last executing test programs:

10m37.131384765s ago: executing program 4 (id=1774):
r0 = syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x40c01)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001580)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f00000015c0)={0x51024080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x34}, &(0x7f0000000140)=""/241, 0xf1, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=[0xffffffffffffffff], 0x1, {r1}}, 0x58)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48)
unshare(0x20000400)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f00000004c0), &(0x7f00000005c0)=@tcp}, 0x20)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='`', 0x1}, {&(0x7f0000002240)="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", 0x1000}], 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73})
syz_usb_control_io(r6, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xc, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VT_ACTIVATE(r5, 0x4b41, 0x10000000000004)
write(r4, &(0x7f0000000000)='3', 0x4e)
sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0)

10m34.221326107s ago: executing program 4 (id=1782):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0xfffffffffffffc7d)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x0)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)

10m33.153108664s ago: executing program 4 (id=1785):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r1, 0x0, 0x0}, 0x20)

10m30.468066765s ago: executing program 4 (id=1793):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000480)=ANY=[@ANYBLOB="00fbc60130a25bb7b9f8ce64c6b747b57780ba75359058bfa8be797f2d8adcadfca3ea1b3591315f4afc1dd0695bb205bc6a5937e0f047ac1ac8218598f6209324fe3f9ef6ffe83b5778d4366b7f152620ca90bc5b178217a69ba88933b28041e3f5d79dce2004052fe179a99427bfb4760f10268b63771d75c7085b3a7f62ea7cb18987a3ffce50f47e210bb7ceb8267366f5f3530221668474deba71714e699f8719076cd8b5bc48ac4458921610f779dbeaae0c6a78a5df6b2124"], 0xc6, 0x2)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07ffd7060000200000b0350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0/file0', [{0x20, 'tracefs\x00'}, {0x20, 'GPL\x00'}, {0x20, 'trusted.overlay.upper\x00'}], 0xa, "990281a346bacd73"}, 0x3e)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c01031000ffffffffdfffff"], 0xf)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getitimer(0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="286d3eff4d23a089185fafb10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
read$char_usb(r4, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)

10m25.44002032s ago: executing program 4 (id=1805):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r6)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7], 0x78}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, {0xfffffff0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030008ac0f"], 0x50}}, 0x0)

10m23.238958806s ago: executing program 4 (id=1811):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
clock_gettime(0x540fa58c1cb18eed, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

10m22.694768909s ago: executing program 32 (id=1811):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
clock_gettime(0x540fa58c1cb18eed, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

4m10.440890382s ago: executing program 0 (id=2606):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, <r5=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r5, 0x0, r4})
ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000000)={0x8, r5})
read$FUSE(r0, &(0x7f0000005a00)={0x2020}, 0x2020)

4m9.232245212s ago: executing program 0 (id=2610):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a052401"], 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x29, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca1665"}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unshare(0x10010400)

4m6.140063827s ago: executing program 0 (id=2620):
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000005c00)="27000000140007c8820e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCGISO7816(r3, 0x80285442, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x200004d0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d005f2b070f000000000000080007000000209be01401aac7b6b1bd68f96dd9b920056f3a101ec58310a4aaaeb1b8c7ad14f2e7af4329c135d354456b7fae03d3c9fdf922b2b8dcaf72c48b1991e057f1b08199a1ef1483a8e2884855e8e783e42f0127432a4f0bf57991a9ecf25f980c9963bbf0f3062ae1fb5c622af5eba99afd0c377ed9af41e9d1b5960f7a2886f671330f2ec8f1a26bb4f45c4d564ccf03c6", @ANYRES32=r6, @ANYBLOB="80007200"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd29, 0x25dfdbfe, {0x80, 0x4ea8f0c4ac4520bd, 0x0, 0xf9, 0x2, 0x7, 0xc8, 0x6, 0x200}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40480c4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x40)

4m4.556173671s ago: executing program 0 (id=2624):
r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000400)={0x0, 0xe0ee, 0x4, 0x1, 0x5e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280))
mkdirat(r0, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x1fb)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r7, 0x0)
r8 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x30000000})
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)

4m0.745621933s ago: executing program 0 (id=2634):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8000)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080))
connect(r0, &(0x7f0000000000)=@l2={0x1f, 0x7, @none, 0x7, 0x1}, 0x80)

4m0.580568861s ago: executing program 0 (id=2635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0)

3m45.356373819s ago: executing program 33 (id=2635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0)

16.954718847s ago: executing program 2 (id=3168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close(r4)
sched_setaffinity(r2, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1c02, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
getdents(r5, 0x0, 0x3b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xef}, 'port1\x00', 0xc5f2618db8c5cbfa, 0x1c0c10, 0x0, 0xffff8001, 0x3, 0x2, 0x3, 0x0, 0x5, 0x2})

15.703976604s ago: executing program 2 (id=3169):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a052401"], 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x29, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca1665"}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unshare(0x10010400)

11.176682687s ago: executing program 3 (id=3177):
socket$packet(0x11, 0x4, 0x300)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x20044040)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, 0x0)
syz_open_dev$cec(0x0, 0x0, 0xa0a02)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$mptcp(0x0, r3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]})

10.7734392s ago: executing program 6 (id=3178):
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r0, 0x0)

10.656468604s ago: executing program 3 (id=3179):
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0xc1})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x11}, @val={0x2, 0x80, 0xe46c, 0xf, 0x8001, 0xc}, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x5, [0x0, 0x9, 0x4]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x42a, 0x0, 0x3ff, 0x101, 0x1}}}}, 0x46)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50)
io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYRESHEX], 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820)
syz_usb_control_io(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000)
syz_usb_disconnect(r4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x200000000000000)

8.129378594s ago: executing program 1 (id=3182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x8800)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x40}}, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211f8420efa71cfb4f3ba1d8ee0ce3d00000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)

7.799622236s ago: executing program 3 (id=3183):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a052401"], 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x29, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca1665"}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unshare(0x10010400)

7.780637184s ago: executing program 2 (id=3184):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x58}}, 0x0)

7.572280766s ago: executing program 2 (id=3185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})

7.55814152s ago: executing program 6 (id=3186):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x4}}}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000180001092cbd7000fbdbdf25021800000000fd080001000008000400", @ANYRES32], 0x2c}}, 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r6=>0x0})
mount$cgroup2(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@favordynmods}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}, {@subsystem='cpu'}, {@memory_recursiveprot}], [{@pcr={'pcr', 0x3d, 0x35}}, {@smackfstransmute}, {@dont_measure}, {@smackfsfloor}]})
r7 = socket(0x1d, 0x2, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x28ea00c3b4872574, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r9, @ANYBLOB="080005", @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r6, 0x1, {0x0, 0xff}, 0xfd}, 0x18)
setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r12=>0x0})
setsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000000100), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r12}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5)
r13 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000000080)={0xf0f021})

7.102161837s ago: executing program 1 (id=3188):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1880000002060500000000000000000000000000040007"], 0x18}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72)

6.600850971s ago: executing program 6 (id=3189):
socket$packet(0x11, 0x4, 0x300)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x20044040)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, 0x0)
syz_open_dev$cec(0x0, 0x0, 0xa0a02)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$mptcp(0x0, r3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]})

6.597888951s ago: executing program 2 (id=3190):
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0xc1})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x11}, @val={0x2, 0x80, 0xe46c, 0xf, 0x8001, 0xc}, @mpls={[], @ipv4=@icmp={{0xc, 0x4, 0x0, 0x4, 0x44, 0x67, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x5, [0x0, 0x9, 0x4]}, @cipso={0x86, 0x9, 0x0, [{0x1, 0x3, "96"}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x42a, 0x0, 0x3ff, 0x101, 0x1}}}}, 0x52)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16080000"], 0x50)
io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYRESHEX], 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820)
syz_usb_control_io(r5, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000)
syz_usb_disconnect(r5)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x200000000000000)

6.518605678s ago: executing program 1 (id=3191):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800480000340000000000069078ac141400ac1e0001440c0a0100"/50, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000041ca74169b1edc90780000"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x40000)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100))
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r5, &(0x7f0000001300)=ANY=[@ANYBLOB="10", @ANYRES8=r5], 0x4000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x200, 0x80000, <r7=>r5})
ioctl$KIOCSOUND(r7, 0x4b2f, 0x7)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0cabad29d7ef53d96a53a52bddad1e974cd78a5debf2a750190c4226911d01ae0bc526db9f726bd50727d3756"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x82001, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r8)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0)
fallocate(r9, 0x11, 0x0, 0x74000)

