646452][T15987] usb 7-1: can't set config #0, error -71
[  784.710072][T15987] usb 7-1: USB disconnect, device number 62
[  784.721781][T15990] usb 4-1: config 0 descriptor??
[  784.793334][T16855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=16855 comm=syz.6.2827
[  786.210654][T16863] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  786.352200][T16863] SELinux: failed to load policy
[  786.476884][T15990] usbhid 4-1:0.0: can't add hid device: -71
[  786.486777][T15990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  786.507148][T15990] usb 4-1: USB disconnect, device number 105
[  786.728988][   T30] audit: type=1400 audit(1787020881.792:1192): avc:  denied  { mounton } for  pid=16872 comm="syz.5.2831" path="/proc/240/net/netfilter" dev="proc" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  787.706872][T15990] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[  787.935505][T15990] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  788.030261][T15990] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  788.211808][T15990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  788.318306][T15990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  788.424568][T15987] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  788.714192][T15990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.738681][T15990] usb 4-1: Product: syz
[  788.743795][T15987] usb 2-1: device descriptor read/64, error -71
[  788.983958][T15987] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  789.175130][T15990] usb 4-1: Manufacturer: syz
[  789.725875][T16886] netlink: 'syz.7.2835': attribute type 1 has an invalid length.
[  789.765776][    T8] team0 (unregistering): Port device team_slave_1 removed
[  789.867377][T15990] usb 4-1: SerialNumber: syz
[  789.877364][    T8] team0 (unregistering): Port device team_slave_0 removed
[  789.935642][T15990] usb 4-1: config 0 descriptor??
[  789.968222][T16882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  789.993454][T15987] usb 2-1: device descriptor read/64, error -71
[  790.188669][T15987] usb usb2-port1: attempt power cycle
[  790.213829][T15990] rc_core: IR keymap rc-streamzap not found
[  790.242477][T15990] Registered IR keymap rc-empty
[  790.383819][T15990] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  790.409203][T15990] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65
[  790.472225][T16886] 8021q: adding VLAN 0 to HW filter on device bond7
[  790.723845][T15987] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  791.209134][T15987] usb 2-1: device descriptor read/8, error -71
[  791.294431][T16905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16905 comm=syz.1.2838
[  791.712882][    T8] IPVS: stop unused estimator thread 0...
[  792.258818][T14729] usb 4-1: USB disconnect, device number 106
[  793.234619][T14729] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  793.407804][T14729] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  793.423530][T14729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  793.443007][T14729] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  793.455100][T14729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  793.467397][T14729] usb 7-1: SerialNumber: syz
[  793.533761][T15987] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  793.643949][T15997] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  793.690615][T14729] usb 7-1: 0:2 : does not exist
[  793.699663][T14729] usb 7-1: unit 2 not found!
[  793.706301][T15987] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  793.722211][ T5787] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  793.740962][T15987] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  793.748887][ T5787] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input66
[  793.775926][T15987] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  793.793667][T15997] usb 8-1: Using ep0 maxpacket: 8
[  793.818525][T15987] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  793.845227][T15997] usb 8-1: unable to get BOS descriptor or descriptor too short
[  793.862284][T14729] usb 7-1: USB disconnect, device number 63
[  793.871856][T15997] usb 8-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  793.892045][T15987] usb 4-1: config 0 interface 0 has no altsetting 0
[  793.918510][T15997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.932027][T15987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.944160][T15997] usb 8-1: Product: syz
[  793.950713][T15997] usb 8-1: Manufacturer: syz
[  793.968358][T15987] usb 4-1: config 0 descriptor??
[  793.979080][T15997] usb 8-1: SerialNumber: syz
[  794.004746][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  794.260547][T15997] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  794.272219][T15997] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  794.286950][T15997] usb 8-1: unable to issue vendor read request (ret = -71)
[  794.295547][T15997] usb 8-1: unable to issue vendor read request (ret = -71)
[  794.313141][T15997] usb 8-1: unable to issue vendor read request (ret = -71)
[  794.321301][T15997] usb 8-1: unable to issue vendor read request (ret = -71)
[  794.372584][T15997] usb 8-1: USB disconnect, device number 61
[  794.405586][ T5787] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  794.409353][T15987] hid-rmi 0003:1532:011D.0012: invalid report_size -2068305251
[  794.432258][T15987] hid-rmi 0003:1532:011D.0012: item 0 4 1 7 parsing failed
[  794.450069][T15987] hid-rmi 0003:1532:011D.0012: parse failed
[  794.462258][T15987] hid-rmi 0003:1532:011D.0012: probe with driver hid-rmi failed with error -22
[  794.486820][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  794.574501][T14729] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  794.605632][ T5787] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  794.605856][T15987] usb 4-1: USB disconnect, device number 107
[  794.620123][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.638437][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  794.650401][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.661909][ T5787] usb 2-1: config 0 descriptor??