6.088127884s ago: executing program 6 (id=3192):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x13, 0x20, 0xbc}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002eef56"], 0x50)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x66}, 0x28)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048885}, 0x2004c0c4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)

4.092088697s ago: executing program 3 (id=3193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x8800)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x40}}, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211f8420efa71cfb4f3ba1d8ee0ce3d00000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)

3.98728401s ago: executing program 1 (id=3195):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) (async, rerun: 32)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async, rerun: 32)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async, rerun: 32)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) (rerun: 32)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000140)=""/76)
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1a5}) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (rerun: 64)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2e, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0) (async)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltfilter={0x80, 0x2d, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xffff}, {0x9, 0xd}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x7}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6e}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x1}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x10}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x80}}, 0x4809c) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

3.205331884s ago: executing program 6 (id=3197):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xe, 0x4000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x203, 0x1, {0xfffffff9, 0x4, 0x9, 0x3}})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
getpgrp(0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0448"], 0x12)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "78a71294e5707040"}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0xd209f6d814827b17)
read(r0, &(0x7f0000002fc0)=""/52, 0x34)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000300)={0xfffffffffffffff9, 0x10, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x40d, 0x70bd2d, 0xffffffc, {0x0, 0x0, 0x0, r5, 0x70006, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x50, 0x4080}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0)

2.573658063s ago: executing program 3 (id=3199):
r0 = socket(0x1e, 0x4, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2})
connect$inet(r0, &(0x7f0000000480)={0x1e, 0x4e20, @rand_addr=0x64010102}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup(r3)
socket(0x10, 0x803, 0x0)
socket(0x28, 0x801, 0x0)
r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62c7, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x1, 0x2, 0xbd, 0x0, r10}}], 0x1, 0x0, 0x0)
io_uring_setup(0x1515, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2})
socket$inet_sctp(0x2, 0x1, 0x84)
r11 = socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r11, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20)
writev(r12, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.399766228s ago: executing program 1 (id=3200):
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0xc1})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x11}, @val={0x2, 0x80, 0xe46c, 0xf, 0x8001, 0xc}, @mpls={[], @ipv4=@icmp={{0xc, 0x4, 0x0, 0x4, 0x44, 0x67, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x5, [0x0, 0x9, 0x4]}, @cipso={0x86, 0x9, 0x0, [{0x1, 0x3, "96"}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x42a, 0x0, 0x3ff, 0x101, 0x1}}}}, 0x52)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16080000"], 0x50)
io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYRESHEX], 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820)
syz_usb_control_io(r5, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000)
syz_usb_disconnect(r5)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x200000000000000)

1.598992737s ago: executing program 5 (id=3203):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000c14050000000000000900"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e20, @local}}, 0x2000000, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x9e, 0x0, 0x8000000000000000}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141100)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x201b78, &(0x7f0000000040)={0x0, 0xa905, 0x20000, 0x4000002, 0x20000256, 0x0, r2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
io_uring_setup(0x6a72, &(0x7f0000000180)={0x0, 0xaefa, 0x1, 0x3})
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600))
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe)

1.539150055s ago: executing program 5 (id=3204):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x74e, @private2, 0x5}}, 0xfffffffc, 0x1, 0x22, 0x12, 0x11, 0xf7, 0xfd}, &(0x7f0000000080)=0x9c)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='*\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/28], 0x50)
r3 = syz_open_dev$mtd(&(0x7f0000000500), 0x0, 0x2100)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r4, &(0x7f0000000000)='7', 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setuid(0xee01)
ioctl$MEMREADOOB64(r3, 0xc0184d16, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xe3, 0x6, "2ae2ea56e580996bc28e5667996ed87689cb545a8670239565592cace1fff136cd46642e88fdf17b4ad2089271c1bb29a77203c42a35b9d787b2ddf06ca7b63239cf8d9ddbc0f03c4fb1e137b9a9ca5bf83d05db78bb001a1990dd588003c0b4d78fdcad2b599b649079dbb159bf1df4b9df6eba949bc57d7203e9e414384476d7308dbfe8b000480a0bd56c1e1a7d21614270b8e780f7f4ee562500060271e9c42c3d41f12f72206dc4747085fbafd1eaba399cd5d900c11046e4e629a21c473b3d0167470882b31dbdab12ec1a29455a7ca1a40fa518e17c20d3746c33c6"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1c4}}, 0x0)

1.332552064s ago: executing program 5 (id=3205):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0))
r1 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d2})
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1)
syz_open_dev$vbi(0x0, 0x1, 0x2)
syz_open_dev$dri(0x0, 0x1f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r1})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r1], 0x1)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x800)

1.186300182s ago: executing program 2 (id=3206):
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0xc1})
write$tun(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50)
io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYRESHEX], 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820)
syz_usb_control_io(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000)
syz_usb_disconnect(r4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x200000000000000)

695.414499ms ago: executing program 1 (id=3207):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x10024)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x44)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='tcpci 0x5', 0x9)

431.471456ms ago: executing program 5 (id=3208):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$media(0x0, 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0)
syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2)
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000440)={0x0, 0x4015, 0x10, 0x0, 0x8b}, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

429.716475ms ago: executing program 5 (id=3209):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc2500, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0})
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x40000104, 0x0, 0x0})
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xfa3, 0x0, 0x0, 0xfffff004}, {0x1, 0x1}]}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0x9, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"})
ioctl$UI_DEV_CREATE(r5, 0x5501)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)

391.040278ms ago: executing program 5 (id=3210):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x7, 0x3}, 0x10)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)

132.606414ms ago: executing program 3 (id=3211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x8800)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x40}}, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211f8420efa71cfb4f3ba1d8ee0ce3d00000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)

0s ago: executing program 6 (id=3212):
mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./sys\x00', 0x59)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f00000001c0)='esdfs\x00', 0x2981000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[], 0x20)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x4000921, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0)

kernel console output (not intermixed with test programs):