[  794.723710][T14729] usb 7-1: Using ep0 maxpacket: 16
[  794.733096][T14729] usb 7-1: unable to get BOS descriptor or descriptor too short
[  794.741219][T14729] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  794.751915][T14729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  794.763041][T14729] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  794.774956][T14729] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  794.787832][T14729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.796880][T14729] usb 7-1: Product: syz
[  794.801054][T14729] usb 7-1: Manufacturer: syz
[  794.806246][T14729] usb 7-1: SerialNumber: syz
[  795.022887][T14729] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  795.031840][T14729] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  795.087859][ T5787] cp2112 0003:10C4:EA90.0013: item fetching failed at offset 5/7
[  795.096809][ T5787] cp2112 0003:10C4:EA90.0013: parse failed
[  795.103135][ T5787] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -22
[  795.163918][T15987] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  795.322559][ T5787] usb 2-1: USB disconnect, device number 57
[  795.365963][T15987] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  795.382267][T15987] usb 8-1: config 0 has no interfaces?
[  795.388301][T15987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.405482][T15987] usb 8-1: config 0 descriptor??
[  795.425155][T14729] usb 7-1: 2:1 : can't get Cluster Descriptor
[  795.637603][T14729] usb 8-1: USB disconnect, device number 62
[  795.655609][T15991] usb 7-1: USB disconnect, device number 64
[  795.732710][   T30] audit: type=1804 audit(1787020890.832:1193): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2870" name="bus" dev="ramfs" ino=51938 res=1 errno=0
[  795.810058][T16993] overlayfs: conflicting lowerdir path
�$ƚg��Ju��pc��]��X"
^�N�O��a*��/�H�l���2�<�6x7�1X=�S�ln��&*i'�������{8c��@p�U����N�)�='��(�@�B�R�8G�^O�F)���rm�ф)��b�e���ܚ?
��\ӽ�� =ǯ�.�96���R��t�~��V]R���ؤ0�2	P��[  796.334439][T15991] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  796.509170][T15991] usb 2-1: unable to get BOS descriptor or descriptor too short
[  796.546800][T15991] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  796.568922][T15991] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  796.592116][T15991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.619537][T15991] usb 2-1: Product: syz
[  796.633414][T15991] usb 2-1: Manufacturer: syz
[  796.650304][T15991] usb 2-1: SerialNumber: syz
[  796.676224][T14729] lg-g15 0003:046D:0A07.0014: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  796.709844][T14729] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0014/input/input67
[  796.858619][T17025] fido_id[17025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  796.906934][T15991] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  796.986706][   T30] audit: type=1400 audit(1787020892.082:1194): avc:  denied  { append } for  pid=17033 comm="syz.7.2890" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  797.106613][T15991] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  797.139069][T15991] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  797.201272][   T30] audit: type=1400 audit(1787020892.292:1195): avc:  denied  { write } for  pid=17041 comm="syz.5.2892" name="functions" dev="configfs" ino=12178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  797.261463][T17042] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  797.269099][T17042] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  797.275036][   T30] audit: type=1400 audit(1787020892.332:1196): avc:  denied  { write } for  pid=17041 comm="syz.5.2892" name="c.1" dev="configfs" ino=32597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  797.277909][T17042] udc dummy_udc.0: failed to start g1: -22
[  797.316414][T17042] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  797.318796][   T30] audit: type=1400 audit(1787020892.332:1197): avc:  denied  { write } for  pid=17041 comm="syz.5.2892" name="c.1" dev="configfs" ino=32597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  797.333186][T17042] UDC core: g1: couldn't find an available UDC or it's busy
[  797.382315][   T30] audit: type=1400 audit(1787020892.352:1198): avc:  denied  { write } for  pid=17041 comm="syz.5.2892" name="os_desc" dev="configfs" ino=12181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  797.449392][   T30] audit: type=1400 audit(1787020892.352:1199): avc:  denied  { write } for  pid=17041 comm="syz.5.2892" name="os_desc" dev="configfs" ino=12181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  797.512317][T15991] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  797.529764][T15991] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  797.624457][T17052] tipc: Started in network mode
[  797.630267][T17052] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[  797.640280][T17052] tipc: Enabled bearer <eth:dummy0>, priority 10
[  797.722517][T15991] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  797.816349][T15991] usb 2-1: USB disconnect, device number 58
[  797.944270][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  797.973891][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.144107][ T5787] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  798.220124][   T30] audit: type=1400 audit(1787020893.312:1200): avc:  denied  { name_bind 0x1000000 } for  pid=17068 comm="syz.6.2903" path="socket:[52110]" dev="sockfs" ino=52110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  798.343523][ T5787] usb 6-1: Using ep0 maxpacket: 16
[  798.352970][ T5787] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  798.380913][ T5787] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.413815][ T5787] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  798.426339][ T5787] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  798.470639][ T5787] usb 6-1: config 0 interface 0 has no altsetting 0
[  798.478472][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.513212][ T5787] usb 6-1: config 0 descriptor??
[  798.524500][T15991] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[  798.624654][T15997] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  798.639697][T14729] tipc: Node number set to 9349802
[  798.705677][T15991] usb 8-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  798.733199][T15991] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  798.747408][T15991] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  798.762000][T15991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.792782][T15991] usb 8-1: config 0 descriptor??
[  798.802683][T15997] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  798.816405][T17074] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  798.825191][T15997] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  798.838491][T15997] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  798.848817][T15997] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  798.859061][T15997] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  798.888506][T15997] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  798.901789][T15997] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  798.910167][T15997] usb 2-1: Product: syz
[  798.914803][T15997] usb 2-1: Manufacturer: syz
[  798.926104][T15997] cdc_wdm 2-1:1.0: skipping garbage
[  798.932445][T15997] cdc_wdm 2-1:1.0: skipping garbage
[  798.939666][T15997] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  798.945795][ T5787] zeroplus 0003:0C12:0005.0015: unknown main item tag 0x6
[  798.948595][T15997] cdc_wdm 2-1:1.0: Unknown control protocol
[  798.954390][ T5787] zeroplus 0003:0C12:0005.0015: global environment stack underflow
[  798.970990][ T5787] zeroplus 0003:0C12:0005.0015: item 0 4 1 11 parsing failed
[  798.981910][ T5787] zeroplus 0003:0C12:0005.0015: parse failed
[  798.990256][ T5787] zeroplus 0003:0C12:0005.0015: probe with driver zeroplus failed with error -22
[  799.143475][T14729] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  799.150737][ T5787] usb 6-1: USB disconnect, device number 26
[  799.180839][T15997] usb 2-1: USB disconnect, device number 59
[  799.294873][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x2
[  799.304004][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x3
[  799.311514][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x1
[  799.322219][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x2
[  799.330537][T14729] usb 4-1: Using ep0 maxpacket: 8
[  799.339293][T14729] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  799.348558][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x0
[  799.356625][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x0
[  799.364699][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x0
[  799.373771][T14729] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30
[  799.387987][T15991] holtek_mouse 0003:04D9:A04A.0016: unknown main item tag 0x0
[  799.395551][T14729] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  799.413984][T15991] holtek_mouse 0003:04D9:A04A.0016: item fetching failed at offset 36/40
[  799.423082][T15991] holtek_mouse 0003:04D9:A04A.0016: hid parse failed: -22
[  799.435461][T14729] usb 4-1: config 0 interface 0 has no altsetting 0
[  799.442106][T14729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.450733][T15991] holtek_mouse 0003:04D9:A04A.0016: probe with driver holtek_mouse failed with error -22
[  799.466346][T14729] usb 4-1: config 0 descriptor??
[  799.557295][ T5787] usb 8-1: USB disconnect, device number 63
[  799.901619][T14729] logitech 0003:046D:C623.0017: unknown main item tag 0x0
[  799.927342][T14729] logitech 0003:046D:C623.0017: hidraw0: USB HID v0.01 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0
[  800.022171][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'.
[  800.168214][ T5787] usb 4-1: USB disconnect, device number 108
[  800.250748][T17122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  800.320057][T17122] kvm: pic: non byte read
[  800.346195][T17122] kvm: pic: level sensitive irq not supported
[  800.346374][T17122] kvm: pic: non byte read
[  800.375171][T17122] kvm: pic: level sensitive irq not supported
[  800.375275][T17122] kvm: pic: non byte read
[  800.396524][T17122] kvm: pic: level sensitive irq not supported
[  800.396584][T17122] kvm: pic: non byte read
[  801.462646][   T30] audit: type=1400 audit(1787020896.552:1201): avc:  denied  { ioctl } for  pid=17140 comm="syz.5.2932" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  801.550340][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2931'.
[  801.688494][T17150] SELinux: failed to load policy
[  803.101393][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  803.108353][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  803.494677][T16398] Bluetooth: hci2: command 0x0406 tx timeout
[  803.494809][T17132] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  803.625528][T17132] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  803.634542][T17132] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  803.644541][T17132] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  803.688783][T17132] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  803.698437][T17132] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  803.720832][T17132] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  803.748031][T17166] lo speed is unknown, defaulting to 1000
[  803.976926][ T5787] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  804.146311][T15997] usb 8-1: new low-speed USB device number 64 using dummy_hcd
[  804.153204][ T5787] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  804.177173][ T5787] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  804.193151][ T5787] usb 4-1: config 0 interface 0 has no altsetting 0
[  804.201632][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.217477][ T5787] usb 4-1: config 0 descriptor??