75
[ 1509.502400][T13925] dvb_ttusb_budget: ttusb_init_controller: error
[ 1509.502412][T13925] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1509.503517][T10561] usb 7-1: USB disconnect, device number 11
[ 1509.592771][T17697] netlink: 'syz.6.2867': attribute type 11 has an invalid length.
[ 1509.681165][T13925] DVB: Unable to find symbol stv0299_attach()
[ 1509.847499][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2867'.
[ 1512.149883][T13925] DVB: Unable to find symbol tda8083_attach()
[ 1512.149899][T13925] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1512.151881][T13925] usb 4-1: USB disconnect, device number 123
[ 1512.155865][T17706] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1512.194109][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2870'.
[ 1512.276856][T17708] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1512.299045][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2869'.
[ 1512.649539][T17722] xt_hashlimit: max too large, truncated to 1048576
[ 1512.649626][T17722] xt_hashlimit: overflow, try lower: 18446744073709551612/8
[ 1512.671155][T17722] btrfs: Unknown parameter 'discard�'
[ 1513.672704][T17726] jffs2: notice: (17726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1513.711140][   T31] audit: type=1400 audit(1789493633.619:2231): avc:  denied  { append } for  pid=17728 comm="syz.2.2879" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1513.822975][T17729] input: syz1 as /devices/virtual/input/input39
[ 1513.823009][T17729] input: failed to attach handler leds to device input39, error: -6
[ 1515.436550][T17740] FAULT_INJECTION: forcing a failure.
[ 1515.436550][T17740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1515.436582][T17740] CPU: 1 UID: 0 PID: 17740 Comm: syz.1.2881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1515.436607][T17740] Tainted: [L]=SOFTLOCKUP
[ 1515.436615][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1515.436626][T17740] Call Trace:
[ 1515.436633][T17740]  <TASK>
[ 1515.436642][T17740]  dump_stack_lvl+0x100/0x190
[ 1515.436674][T17740]  should_fail_ex.cold+0x5/0xa
[ 1515.436702][T17740]  _copy_from_user+0x2e/0xd0
[ 1515.436723][T17740]  copy_msghdr_from_user+0x9f/0x4c0
[ 1515.436753][T17740]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1515.436790][T17740]  ? lock_acquire+0x1d1/0x380
[ 1515.436810][T17740]  ? get_pid_task+0x2a/0x250
[ 1515.436838][T17740]  ___sys_sendmsg+0x106/0x1e0
[ 1515.436869][T17740]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1515.436897][T17740]  ? get_pid_task+0x106/0x250
[ 1515.436934][T17740]  ? find_held_lock+0x2b/0x80
[ 1515.436979][T17740]  __sys_sendmsg+0x160/0x210
[ 1515.437004][T17740]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1515.437041][T17740]  do_syscall_64+0x123/0x790
[ 1515.437070][T17740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.437091][T17740] RIP: 0033:0x7f7abab9e159
[ 1515.437108][T17740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1515.437125][T17740] RSP: 002b:00007f7abbb40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1515.437144][T17740] RAX: ffffffffffffffda RBX: 00007f7abae25fa0 RCX: 00007f7abab9e159
[ 1515.437158][T17740] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1515.437171][T17740] RBP: 00007f7abbb40090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.437183][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1515.437195][T17740] R13: 00007f7abae26038 R14: 00007f7abae25fa0 R15: 00007fff75f80838
[ 1515.437225][T17740]  </TASK>
[ 1515.761216][T17746] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1515.763644][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'.
[ 1515.830699][T17748] FAULT_INJECTION: forcing a failure.
[ 1515.830699][T17748] name failslab, interval 1, probability 0, space 0, times 0
[ 1515.830736][T17748] CPU: 0 UID: 0 PID: 17748 Comm: syz.2.2883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1515.830766][T17748] Tainted: [L]=SOFTLOCKUP
[ 1515.830774][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1515.830787][T17748] Call Trace:
[ 1515.830794][T17748]  <TASK>
[ 1515.830803][T17748]  dump_stack_lvl+0x100/0x190
[ 1515.830841][T17748]  should_fail_ex.cold+0x5/0xa
[ 1515.830870][T17748]  should_failslab+0xc2/0x120
[ 1515.830895][T17748]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1515.830918][T17748]  ? __kernfs_new_node+0xd2/0xa10
[ 1515.830952][T17748]  __kernfs_new_node+0xd2/0xa10
[ 1515.830988][T17748]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1515.831021][T17748]  ? lock_acquire+0x1d1/0x380
[ 1515.831044][T17748]  ? kernfs_root+0x23/0x2a0
[ 1515.831080][T17748]  ? find_held_lock+0x2b/0x80
[ 1515.831110][T17748]  ? kernfs_root+0xee/0x2a0
[ 1515.831136][T17748]  ? kernfs_root+0xee/0x2a0
[ 1515.831170][T17748]  kernfs_new_node+0x117/0x150
[ 1515.831207][T17748]  kernfs_create_link+0xcc/0x240
[ 1515.831234][T17748]  sysfs_do_create_link_sd+0x90/0x140
[ 1515.831264][T17748]  sysfs_create_link+0x61/0xc0
[ 1515.831291][T17748]  driver_sysfs_add+0x112/0x2d0
[ 1515.831317][T17748]  really_probe+0x146/0xa60
[ 1515.831344][T17748]  __driver_probe_device+0x210/0x460
[ 1515.831368][T17748]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1515.831398][T17748]  driver_probe_device+0x4a/0x140
[ 1515.831423][T17748]  __driver_attach+0x21f/0x5b0
[ 1515.831447][T17748]  ? __pfx___driver_attach+0x10/0x10
[ 1515.831470][T17748]  bus_for_each_dev+0x13e/0x1d0
[ 1515.831501][T17748]  ? __pfx_bus_for_each_dev+0x10/0x10
[ 1515.831530][T17748]  ? bus_add_driver+0x2b5/0x5b0
[ 1515.831559][T17748]  bus_add_driver+0x305/0x5b0
[ 1515.831583][T17748]  driver_register+0x1e2/0x360
[ 1515.831606][T17748]  ? rcu_is_watching+0x13/0xc0
[ 1515.831632][T17748]  usb_gadget_register_driver_owner+0x132/0x210
[ 1515.831657][T17748]  raw_ioctl+0x1a85/0x2b80
[ 1515.831683][T17748]  ? __pfx_raw_ioctl+0x10/0x10
[ 1515.831704][T17748]  ? selinux_file_ioctl+0x13b/0x290
[ 1515.831727][T17748]  ? selinux_file_ioctl+0xb6/0x290
[ 1515.831752][T17748]  ? __pfx_raw_ioctl+0x10/0x10
[ 1515.831773][T17748]  __x64_sys_ioctl+0x18e/0x210
[ 1515.831799][T17748]  do_syscall_64+0x123/0x790
[ 1515.831829][T17748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.831851][T17748] RIP: 0033:0x7f106c39ddeb
[ 1515.831869][T17748] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1515.831887][T17748] RSP: 002b:00007f106d263f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1515.831907][T17748] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f106c39ddeb
[ 1515.831920][T17748] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 1515.831931][T17748] RBP: 00007f106d264fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 1515.831944][T17748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1515.831956][T17748] R13: 0000200000000600 R14: 0000000000000000 R15: 0000000000000000
[ 1515.831985][T17748]  </TASK>
[ 1515.842369][T17750] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1515.855295][T17748] raw-gadget.0 gadget.2: really_probe: driver_sysfs_add failed
[ 1515.855850][T17748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1515.856532][T17748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.090528][T16452] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1516.256814][T16452] usb 2-1: Using ep0 maxpacket: 8
[ 1516.257482][T16452] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1516.258379][T16452] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1516.258414][T16452] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1516.258449][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1516.258484][T16452] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1516.258511][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1516.258538][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1516.258565][T16452] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1516.258593][T16452] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1516.259545][T16452] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1516.259576][T16452] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1516.259611][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1516.259639][T16452] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1516.259665][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1516.259692][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1516.259716][T16452] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1516.259740][T16452] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1516.260721][T16452] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1516.260752][T16452] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1516.260787][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1516.260816][T16452] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1516.260842][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1516.260869][T16452] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1516.260895][T16452] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1516.260921][T16452] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1516.263446][T16452] usb 2-1: string descriptor 0 read error: -22
[ 1516.263565][T16452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.579907][T16452] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1518.078124][T16452] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1518.257979][T16452] usb 7-1: Using ep0 maxpacket: 32
[ 1518.262410][T16452] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1518.296119][T16452] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1518.296152][T16452] usb 7-1: config 0 has no interface number 0
[ 1518.325367][T16452] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.325746][T16452] usb 7-1: Product: syz
[ 1518.325823][T16452] usb 7-1: Manufacturer: syz
[ 1518.325979][T16452] usb 7-1: SerialNumber: syz
[ 1518.402898][T16452] usb 7-1: config 0 descriptor??
[ 1518.934283][T13322] usb 2-1: USB disconnect, device number 100
[ 1519.045999][   T31] audit: type=1400 audit(1789493638.949:2232): avc:  denied  { connect } for  pid=17774 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1519.069819][   T31] audit: type=1400 audit(1789493638.969:2233): avc:  denied  { connect } for  pid=17774 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1519.069886][   T31] audit: type=1400 audit(1789493638.969:2234): avc:  denied  { read } for  pid=17774 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1519.115920][T16452] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[ 1519.115951][T16452] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1519.447224][T13322] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1519.525491][T16452] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1519.525696][T16452] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1519.553991][T16452] usb 7-1: USB disconnect, device number 12
[ 1519.598277][T13322] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1519.599138][T13322] usb 2-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1519.599162][T13322] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1519.599194][T13322] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1519.600929][T13322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.600952][T13322] usb 2-1: Product: syz
[ 1519.600968][T13322] usb 2-1: Manufacturer: syz
[ 1519.600984][T13322] usb 2-1: SerialNumber: syz
[ 1519.862493][T17801] jffs2: notice: (17801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1519.877616][   T31] audit: type=1400 audit(1789493639.769:2235): avc:  denied  { write } for  pid=17785 comm="syz.1.2899" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1520.028896][T10561] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1520.178065][T10561] usb 4-1: Using ep0 maxpacket: 8
[ 1520.201807][T10561] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1520.262921][T10561] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1520.262952][T10561] usb 4-1: config 0 has no interface number 0
[ 1520.371399][T10561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.371428][T10561] usb 4-1: Product: syz
[ 1520.371443][T10561] usb 4-1: Manufacturer: syz