[  804.315496][T15997] usb 8-1: unable to get BOS descriptor or descriptor too short
[  804.324369][T15997] usb 8-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40
[  804.343523][T15997] usb 8-1: config 1 has an invalid interface number: 178 but max is 2
[  804.355890][T15997] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  804.378747][T15997] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  804.395934][T15997] usb 8-1: config 1 has no interface number 0
[  804.407726][T15997] usb 8-1: too many endpoints for config 1 interface 178 altsetting 209: 153, using maximum allowed: 30
[  804.425364][T15997] usb 8-1: config 1 interface 178 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 153
[  804.447633][T15997] usb 8-1: config 1 interface 178 has no altsetting 0
[  804.459552][T15997] usb 8-1: string descriptor 0 read error: -22
[  804.472148][T15997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.485538][T15997] usb-storage 8-1:1.178: USB Mass Storage device detected
[  804.667595][ T5787] kovaplus 0003:1E7D:2D50.0018: collection stack underflow
[  804.676764][ T5787] kovaplus 0003:1E7D:2D50.0018: item 0 0 0 12 parsing failed
[  804.690618][ T5787] kovaplus 0003:1E7D:2D50.0018: parse failed
[  804.698649][ T5728] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  804.703950][T15997] usb 8-1: USB disconnect, device number 64
[  804.706333][ T5787] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -22
[  804.874954][ T5728] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  804.907812][ T5728] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  804.942944][ T5728] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  804.964972][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.982729][T15997] usb 4-1: USB disconnect, device number 109
[  805.393103][T15997] usb 7-1: USB disconnect, device number 65
[  805.478370][T17206] zram0: detected capacity change from 1960 to 0
[  805.573515][ T4915] Bluetooth: hci3: command 0x0c1a tx timeout
[  805.663246][ T4915] Bluetooth: hci4: command 0x0405 tx timeout
[  805.734007][T17211] Bluetooth: hci5: command 0x0c1a tx timeout
[  805.755708][   T30] audit: type=1400 audit(1787020900.852:1202): avc:  denied  { ioctl } for  pid=17212 comm="syz.6.2957" path="socket:[54353]" dev="sockfs" ino=54353 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  806.295014][T17211] Bluetooth: hci1: command 0x1003 tx timeout
[  806.309291][T16398] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  806.404000][T15997] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  806.584017][T15997] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  806.609993][T17236] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17237] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17236]
[  806.631140][T15997] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  806.652231][T15997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  806.675860][T15997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  806.698589][T15997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  806.733812][T15997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.789132][T15997] usb 2-1: config 0 descriptor??
[  806.817590][T17220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  806.915308][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2968'.
[  806.930744][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  806.940403][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  806.970824][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  806.980484][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  806.998186][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.007866][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.018308][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.027948][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.038681][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.049143][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.082304][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.092816][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.106883][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.117392][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.127160][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.134282][T15991] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  807.137615][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.153329][T17240] ldm_validate_partition_table(): Disk read failed.
[  807.166527][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.176221][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.186882][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  807.196561][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  807.208124][T17240] Dev loop0: unable to read RDB block 0
[  807.214096][ T5787] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[  807.231054][T17240]  loop0: unable to read partition table
[  807.239633][T17240] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  807.270792][T15997] usbhid 2-1:0.0: can't add hid device: -71
[  807.287537][T15997] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  807.301429][ T4964] ldm_validate_partition_table(): Disk read failed.
[  807.303891][T15997] usb 2-1: USB disconnect, device number 60
[  807.335808][T15991] usb 6-1: Using ep0 maxpacket: 32
[  807.342657][T15991] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  807.352875][ T4964] Dev loop0: unable to read RDB block 0
[  807.356999][T15991] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  807.369027][T15991] usb 6-1: config 0 has no interface number 0
[  807.376241][T15991] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  807.380463][ T4964]  loop0: unable to read partition table
[  807.386655][T15991] usb 6-1: config 0 interface 196 has no altsetting 0
[  807.393048][T15991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.424075][ T5787] usb 8-1: Using ep0 maxpacket: 16
[  807.429260][T15991] usb 6-1: Product: syz
[  807.429281][T15991] usb 6-1: Manufacturer: syz
[  807.429297][T15991] usb 6-1: SerialNumber: syz
[  807.431456][T15991] usb 6-1: config 0 descriptor??