[ 1520.371457][T10561] usb 4-1: SerialNumber: syz
[ 1520.559002][T13761] usb 3-1: new low-speed USB device number 124 using dummy_hcd
[ 1520.725065][T13761] usb 3-1: Invalid ep0 maxpacket: 64
[ 1520.794274][T10561] usb 4-1: config 0 descriptor??
[ 1520.889775][T13761] usb 3-1: new low-speed USB device number 125 using dummy_hcd
[ 1521.037726][T13761] usb 3-1: Invalid ep0 maxpacket: 64
[ 1521.039710][T13761] usb usb3-port1: attempt power cycle
[ 1521.149863][T17800] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16)
[ 1521.389032][T13761] usb 3-1: new low-speed USB device number 126 using dummy_hcd
[ 1521.410541][T13761] usb 3-1: Invalid ep0 maxpacket: 64
[ 1521.547535][T13761] usb 3-1: new low-speed USB device number 127 using dummy_hcd
[ 1521.582213][T13761] usb 3-1: Invalid ep0 maxpacket: 64
[ 1521.582705][T13761] usb usb3-port1: unable to enumerate USB device
[ 1521.732164][T10561] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1521.732231][T10561] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized!
[ 1521.935377][T10561] usb 4-1: USB disconnect, device number 124
[ 1522.093102][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093117][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093192][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093198][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093267][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093274][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093344][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093351][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093429][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093436][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093511][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093518][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093594][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093601][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093676][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093684][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093757][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093764][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093845][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093852][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.093923][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.093931][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.094004][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.094012][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.094086][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.094093][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.094165][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.094173][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.094244][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.094251][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.094327][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.094334][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.096137][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.096147][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.096222][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.096230][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.096304][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.096311][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.096386][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.096394][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100243][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100252][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100337][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100344][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100415][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100423][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100493][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100500][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100572][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100578][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100648][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100656][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100726][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100733][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100804][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100816][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100889][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100896][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.100966][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.100973][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.101043][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.101050][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.101121][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1522.101129][T17824] binder: 17823:17824 ioctl 4018620d 200000000100 returned -16
[ 1522.466637][T13322] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22
[ 1522.603974][T13322] usb 2-1: USB disconnect, device number 101
[ 1523.088399][T13322] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1523.256786][T13322] usb 2-1: Using ep0 maxpacket: 16
[ 1523.272353][T13322] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1523.295670][T13322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1523.295814][T13322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.386888][T13322] usb 2-1: config 0 descriptor??
[ 1523.668270][T17824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1523.668283][T17824] binder: 17823:17824 ioctl 4018620d 200000004a80 returned -16
[ 1523.682742][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683079][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683167][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683251][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683337][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683420][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683503][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683585][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683679][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683762][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683844][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.683929][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684024][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684342][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684438][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684523][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684609][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684698][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684791][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.684873][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1523.796167][T17827] binder: 17823:17827 ioctl c0306201 200000000080 returned -14
[ 1525.068373][T10550] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 1525.589013][   T31] audit: type=1400 audit(1789493644.990:2236): avc:  denied  { write } for  pid=17849 comm="syz.2.2918" name="c.1" dev="configfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1525.727116][T17856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1525.748598][T13322] usbhid 2-1:0.0: can't add hid device: -71
[ 1525.748693][T13322] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1525.752821][T13322] usb 2-1: USB disconnect, device number 102
[ 1525.800831][T10550] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1525.800866][T10550] usb 4-1: no configurations
[ 1525.800879][T10550] usb 4-1: can't read configurations, error -22
[ 1525.915273][T17860] jffs2: notice: (17860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1525.947221][T10550] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1526.277360][T10550] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1526.277391][T10550] usb 4-1: no configurations
[ 1526.277399][T10550] usb 4-1: can't read configurations, error -22
[ 1526.277661][T10550] usb usb4-port1: attempt power cycle
[ 1526.676753][T10550] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 1526.710223][T10550] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1526.710262][T10550] usb 4-1: no configurations
[ 1526.710276][T10550] usb 4-1: can't read configurations, error -22
[ 1526.836798][T10550] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 1526.857396][T10550] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1526.857435][T10550] usb 4-1: no configurations
[ 1526.857448][T10550] usb 4-1: can't read configurations, error -22
[ 1526.859866][T10550] usb usb4-port1: unable to enumerate USB device
[ 1528.202999][T17882] netlink: 'syz.2.2920': attribute type 11 has an invalid length.
[ 1528.377792][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'.
[ 1529.419340][T17892] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1529.449618][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'.
[ 1529.452546][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'.
[ 1529.491641][T17894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1530.071684][T17911] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2934'.
[ 1530.408497][T10550] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1530.611364][T10550] usb 2-1: Using ep0 maxpacket: 32
[ 1530.616975][T10550] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1530.640449][T10550] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1530.640475][T10550] usb 2-1: config 0 has no interface number 0
[ 1530.645720][T10550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.645743][T10550] usb 2-1: Product: syz
[ 1530.645758][T10550] usb 2-1: Manufacturer: syz
[ 1530.645774][T10550] usb 2-1: SerialNumber: syz
[ 1530.696936][T10550] usb 2-1: config 0 descriptor??
[ 1531.258685][T10550] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1531.258719][T10550] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1531.346624][T10550] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1531.346842][T10550] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1531.992366][T10550] usb 2-1: USB disconnect, device number 103
[ 1533.015974][T13322] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 1533.180788][T13322] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1533.194840][T13322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.194863][T13322] usb 3-1: Product: syz
[ 1533.194878][T13322] usb 3-1: Manufacturer: syz
[ 1533.194892][T13322] usb 3-1: SerialNumber: syz
[ 1533.201515][T13322] usb 3-1: config 0 descriptor??
[ 1533.397913][T17924] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1533.479978][T13322] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 002
[ 1534.100668][T17940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1534.769688][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1534.774829][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1534.800232][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1534.801032][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1534.801584][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1535.081866][T17951] i2c i2c-1: failure sending STOP
[ 1535.082926][T13322] usb 3-1: USB disconnect, device number 2
[ 1535.312804][T16944] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1535.476871][T16944] usb 4-1: Using ep0 maxpacket: 8
[ 1535.477414][T16944] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1535.478696][T16944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1535.478716][T16944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1535.478739][T16944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.482355][T16944] usb 4-1: config 0 descriptor??
[ 1535.634689][T17932] bond0: (slave syz_tun): Releasing backup interface
[ 1535.705247][T16944] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1535.920950][T13925] usb 4-1: USB disconnect, device number 3
[ 1535.920985][    C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1536.926942][T16008] Bluetooth: hci3: command tx timeout
[ 1537.034335][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1537.034361][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.332030][T17995] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2952'.
[ 1537.451910][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1537.451934][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.377177][T10550] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1538.415967][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1538.423123][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.546107][T10550] usb 4-1: Using ep0 maxpacket: 16
[ 1538.548460][T10550] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1538.548502][T10550] usb 4-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=41.ad
[ 1538.553451][T10550] usb 4-1: config 128 has an invalid interface number: 63 but max is 0
[ 1538.553469][T10550] usb 4-1: config 128 has no interface number 0
[ 1538.553485][T10550] usb 4-1: config 128 interface 63 has no altsetting 0
[ 1538.611644][T10550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.611668][T10550] usb 4-1: Product: syz
[ 1538.611682][T10550] usb 4-1: Manufacturer: syz
[ 1538.611697][T10550] usb 4-1: SerialNumber: syz
[ 1538.803029][T17956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1538.803178][T17956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1538.803289][T17956] bridge_slave_0: entered allmulticast mode
[ 1538.832752][T17956] bridge_slave_0: entered promiscuous mode
[ 1538.849290][T17956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1538.849376][T17956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1538.849499][T17956] bridge_slave_1: entered allmulticast mode
[ 1538.850986][T17956] bridge_slave_1: entered promiscuous mode
[ 1538.932118][T10550] usb 4-1: active config #128 != 1 ??
[ 1538.953883][T10550] usb 4-1: USB disconnect, device number 4
[ 1538.976750][T16008] Bluetooth: hci3: command tx timeout
[ 1538.998967][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1539.001467][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1539.133585][   T31] audit: type=1400 audit(1789493659.040:2237): avc:  denied  { write } for  pid=18016 comm="syz.6.2956" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1539.180050][   T31] audit: type=1400 audit(1789493659.080:2238): avc:  denied  { write } for  pid=18016 comm="syz.6.2956" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1539.266690][T17956] team0: Port device team_slave_0 added
[ 1539.288683][T17956] team0: Port device team_slave_1 added
[ 1540.223434][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1540.223451][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1540.223475][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1540.240509][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1540.240524][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1540.240561][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1541.062548][T16008] Bluetooth: hci3: command tx timeout
[ 1541.831875][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'.
[ 1542.255763][T17956] hsr_slave_0: entered promiscuous mode
[ 1542.273896][T17956] hsr_slave_1: entered promiscuous mode
[ 1542.320406][T17956] debugfs: 'hsr0' already exists in 'hsr'
[ 1542.320489][T17956] Cannot create hsr debugfs directory
[ 1543.136543][T16008] Bluetooth: hci3: command tx timeout
[ 1543.443661][   T13] bridge_slave_1: left allmulticast mode
[ 1543.443687][   T13] bridge_slave_1: left promiscuous mode
[ 1543.443879][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1543.503541][   T13] bridge_slave_0: left allmulticast mode
[ 1543.503567][   T13] bridge_slave_0: left promiscuous mode
[ 1543.503756][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1544.559038][T10561] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1544.638693][T18068] xt_hashlimit: max too large, truncated to 1048576
[ 1544.638705][T18068] xt_hashlimit: overflow, try lower: 18446744073709551612/8
[ 1544.717281][T10561] usb 7-1: Using ep0 maxpacket: 16
[ 1544.747766][T10561] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1544.747808][T10561] usb 7-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=41.ad
[ 1544.752369][T10561] usb 7-1: config 128 has an invalid interface number: 63 but max is 0
[ 1544.752395][T10561] usb 7-1: config 128 has no interface number 0
[ 1544.752420][T10561] usb 7-1: config 128 interface 63 has no altsetting 0
[ 1544.764851][T10561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.764874][T10561] usb 7-1: Product: syz
[ 1544.764890][T10561] usb 7-1: Manufacturer: syz
[ 1544.764905][T10561] usb 7-1: SerialNumber: syz
[ 1545.017891][   T31] audit: type=1400 audit(1789493664.931:2239): avc:  denied  { write } for  pid=18044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1545.035348][T10561] usb 7-1: active config #128 != 1 ??
[ 1545.053699][T10561] usb 7-1: USB disconnect, device number 13
[ 1545.100905][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1545.132179][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1545.159054][   T13] bond0 (unregistering): Released all slaves
[ 1545.192725][   T13] bond1 (unregistering): Released all slaves
[ 1545.233662][   T13] bond2 (unregistering): Released all slaves
[ 1545.274201][   T31] audit: type=1400 audit(1789493665.181:2240): avc:  denied  { write } for  pid=18081 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1545.304024][   T13] bond3 (unregistering): Released all slaves
[ 1545.372856][   T13] bond4 (unregistering): Released all slaves
[ 1545.453440][   T13] bond5 (unregistering): Released all slaves
[ 1545.532310][   T13] bond6 (unregistering): Released all slaves
[ 1545.702482][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1546.899649][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.899700][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1547.003435][   T13] tipc: Disabling bearer <udp:syz2>
[ 1547.003621][   T13] tipc: Left network mode
[ 1548.757624][   T13] hsr_slave_0: left promiscuous mode
[ 1548.758425][   T13] hsr_slave_1: left promiscuous mode
[ 1548.759168][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1548.759186][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1548.760008][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1548.760025][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1548.822706][   T13] veth0_macvtap: left promiscuous mode
[ 1548.822780][   T13] veth1_vlan: left promiscuous mode
[ 1548.822843][   T13] veth0_vlan: left promiscuous mode
[ 1549.251459][   T31] audit: type=1400 audit(1789493669.151:2241): avc:  denied  { write } for  pid=18102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1551.087430][   T31] audit: type=1400 audit(1789493670.991:2242): avc:  denied  { write } for  pid=18117 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1551.809249][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1553.235109][T10550] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1553.238039][T18139] netlink: 'syz.3.2978': attribute type 11 has an invalid length.
[ 1553.428792][T10550] usb 3-1: Using ep0 maxpacket: 16
[ 1553.429562][T10550] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1553.430819][T10550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1553.430858][T10550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.504207][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2978'.
[ 1553.606973][T10550] usb 3-1: config 0 descriptor??
[ 1555.020259][T18151] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1555.041507][T18151] netlink: 'syz.3.2981': attribute type 1 has an invalid length.
[ 1555.140498][   T31] audit: type=1400 audit(1789493675.051:2243): avc:  denied  { write } for  pid=18131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1555.153900][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2982'.
[ 1555.242701][T18156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1555.434107][   T31] audit: type=1400 audit(1789493675.341:2244): avc:  denied  { write } for  pid=18161 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1555.599185][T17956] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1555.608241][T17956] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1555.611525][T17956] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1555.621893][T17956] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1555.633427][T17956] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1555.646796][T17956] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1555.649664][T17956] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1555.668963][T18165] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1555.670749][T17956] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1555.900643][T17956] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1555.931892][T17956] 8021q: adding VLAN 0 to HW filter on device team0
[ 1556.112138][T10550] usbhid 3-1:0.0: can't add hid device: -71
[ 1556.112231][T10550] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1556.116548][T14847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1556.116646][T14847] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1556.132724][T10550] usb 3-1: USB disconnect, device number 3
[ 1556.167143][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1556.167198][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1556.596857][T10550] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[ 1557.669647][   T31] audit: type=1400 audit(1789493677.581:2245): avc:  denied  { write } for  pid=18167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1557.778444][T10550] usb 3-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[ 1558.440118][T10550] usb 3-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config
[ 1558.440164][T10550] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1558.473892][T10550] usb 3-1: Dual-Role OTG device on HNP port
[ 1558.474101][T10550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.474114][T10550] usb 3-1: Product: 䮝埻惔㽵셧㮄뙇뿓ﰒ觟䩤Ήᄏ䕋礼࿢띾䟲䓏ᑯ稄쒭⛂፴㢭ꌬ㏋鮸ኒ㫿撙䔴㫸䆍먝᎔㱏껊뇪ꠚ䒭꬙끥Ὸ៨廼媟舮ꜜ㼰煝ㅭ쐐卙鰶뀺歃뻠뇬똿篁妼☦赌ﷴ䤪䏿熵葉⸓魗零安ቕƦ狝
[ 1558.474131][T10550] usb 3-1: Manufacturer: ᠁
[ 1558.474140][T10550] usb 3-1: SerialNumber: syz
[ 1558.681264][   T31] audit: type=1400 audit(1789493678.592:2246): avc:  denied  { write } for  pid=18207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1558.818180][T10550] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1558.818228][T10550] usb 3-1: MIDIStreaming interface descriptor not found
[ 1558.896139][T10550] usb 3-1: USB disconnect, device number 4
[ 1559.100184][T17155] udevd[17155]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1559.432235][T17956] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1559.543594][T17956] veth0_vlan: entered promiscuous mode
[ 1559.576430][T17956] veth1_vlan: entered promiscuous mode
[ 1559.644188][   T31] audit: type=1400 audit(1789493679.552:2247): avc:  denied  { write } for  pid=18215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1559.669055][T17956] veth0_macvtap: entered promiscuous mode
[ 1559.692822][T17956] veth1_macvtap: entered promiscuous mode
[ 1559.771539][T17956] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1559.839237][T17956] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1559.869791][ T3960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.869833][ T3960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.869865][ T3960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.869897][ T3960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.094179][   T31] audit: type=1400 audit(1789493680.002:2248): avc:  denied  { write } for  pid=18236 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1560.284203][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1560.284219][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1560.489708][ T9501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1560.489728][ T9501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1560.608428][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'.