[  807.450781][T17243] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  807.460550][ T5787] usb 8-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40
[  807.501586][ T5787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.518751][ T5787] usb 8-1: Product: У
[  807.530380][ T5787] usb 8-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴
[  807.657988][ T5787] usb 8-1: SerialNumber: H
[  807.733428][T16398] Bluetooth: hci4: command 0x0405 tx timeout
[  807.776800][   T30] audit: type=1400 audit(1787020902.872:1203): avc:  denied  { setopt } for  pid=17255 comm="syz.6.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  807.814414][T16398] Bluetooth: hci5: command 0x0c1a tx timeout
[  807.895951][ T5787] gspca_main: ov519-2.14.0 probing 041e:4064
[  808.001366][ T5787] ov519 8-1:1.0: reg_w 5a failed -71
[  808.693740][T15991] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[  808.827565][T17244] vhci_hcd vhci_hcd.0: remove, state 4
[  808.876778][T15991] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  808.896336][T17244] usb usb34: USB disconnect, device number 1
[  808.946426][T17262] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  809.698781][   T30] audit: type=1400 audit(1787020904.792:1204): avc:  denied  { append } for  pid=17279 comm="syz.3.2979" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  809.756812][T17282] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  809.897043][T16398] Bluetooth: hci5: command 0x0c1a tx timeout
[  809.966197][T14729] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  809.986774][T17287] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  810.017093][T17287] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  810.032457][T16823] vhci_hcd vhci_hcd.0: stop threads
[  810.038279][T17287] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  810.048890][T17287] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  810.060608][T16823] vhci_hcd vhci_hcd.0: release socket
[  810.073761][T16823] vhci_hcd vhci_hcd.0: disconnect device
[  810.088591][T17244] vhci_hcd vhci_hcd.0: USB bus 34 deregistered
[  810.096052][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.101254][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.106616][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.112250][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.117432][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.155262][T14729] usb 2-1: Using ep0 maxpacket: 32
[  810.159530][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.166704][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.172489][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.178635][T14729] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  810.179584][T14729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.195706][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.230983][   T30] audit: type=1400 audit(1787020905.322:1205): avc:  denied  { write } for  pid=17269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  810.254417][T14729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.254464][T14729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.282635][T14729] usb 2-1: config 0 descriptor??
[  810.283921][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.297925][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.308482][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.316563][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.322626][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.340250][T14729] hub 2-1:0.0: USB hub found
[  810.349345][T14341] usb 6-1: USB disconnect, device number 27
[  810.381670][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.396986][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.421529][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.430608][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.460681][T16824] vhci_hcd vhci_hcd.0: stop threads
[  810.488481][T16824] vhci_hcd vhci_hcd.0: release socket
[  810.512029][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  810.545608][T14729] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  810.587635][   T30] audit: type=1400 audit(1787020905.682:1206): avc:  denied  { write } for  pid=17297 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  810.615826][T17244] vhci_hcd vhci_hcd.0: remove, state 4
[  810.633851][T17244] usb usb33: USB disconnect, device number 1
[  810.684105][T14341] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  811.012462][T14729] hid_parser_main: 36 callbacks suppressed
[  811.012482][T14729] hid-generic 0003:046D:C31C.0019: unknown main item tag 0x0
[  811.319911][T14729] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  811.332408][T17244] vhci_hcd vhci_hcd.0: USB bus 33 deregistered
[  811.339754][T16824] vhci_hcd vhci_hcd.0: stop threads
[  811.345606][T16824] vhci_hcd vhci_hcd.0: release socket
[  811.377777][T16824] vhci_hcd vhci_hcd.0: disconnect device
[  811.405339][T16824] vhci_hcd vhci_hcd.0: stop threads
[  811.432324][T16824] vhci_hcd vhci_hcd.0: release socket
[  811.457629][T16824] ==================================================================
[  811.465714][T16824] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456
[  811.474144][T16824] Read of size 4 at addr ffff88802aed86a0 by task kworker/u8:57/16824
[  811.482303][T16824] 
[  811.484630][T16824] CPU: 0 UID: 0 PID: 16824 Comm: kworker/u8:57 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  811.484657][T16824] Tainted: [L]=SOFTLOCKUP
[  811.484664][T16824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  811.484677][T16824] Workqueue: usbip_event event_handler
[  811.484698][T16824] Call Trace:
[  811.484705][T16824]  <TASK>
[  811.484712][T16824]  dump_stack_lvl+0x100/0x190
[  811.484735][T16824]  print_report+0x13d/0x4b0
[  811.484761][T16824]  ? __virt_addr_valid+0x239/0x430
[  811.484784][T16824]  ? vhci_cleanup_unlink_list+0x44/0x456
[  811.484810][T16824]  kasan_report+0xdf/0x1c0
[  811.484835][T16824]  ? vhci_cleanup_unlink_list+0x44/0x456
[  811.484863][T16824]  vhci_cleanup_unlink_list+0x44/0x456
[  811.484892][T16824]  vhci_shutdown_connection.cold+0x165/0x37c
[  811.484921][T16824]  event_handler+0x216/0x570
[  811.484940][T16824]  process_one_work+0xa23/0x1940
[  811.484964][T16824]  ? __pfx_process_one_work+0x10/0x10
[  811.484986][T16824]  ? __pfx_event_handler+0x10/0x10
[  811.485005][T16824]  worker_thread+0x5ef/0xe50
[  811.485029][T16824]  ? kthread+0x13a/0x450
[  811.485045][T16824]  ? __pfx_worker_thread+0x10/0x10
[  811.485063][T16824]  kthread+0x370/0x450
[  811.485079][T16824]  ? __pfx_kthread+0x10/0x10
[  811.485097][T16824]  ret_from_fork+0x72b/0xd50
[  811.485123][T16824]  ? __pfx_ret_from_fork+0x10/0x10
[  811.485147][T16824]  ? __switch_to+0x800/0x10f0
[  811.485182][T16824]  ? __pfx_kthread+0x10/0x10
[  811.485200][T16824]  ret_from_fork_asm+0x1a/0x30
[  811.485230][T16824]  </TASK>
[  811.485237][T16824] 
[  811.634699][T16824] Allocated by task 1:
[  811.638753][T16824]  kasan_save_stack+0x30/0x50
[  811.643428][T16824]  kasan_save_track+0x14/0x30
[  811.648093][T16824]  __kasan_kmalloc+0xaa/0xb0
[  811.652687][T16824]  __kmalloc_noprof+0x322/0x820
[  811.657528][T16824]  __usb_create_hcd+0x5e/0xac0
[  811.662290][T16824]  vhci_hcd_probe+0xf3/0x4e0
[  811.666878][T16824]  platform_probe+0x106/0x1d0
[  811.671548][T16824]  really_probe+0x241/0xa60
[  811.676056][T16824]  __driver_probe_device+0x20e/0x450
[  811.681315][T16824]  driver_probe_device+0x4a/0x140
[  811.686404][T16824]  __device_attach_driver+0x1df/0x320
[  811.691753][T16824]  bus_for_each_drv+0x159/0x1e0
[  811.696573][T16824]  __device_attach+0x1e4/0x4d0
[  811.701308][T16824]  device_initial_probe+0xaf/0xd0
[  811.706301][T16824]  bus_probe_device+0x64/0x160
[  811.711036][T16824]  device_add+0x121d/0x1970
[  811.715511][T16824]  platform_device_add+0x35a/0x800
[  811.720590][T16824]  platform_device_register_full+0x5cf/0x830
[  811.726546][T16824]  vhci_hcd_init+0x1a1/0x2f0
[  811.731111][T16824]  do_one_initcall+0x11d/0x700
[  811.735855][T16824]  kernel_init_freeable+0x6ea/0x7b0
[  811.741028][T16824]  kernel_init+0x1f/0x1e0
[  811.745329][T16824]  ret_from_fork+0x72b/0xd50
[  811.749892][T16824]  ret_from_fork_asm+0x1a/0x30
[  811.754626][T16824] 
[  811.756927][T16824] Freed by task 17244:
[  811.760960][T16824]  kasan_save_stack+0x30/0x50
[  811.765609][T16824]  kasan_save_track+0x14/0x30
[  811.770255][T16824]  kasan_save_free_info+0x3b/0x70
[  811.775250][T16824]  __kasan_slab_free+0x5f/0x80
[  811.779995][T16824]  kfree+0x22b/0x6c0
[  811.783872][T16824]  usb_put_hcd+0x149/0x1f0
[  811.788266][T16824]  vhci_hcd_remove+0x107/0x1b0
[  811.793007][T16824]  platform_remove+0x5f/0x80
[  811.797574][T16824]  device_remove+0xcb/0x180
[  811.802055][T16824]  device_release_driver_internal+0x44e/0x620
[  811.808097][T16824]  unbind_store+0xf8/0x110
[  811.812482][T16824]  drv_attr_store+0x74/0xb0
[  811.816967][T16824]  sysfs_kf_write+0xf2/0x150
[  811.821526][T16824]  kernfs_fop_write_iter+0x3e0/0x5f0
[  811.826788][T16824]  vfs_write+0x6ac/0x1050
[  811.831084][T16824]  ksys_write+0x12a/0x250
[  811.835380][T16824]  do_syscall_64+0x115/0x870