[ 1560.693765][T18255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1560.822823][   T31] audit: type=1400 audit(1789493680.722:2249): avc:  denied  { write } for  pid=18244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1561.032428][   T31] audit: type=1400 audit(1789493680.942:2250): avc:  denied  { write } for  pid=18268 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1561.355503][T16944] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1561.565663][T16944] usb 2-1: Using ep0 maxpacket: 8
[ 1561.568059][T16944] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1561.572823][T16944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1561.572887][T16944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1561.573046][T16944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.741492][T16944] usb 2-1: config 0 descriptor??
[ 1561.817900][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1561.823492][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1561.825865][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1561.851342][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1561.861866][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1561.968758][T16944] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1562.217814][T16944] usb 2-1: USB disconnect, device number 104
[ 1562.217939][    C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1562.421698][   T31] audit: type=1400 audit(1789493682.332:2251): avc:  denied  { write } for  pid=18292 comm="syz.3.3001" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1562.466898][   T31] audit: type=1400 audit(1789493682.382:2252): avc:  denied  { write } for  pid=18292 comm="syz.3.3001" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1563.935126][T16008] Bluetooth: hci2: command tx timeout
[ 1565.919491][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'.
[ 1565.995501][   T31] audit: type=1400 audit(1789493685.912:2253): avc:  denied  { create } for  pid=18321 comm="syz.5.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1566.001993][T18310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1566.048425][ T5602] bond0: (slave syz_tun): Releasing backup interface
[ 1566.095236][T16008] Bluetooth: hci2: command tx timeout
[ 1566.384961][T13925] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1566.535889][T13925] usb 7-1: Using ep0 maxpacket: 32
[ 1566.538172][T13925] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1566.542096][T13925] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1566.542122][T13925] usb 7-1: config 0 has no interface number 0
[ 1566.570325][T13925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.570349][T13925] usb 7-1: Product: syz
[ 1566.570365][T13925] usb 7-1: Manufacturer: syz
[ 1566.570380][T13925] usb 7-1: SerialNumber: syz
[ 1566.589999][T13925] usb 7-1: config 0 descriptor??
[ 1566.844831][T14847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1567.023115][T13925] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1567.023148][T13925] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1567.083049][T13925] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1567.083185][T13925] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1567.118325][T13925] usb 7-1: USB disconnect, device number 14
[ 1568.173909][T16008] Bluetooth: hci2: command tx timeout
[ 1568.467986][T14847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1568.683111][T13925] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1568.732102][T14847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1568.834871][T13925] usb 2-1: Using ep0 maxpacket: 8
[ 1568.835589][T13925] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[ 1568.838138][T13925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1568.838167][T13925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1568.838189][T13925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1568.838226][T13925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.840823][T13925] usb 2-1: config 0 descriptor??
[ 1569.055337][   T31] audit: type=1400 audit(1789493688.972:2254): avc:  denied  { create } for  pid=18347 comm="syz.3.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1569.061804][   T31] audit: type=1400 audit(1789493688.972:2255): avc:  denied  { sys_admin } for  pid=18347 comm="syz.3.3012" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1569.062757][T14847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1569.813992][T16452] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1569.967094][T16452] usb 4-1: Using ep0 maxpacket: 8
[ 1569.968267][T16452] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1569.969145][T16452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1569.969177][T16452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1569.969216][T16452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.018564][T16452] usb 4-1: config 0 descriptor??
[ 1570.027947][T14847] bridge_slave_1: left allmulticast mode
[ 1570.027969][T14847] bridge_slave_1: left promiscuous mode
[ 1570.028183][T14847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1570.227048][T14847] bridge_slave_0: left allmulticast mode
[ 1570.227114][T14847] bridge_slave_0: left promiscuous mode
[ 1570.228586][T14847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1570.255014][T16008] Bluetooth: hci2: command tx timeout
[ 1570.361030][T14847] pimreg: left allmulticast mode
[ 1572.711025][T16452] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1572.792378][T16452] usb 4-1: USB disconnect, device number 5
[ 1572.916250][T13925] sony 0003:054C:042F.000A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[ 1572.987586][T13925] sony 0003:054C:042F.000A: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0
[ 1572.987622][T13925] sony 0003:054C:042F.000A: failed to claim input
[ 1573.196925][T13925] usb 2-1: USB disconnect, device number 105
[ 1573.466055][T18375] fido_id[18375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1573.584165][T13925] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1573.695863][T13322] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1573.696569][   T31] audit: type=1400 audit(1789493693.612:2256): avc:  denied  { write } for  pid=18363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1573.761569][T13925] usb 2-1: Using ep0 maxpacket: 8
[ 1573.762181][T13925] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1573.763181][T13925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1573.763213][T13925] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1573.763250][T13925] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1573.763277][T13925] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1573.763297][T13925] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1573.763323][T13925] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1573.831743][T13925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1573.831778][T13925] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1573.831822][T13925] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1573.831850][T13925] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1573.831872][T13925] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1573.831898][T13925] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1573.832879][T13925] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1573.832912][T13925] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1573.832947][T13925] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1573.832972][T13925] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1573.832992][T13925] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1573.833030][T13925] usb 2-1: config 168 interface 0 has no altsetting 0
[ 1573.873100][T13322] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1573.879922][T13322] usb 4-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1573.879938][T13322] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1573.879957][T13322] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1573.888165][T13322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.888188][T13322] usb 4-1: Product: syz
[ 1573.888203][T13322] usb 4-1: Manufacturer: syz
[ 1573.888218][T13322] usb 4-1: SerialNumber: syz
[ 1574.808977][T13925] usb 2-1: string descriptor 0 read error: -22
[ 1574.809091][T13925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.817452][T13925] adutux 2-1:168.0: interrupt endpoints not found
[ 1574.909875][T18380] jffs2: notice: (18380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1574.924534][   T31] audit: type=1400 audit(1789493694.822:2257): avc:  denied  { mounton } for  pid=18379 comm="syz.3.3017" path="/599/file0" dev="tmpfs" ino=3451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1574.941667][   T31] audit: type=1400 audit(1789493694.852:2258): avc:  denied  { write } for  pid=18379 comm="syz.3.3017" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1575.355360][T13322] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[ 1576.248578][T13322] usb 4-1: USB disconnect, device number 6
[ 1576.965815][T14847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1577.152617][T14847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1577.193235][T14847] bond0 (unregistering): Released all slaves
[ 1577.398589][T13925] usb 2-1: USB disconnect, device number 106
[ 1577.735057][   T31] audit: type=1400 audit(1789493697.653:2259): avc:  denied  { write } for  pid=18397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1577.768949][T14847] bond1 (unregistering): Released all slaves
[ 1577.864944][T14847] bond2 (unregistering): Released all slaves
[ 1577.904782][T14847] bond3 (unregistering): Released all slaves
[ 1577.951974][T14847] bond4 (unregistering): Released all slaves
[ 1578.003252][T14847] bond5 (unregistering): Released all slaves
[ 1578.114311][   T31] audit: type=1400 audit(1789493698.023:2260): avc:  denied  { write } for  pid=18399 comm="syz.1.3022" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1578.114712][   T31] audit: type=1400 audit(1789493698.033:2261): avc:  denied  { write } for  pid=18399 comm="syz.1.3022" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1579.027851][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1579.186755][   T31] audit: type=1400 audit(1789493699.103:2262): avc:  denied  { write } for  pid=18413 comm="syz.1.3025" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1579.224933][   T31] audit: type=1400 audit(1789493699.133:2263): avc:  denied  { write } for  pid=18413 comm="syz.1.3025" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1579.584914][T14847] tipc: Disabling bearer <udp:syz2>
[ 1579.585506][T14847] tipc: Left network mode
[ 1580.220721][T14847] IPVS: stopping backup sync thread 17358 ...
[ 1580.562943][T18285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1580.563029][T18285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1580.583617][T18285] bridge_slave_0: entered allmulticast mode
[ 1580.585503][T18285] bridge_slave_0: entered promiscuous mode
[ 1580.599763][T13761] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1580.610869][T18430] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3028'.
[ 1580.642545][T18285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1580.642638][T18285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1580.642764][T18285] bridge_slave_1: entered allmulticast mode
[ 1580.646175][   T31] audit: type=1400 audit(1789493700.563:2264): avc:  denied  { name_bind } for  pid=18421 comm="syz.1.3027" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1580.671579][T18285] bridge_slave_1: entered promiscuous mode
[ 1580.763693][T13761] usb 4-1: Using ep0 maxpacket: 32
[ 1580.764450][T13761] usb 4-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6
[ 1580.765463][T13761] usb 4-1: config 183 has an invalid interface number: 124 but max is 0
[ 1580.765489][T13761] usb 4-1: config 183 has no interface number 0