[  811.839938][T16824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.845798][T16824] 
[  811.848098][T16824] Last potentially related work creation:
[  811.853778][T16824]  kasan_save_stack+0x30/0x50
[  811.858427][T16824]  kasan_record_aux_stack+0xa7/0xc0
[  811.863608][T16824]  insert_work+0x36/0x230
[  811.867922][T16824]  __queue_work+0x9bc/0x12b0
[  811.872486][T16824]  queue_work_on+0x1a9/0x1e0
[  811.877051][T16824]  usb_hcd_giveback_urb+0x330/0x4a0
[  811.882228][T16824]  unlink1+0x418/0x510
[  811.886269][T16824]  usb_hcd_unlink_urb+0x131/0x210
[  811.891266][T16824]  usb_kill_urb+0x121/0x320
[  811.895734][T16824]  hub_quiesce+0x1e9/0x320
[  811.900119][T16824]  hub_suspend+0x4ab/0x9e0
[  811.904510][T16824]  usb_suspend_both+0x288/0x950
[  811.909332][T16824]  usb_runtime_suspend+0x49/0x120
[  811.914339][T16824]  __rpm_callback+0xc8/0x620
[  811.918900][T16824]  rpm_callback+0x16a/0x1b0
[  811.923375][T16824]  rpm_suspend+0x2f4/0x11a0
[  811.927854][T16824]  __pm_runtime_suspend+0xba/0x1a0
[  811.932934][T16824]  usb_new_device.part.0+0x1653/0x1686
[  811.938370][T16824]  register_root_hub+0x4e6/0x639
[  811.943292][T16824]  usb_add_hcd.cold+0xccd/0x1158
[  811.948214][T16824]  vhci_hcd_probe+0x14b/0x4e0
[  811.952880][T16824]  platform_probe+0x106/0x1d0
[  811.957530][T16824]  really_probe+0x241/0xa60
[  811.962010][T16824]  __driver_probe_device+0x20e/0x450
[  811.967278][T16824]  driver_probe_device+0x4a/0x140
[  811.972295][T16824]  __device_attach_driver+0x1df/0x320
[  811.977652][T16824]  bus_for_each_drv+0x159/0x1e0
[  811.982483][T16824]  __device_attach+0x1e4/0x4d0
[  811.987229][T16824]  device_initial_probe+0xaf/0xd0
[  811.992225][T16824]  bus_probe_device+0x64/0x160
[  811.996957][T16824]  device_add+0x121d/0x1970
[  812.001433][T16824]  platform_device_add+0x35a/0x800
[  812.006512][T16824]  platform_device_register_full+0x5cf/0x830
[  812.012469][T16824]  vhci_hcd_init+0x1a1/0x2f0
[  812.017037][T16824]  do_one_initcall+0x11d/0x700
[  812.021781][T16824]  kernel_init_freeable+0x6ea/0x7b0
[  812.026949][T16824]  kernel_init+0x1f/0x1e0
[  812.031263][T16824]  ret_from_fork+0x72b/0xd50
[  812.035828][T16824]  ret_from_fork_asm+0x1a/0x30
[  812.040573][T16824] 
[  812.042867][T16824] Second to last potentially related work creation:
[  812.049421][T16824]  kasan_save_stack+0x30/0x50
[  812.054069][T16824]  kasan_record_aux_stack+0xa7/0xc0
[  812.059248][T16824]  insert_work+0x36/0x230
[  812.063557][T16824]  __queue_work+0x9bc/0x12b0
[  812.068148][T16824]  queue_work_on+0x1a9/0x1e0
[  812.072733][T16824]  usb_hcd_giveback_urb+0x3b8/0x4a0
[  812.077911][T16824]  usb_hcd_submit_urb+0xab7/0x2150
[  812.083001][T16824]  usb_submit_urb+0x827/0x19b0
[  812.087735][T16824]  usb_start_wait_urb+0x10e/0x580
[  812.092735][T16824]  usb_control_msg+0x328/0x4b0
[  812.097479][T16824]  hub_ext_port_status+0x152/0x600
[  812.102558][T16824]  hub_activate+0x6e5/0x1c40
[  812.107117][T16824]  process_one_work+0xa23/0x1940
[  812.112023][T16824]  worker_thread+0x5ef/0xe50
[  812.116582][T16824]  kthread+0x370/0x450
[  812.120621][T16824]  ret_from_fork+0x72b/0xd50
[  812.125181][T16824]  ret_from_fork_asm+0x1a/0x30
[  812.129918][T16824] 
[  812.132212][T16824] The buggy address belongs to the object at ffff88802aed8000
[  812.132212][T16824]  which belongs to the cache kmalloc-8k of size 8192
[  812.146238][T16824] The buggy address is located 1696 bytes inside of
[  812.146238][T16824]  freed 8192-byte region [ffff88802aed8000, ffff88802aeda000)
[  812.160173][T16824] 
[  812.162469][T16824] The buggy address belongs to the physical page:
[  812.168854][T16824] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aed8
[  812.177591][T16824] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  812.186056][T16824] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  812.193566][T16824] page_type: f5(slab)
[  812.197527][T16824] raw: 00fff00000000040 ffff88801c023280 dead000000000122 0000000000000000
[  812.206078][T16824] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  812.214630][T16824] head: 00fff00000000040 ffff88801c023280 dead000000000122 0000000000000000
[  812.223267][T16824] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  812.231906][T16824] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  812.240545][T16824] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  812.249178][T16824] page dumped because: kasan: bad access detected
[  812.255577][T16824] page_owner tracks the page as allocated
[  812.261270][T16824] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5769958274, free_ts 5684826237