[ 1580.765524][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1580.765551][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1580.765577][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7
[ 1580.765603][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1580.765628][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1580.765654][T13761] usb 4-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0
[ 1580.765674][T13761] usb 4-1: config 183 interface 124 has no altsetting 0
[ 1580.769044][T13761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.769068][T13761] usb 4-1: Product: syz
[ 1580.769083][T13761] usb 4-1: Manufacturer: syz
[ 1580.769098][T13761] usb 4-1: SerialNumber: syz
[ 1580.817173][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1580.840989][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.164615][T13761] sierra 4-1:183.124: Sierra USB modem converter detected
[ 1581.182346][T13761] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[ 1581.226239][T13761] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[ 1581.246325][T13761] usb 4-1: Sierra USB modem converter now attached to ttyUSB2
[ 1581.250029][T18444] netlink: 'syz.5.3030': attribute type 39 has an invalid length.
[ 1581.281780][T13761] usb 4-1: USB disconnect, device number 7
[ 1581.301533][   T31] audit: type=1400 audit(1789493701.213:2265): avc:  denied  { write } for  pid=18426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1581.306199][T18285] team0: Port device team_slave_0 added
[ 1581.336195][T18285] team0: Port device team_slave_1 added
[ 1581.352909][T13761] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1581.421049][T13761] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1581.439223][T13761] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[ 1581.441193][T13761] sierra 4-1:183.124: device disconnected
[ 1581.535176][   T31] audit: type=1400 audit(1789493701.453:2266): avc:  denied  { write } for  pid=18449 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1581.712058][T14847] hsr_slave_0: left promiscuous mode
[ 1581.719586][T14847] hsr_slave_1: left promiscuous mode
[ 1581.720306][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1581.720324][T14847] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1581.721751][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1581.721768][T14847] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1581.754301][T10561] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1581.796684][T14847] veth1_macvtap: left promiscuous mode
[ 1581.796718][T14847] veth0_macvtap: left promiscuous mode
[ 1581.796846][T14847] veth1_vlan: left promiscuous mode
[ 1581.796904][T14847] veth0_vlan: left promiscuous mode
[ 1581.904539][T10561] usb 7-1: Using ep0 maxpacket: 8
[ 1581.907593][T10561] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1581.908505][T10561] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1581.908539][T10561] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1581.908571][T10561] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1581.908588][T10561] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1581.908600][T10561] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1581.908616][T10561] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1581.912480][T10561] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1581.912512][T10561] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1581.912548][T10561] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1581.912575][T10561] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1581.912597][T10561] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1581.912623][T10561] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1581.917804][T10561] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1581.917836][T10561] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1581.917871][T10561] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1581.917898][T10561] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1581.917928][T10561] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1581.917974][T10561] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1581.922855][T10561] usb 7-1: string descriptor 0 read error: -22
[ 1581.922960][T10561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.942658][T10561] adutux 7-1:168.0: interrupt endpoints not found
[ 1581.953613][T13761] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1582.184466][T13761] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1582.185369][T13761] usb 2-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1582.185391][T13761] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1582.185423][T13761] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1582.190252][T13761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1582.190276][T13761] usb 2-1: Product: syz
[ 1582.190290][T13761] usb 2-1: Manufacturer: syz
[ 1582.190304][T13761] usb 2-1: SerialNumber: syz
[ 1582.280628][   T31] audit: type=1400 audit(1789493702.193:2267): avc:  denied  { write } for  pid=18456 comm="syz.3.3034" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1582.310051][   T31] audit: type=1400 audit(1789493702.223:2268): avc:  denied  { write } for  pid=18456 comm="syz.3.3034" name="subsystems" dev="configfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1584.170153][T18468] jffs2: notice: (18468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1585.243367][ T5794] usb 7-1: USB disconnect, device number 15
[ 1585.252217][T18476] netlink: 'syz.5.3037': attribute type 11 has an invalid length.
[ 1585.444253][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3039'.
[ 1585.582092][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1585.645579][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1585.727152][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1585.727168][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.727192][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1585.729351][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1585.729363][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.729380][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1586.149810][T18285] hsr_slave_0: entered promiscuous mode
[ 1586.156652][T18285] hsr_slave_1: entered promiscuous mode
[ 1586.262873][T18491] netlink: 'syz.3.3041': attribute type 11 has an invalid length.
[ 1587.611717][T14847] IPVS: stop unused estimator thread 0...
[ 1588.162111][T13761] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22
[ 1588.220953][T13761] usb 2-1: USB disconnect, device number 107
[ 1588.439820][   T31] audit: type=1400 audit(1789493708.353:2269): avc:  denied  { write } for  pid=18493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1588.453275][T18510] xt_hashlimit: size too large, truncated to 1048576
[ 1588.470305][   T31] audit: type=1400 audit(1789493708.363:2270): avc:  denied  { accept } for  pid=18509 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1588.554733][T18515] xt_hashlimit: size too large, truncated to 1048576
[ 1588.653803][T16944] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1588.809104][T16944] usb 4-1: Using ep0 maxpacket: 8
[ 1588.812133][T16944] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1588.874805][T16944] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1588.874870][T16944] usb 4-1: config 0 has no interface number 0
[ 1588.981590][T16944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.981774][T16944] usb 4-1: Product: syz
[ 1588.981844][T16944] usb 4-1: Manufacturer: syz
[ 1588.982139][T16944] usb 4-1: SerialNumber: syz
[ 1589.148550][T16944] usb 4-1: config 0 descriptor??
[ 1589.801554][   T31] audit: type=1400 audit(1789493709.713:2271): avc:  denied  { write } for  pid=18522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1590.071454][T16944] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1590.073836][T16944] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized!
[ 1590.328143][T16944] usb 4-1: USB disconnect, device number 8
[ 1590.491757][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1590.622099][T18530] binder: 18528:18530 ioctl c0189372 200000000000 returned -22
[ 1591.864457][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'.
[ 1591.945892][T18556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18556 comm=syz.6.3052
[ 1591.989853][T18558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1592.662298][   T31] audit: type=1400 audit(1789493712.573:2272): avc:  denied  { write } for  pid=18552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1592.765288][T18549] ALSA: mixer_oss: invalid OSS volume 'sit0'
[ 1592.910656][   T31] audit: type=1400 audit(1789493712.823:2273): avc:  denied  { watch watch_reads } for  pid=18572 comm="syz.1.3055" path="/14" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1593.349480][   T31] audit: type=1400 audit(1789493713.263:2274): avc:  denied  { write } for  pid=18578 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1594.386355][T18285] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1594.396579][T18587] netlink: 'syz.1.3057': attribute type 11 has an invalid length.
[ 1594.498866][T18285] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1594.521558][T18285] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1597.510178][T18285] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1597.510654][T18285] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1597.586815][T18285] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1597.595829][T18285] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1597.656051][T18285] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1597.994436][T18285] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1598.046567][T18285] 8021q: adding VLAN 0 to HW filter on device team0
[ 1598.065631][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1598.065688][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1598.102999][T14848] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1598.103104][T14848] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1598.153218][T10561] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1598.194822][T13761] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1598.262209][ T5794] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[ 1598.301992][   T31] audit: type=1400 audit(1789493718.214:2275): avc:  denied  { write } for  pid=18597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1598.303264][T10561] usb 2-1: Using ep0 maxpacket: 8
[ 1598.333867][T10561] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1598.342732][T13761] usb 7-1: Using ep0 maxpacket: 8
[ 1598.343917][T13761] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1598.344800][T13761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1598.344829][T13761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1598.344867][T13761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.348525][T13761] usb 7-1: config 0 descriptor??
[ 1598.357940][T10561] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1598.357967][T10561] usb 2-1: config 0 has no interface number 0
[ 1598.416127][ T5794] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1598.416185][ T5794] usb 4-1: no configurations
[ 1598.416199][ T5794] usb 4-1: can't read configurations, error -22
[ 1598.429534][T10561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.429551][T10561] usb 2-1: Product: syz
[ 1598.429560][T10561] usb 2-1: Manufacturer: syz
[ 1598.429568][T10561] usb 2-1: SerialNumber: syz
[ 1598.484040][T10561] usb 2-1: config 0 descriptor??
[ 1598.542456][ T5794] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1598.584360][   T31] audit: type=1400 audit(1789493718.504:2276): avc:  denied  { write } for  pid=18628 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1598.626811][T13761] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1598.693268][ T5794] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1598.693303][ T5794] usb 4-1: no configurations
[ 1598.693317][ T5794] usb 4-1: can't read configurations, error -22
[ 1598.694003][ T5794] usb usb4-port1: attempt power cycle
[ 1598.733967][T18611] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16)