[  812.281656][T16824]  post_alloc_hook+0xfd/0x120
[  812.286314][T16824]  get_page_from_freelist+0xf48/0x3530
[  812.291745][T16824]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  812.297607][T16824]  new_slab+0xa2/0x640
[  812.301655][T16824]  refill_objects+0xe3/0x410
[  812.306274][T16824]  __pcs_replace_empty_main+0x376/0x680
[  812.311834][T16824]  __kmalloc_cache_noprof+0x479/0x6c0
[  812.317188][T16824]  dummy_hcd_init+0x3ce/0xc00
[  812.321845][T16824]  do_one_initcall+0x11d/0x700
[  812.326593][T16824]  kernel_init_freeable+0x6ea/0x7b0
[  812.331765][T16824]  kernel_init+0x1f/0x1e0
[  812.336068][T16824]  ret_from_fork+0x72b/0xd50
[  812.340632][T16824]  ret_from_fork_asm+0x1a/0x30
[  812.345368][T16824] page last free pid 9 tgid 9 stack trace:
[  812.351140][T16824]  free_pages_prepare+0x586/0xd80
[  812.356142][T16824]  __free_contig_range_common+0x14f/0x250
[  812.361841][T16824]  free_pages_bulk+0x12a/0x200
[  812.366573][T16824]  vm_area_free_pages+0xad/0x2b0
[  812.371494][T16824]  vfree+0x107/0x750
[  812.375361][T16824]  delayed_vfree_work+0x56/0x80
[  812.380195][T16824]  process_one_work+0xa23/0x1940
[  812.385100][T16824]  worker_thread+0x5ef/0xe50
[  812.389663][T16824]  kthread+0x370/0x450
[  812.393702][T16824]  ret_from_fork+0x72b/0xd50
[  812.398266][T16824]  ret_from_fork_asm+0x1a/0x30
[  812.403010][T16824] 
[  812.405304][T16824] Memory state around the buggy address:
[  812.410898][T16824]  ffff88802aed8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  812.418937][T16824]  ffff88802aed8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  812.426977][T16824] >ffff88802aed8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  812.435018][T16824]                                ^
[  812.440099][T16824]  ffff88802aed8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  812.448127][T16824]  ffff88802aed8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  812.456168][T16824] ==================================================================
[  812.489453][T14729] usb 2-1: USB disconnect, device number 61
[  812.532467][T16398] Bluetooth: hci2: command 0x0406 tx timeout
[  812.538591][T17211] Bluetooth: hci5: command 0x0c1a tx timeout
[  812.538648][T17211] Bluetooth: hci4: command 0x0405 tx timeout
[  812.538684][T17211] Bluetooth: hci3: command 0x0c1a tx timeout
[  812.570149][   T30] audit: type=1400 audit(1787020907.652:1207): avc:  denied  { read } for  pid=4946 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  812.577267][T16824] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  812.577289][T16824] CPU: 0 UID: 0 PID: 16824 Comm: kworker/u8:57 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  812.577313][T16824] Tainted: [L]=SOFTLOCKUP
[  812.577319][T16824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  812.577330][T16824] Workqueue: usbip_event event_handler
[  812.577352][T16824] Call Trace:
[  812.577357][T16824]  <TASK>
[  812.577364][T16824]  dump_stack_lvl+0x100/0x190
[  812.577386][T16824]  vpanic+0x552/0x970
[  812.577401][T16824]  ? __pfx_vpanic+0x10/0x10
[  812.577418][T16824]  ? vhci_cleanup_unlink_list+0x44/0x456
[  812.577441][T16824]  panic+0xd1/0xe0
[  812.577455][T16824]  ? __pfx_panic+0x10/0x10
[  812.577470][T16824]  ? vhci_cleanup_unlink_list+0x44/0x456
[  812.577492][T16824]  ? preempt_schedule_common+0x42/0xc0
[  812.577511][T16824]  ? check_panic_on_warn+0x1f/0x90
[  812.577529][T16824]  check_panic_on_warn.cold+0x19/0x34
[  812.577545][T16824]  end_report.part.0+0x3a/0x90
[  812.577566][T16824]  kasan_report.cold+0xe/0x18
[  812.577588][T16824]  ? vhci_cleanup_unlink_list+0x44/0x456
[  812.577612][T16824]  vhci_cleanup_unlink_list+0x44/0x456
[  812.577637][T16824]  vhci_shutdown_connection.cold+0x165/0x37c
[  812.577661][T16824]  event_handler+0x216/0x570
[  812.577678][T16824]  process_one_work+0xa23/0x1940
[  812.577700][T16824]  ? __pfx_process_one_work+0x10/0x10
[  812.577719][T16824]  ? __pfx_event_handler+0x10/0x10
[  812.577736][T16824]  worker_thread+0x5ef/0xe50
[  812.577756][T16824]  ? kthread+0x13a/0x450
[  812.577771][T16824]  ? __pfx_worker_thread+0x10/0x10
[  812.577787][T16824]  kthread+0x370/0x450
[  812.577801][T16824]  ? __pfx_kthread+0x10/0x10
[  812.577816][T16824]  ret_from_fork+0x72b/0xd50
[  812.577838][T16824]  ? __pfx_ret_from_fork+0x10/0x10
[  812.577860][T16824]  ? __switch_to+0x800/0x10f0
[  812.577876][T16824]  ? __pfx_kthread+0x10/0x10
[  812.577892][T16824]  ret_from_fork_asm+0x1a/0x30
[  812.577918][T16824]  </TASK>
[  812.592326][T16824] Kernel Offset: disabled