[ 1598.745439][T10561] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1598.745508][T10561] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized!
[ 1598.750504][T10561] usb 2-1: USB disconnect, device number 108
[ 1598.880541][T10550] usb 7-1: USB disconnect, device number 16
[ 1598.880625][    C1] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1599.033011][ T5794] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[ 1599.059601][ T5794] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1599.059627][ T5794] usb 4-1: no configurations
[ 1599.059635][ T5794] usb 4-1: can't read configurations, error -22
[ 1599.182735][ T5794] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 1599.203218][ T5794] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[ 1599.203259][ T5794] usb 4-1: no configurations
[ 1599.203273][ T5794] usb 4-1: can't read configurations, error -22
[ 1599.203744][ T5794] usb usb4-port1: unable to enumerate USB device
[ 1599.421106][T18285] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1599.473206][T18285] veth0_vlan: entered promiscuous mode
[ 1599.479367][T18285] veth1_vlan: entered promiscuous mode
[ 1599.513882][T18285] veth0_macvtap: entered promiscuous mode
[ 1599.517603][T18285] veth1_macvtap: entered promiscuous mode
[ 1599.544865][T18285] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1599.548353][T18285] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1599.816639][   T31] audit: type=1400 audit(1789493719.734:2277): avc:  denied  { write } for  pid=18635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1599.852541][ T3960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.852587][ T3960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.852621][ T3960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.862204][ T3960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1600.043512][T18367] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1600.204980][   T31] audit: type=1400 audit(1789493720.124:2278): avc:  denied  { write } for  pid=18659 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1600.272970][T18367] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1600.279524][T18367] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1600.279718][T18367] usb 2-1: config 0 has no interface number 0
[ 1600.331161][T18367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.331542][T18367] usb 2-1: Product: syz
[ 1600.331589][T18367] usb 2-1: Manufacturer: syz
[ 1600.331703][T18367] usb 2-1: SerialNumber: syz
[ 1600.509578][T18367] usb 2-1: config 0 descriptor??
[ 1600.809488][T18367] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1600.831664][T18367] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1600.831923][T18367] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1600.831964][T18367] usb 2-1: media controller created
[ 1600.877648][T14847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1600.877666][T14847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1600.937028][T18367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1600.979205][T18654] usb 2-1: dvb_usb_ec168: I2C read not implemented
[ 1601.198401][T14849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1601.198422][T14849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1602.014524][T18367] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 1602.228028][T18675] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1602.394181][T18367] usb 2-1: USB disconnect, device number 109
[ 1602.529817][   T31] audit: type=1400 audit(1789493722.444:2279): avc:  denied  { write } for  pid=18692 comm="syz.2.2998" name="functions" dev="configfs" ino=9258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1602.571733][   T31] audit: type=1400 audit(1789493722.484:2280): avc:  denied  { write } for  pid=18692 comm="syz.2.2998" name="c.1" dev="configfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1602.599121][   T31] audit: type=1400 audit(1789493722.514:2281): avc:  denied  { write } for  pid=18692 comm="syz.2.2998" name="c.1" dev="configfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1602.765598][T16008] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1602.769812][T16008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1602.799510][T16008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1602.801402][T16008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1602.801968][T16008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1602.848940][   T31] audit: type=1400 audit(1789493722.764:2282): avc:  denied  { write } for  pid=18670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1602.880818][T18367] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1602.975249][   T31] audit: type=1400 audit(1789493722.894:2283): avc:  denied  { read } for  pid=18692 comm="syz.2.2998" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1603.043515][T18367] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1603.044286][T18367] usb 2-1: config 0 has no interfaces?
[ 1603.046679][T18367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.046703][T18367] usb 2-1: Product: syz
[ 1603.046718][T18367] usb 2-1: Manufacturer: syz
[ 1603.046734][T18367] usb 2-1: SerialNumber: syz
[ 1603.050237][T18367] usb 2-1: config 0 descriptor??
[ 1603.440775][   T31] audit: type=1400 audit(1789493723.354:2284): avc:  denied  { write } for  pid=18708 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1603.951013][ T5794] usb 2-1: USB disconnect, device number 110
[ 1604.828118][T18735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1604.871030][ T5821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1604.895089][T16008] Bluetooth: hci4: command tx timeout
[ 1604.931053][   T31] audit: type=1400 audit(1789493724.844:2285): avc:  denied  { write } for  pid=18717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1605.032828][T18367] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1605.052464][T18698] udc dummy_udc.0: failed to start g1: -19
[ 1605.126577][T18698] UDC core: g1: couldn't find an available UDC or it's busy
[ 1605.154367][   T31] audit: type=1400 audit(1789493725.074:2286): avc:  denied  { write } for  pid=18740 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1605.223529][T18367] usb 2-1: Using ep0 maxpacket: 16
[ 1605.224255][T18367] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1605.225196][T18367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1605.225240][T18367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.227789][T18367] usb 2-1: config 0 descriptor??
[ 1605.355248][ T5821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.470089][T18367] usbhid 2-1:0.0: can't add hid device: -71
[ 1605.470190][T18367] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1605.494725][T18367] usb 2-1: USB disconnect, device number 111
[ 1605.536947][ T5821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.604381][ T5821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.675050][T18700] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1605.680816][T18700] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1605.680929][T18700] bridge_slave_0: entered allmulticast mode
[ 1605.682565][T18700] bridge_slave_0: entered promiscuous mode
[ 1605.685048][T18700] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1605.685190][T18700] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1605.685288][T18700] bridge_slave_1: entered allmulticast mode
[ 1605.686710][T18700] bridge_slave_1: entered promiscuous mode
[ 1605.710588][T18700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1605.713114][T18700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1605.748375][T18700] team0: Port device team_slave_0 added
[ 1605.751530][T18700] team0: Port device team_slave_1 added
[ 1605.777589][T18700] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1605.777605][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1605.777627][T18700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1605.779575][T18700] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1605.779587][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1605.779609][T18700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1605.824518][T18700] hsr_slave_0: entered promiscuous mode
[ 1605.825327][T18700] hsr_slave_1: entered promiscuous mode
[ 1605.825905][T18700] debugfs: 'hsr0' already exists in 'hsr'
[ 1605.825922][T18700] Cannot create hsr debugfs directory
[ 1605.857438][T13925] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1606.036794][T13925] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1606.041419][T13925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.041446][T13925] usb 3-1: Product: syz
[ 1606.041466][T13925] usb 3-1: Manufacturer: syz
[ 1606.041485][T13925] usb 3-1: SerialNumber: syz
[ 1606.514614][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1606.514673][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1606.590870][   T31] audit: type=1400 audit(1789493726.504:2287): avc:  denied  { write } for  pid=18765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1606.715282][   T31] audit: type=1400 audit(1789493726.624:2288): avc:  denied  { write } for  pid=18780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1606.972956][T16008] Bluetooth: hci4: command tx timeout
[ 1606.977603][T18753] netlink: 'syz.2.3080': attribute type 3 has an invalid length.
[ 1607.018893][ T5821] bond0 (unregistering): Released all slaves
[ 1607.025523][ T5821] bond1 (unregistering): Released all slaves
[ 1607.039804][ T5821] bond2 (unregistering): Released all slaves
[ 1607.091269][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1607.204761][T18783] input: syz1 as /devices/virtual/input/input41
[ 1607.204792][T18783] input: failed to attach handler leds to device input41, error: -6
[ 1607.216092][ T5821] : left promiscuous mode
[ 1607.378062][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.378105][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.409597][ T5821] tipc: Disabling bearer <udp:syz2>
[ 1607.409734][ T5821] tipc: Left network mode
[ 1607.830981][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1609.052361][T16008] Bluetooth: hci4: command tx timeout
[ 1609.096353][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO
[ 1609.100110][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1609.100880][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1609.346437][T13925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1609.399707][T13925] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1609.790768][T13925] usb 3-1: USB disconnect, device number 5
[ 1609.930965][   T31] audit: type=1400 audit(1789493729.844:2289): avc:  denied  { write } for  pid=18790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1610.177855][   T31] audit: type=1400 audit(1789493730.094:2290): avc:  denied  { write } for  pid=18803 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1610.337640][T18808] tipc: Started in network mode
[ 1610.337672][T18808] tipc: Node identity ac14140f, cluster identity 4711
[ 1610.337927][T18808] tipc: New replicast peer: 255.255.255.255
[ 1610.338487][T18808] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1610.345462][T13925] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1610.446799][T18808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3089'.
[ 1610.484617][ T5821] hsr_slave_0: left promiscuous mode
[ 1610.485254][ T5821] hsr_slave_1: left promiscuous mode
[ 1610.504335][ T5821] veth1_macvtap: left promiscuous mode
[ 1610.504375][ T5821] veth0_macvtap: left promiscuous mode
[ 1610.504467][ T5821] veth1_vlan: left promiscuous mode
[ 1610.504539][ T5821] veth0_vlan: left promiscuous mode
[ 1610.534402][T18814] fuse: Bad value for 'fd'
[ 1610.543646][T13925] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1610.554244][T13925] usb 3-1: config 0 has no interfaces?
[ 1610.556085][T13925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.556111][T13925] usb 3-1: Product: syz
[ 1610.556149][T13925] usb 3-1: Manufacturer: syz
[ 1610.556165][T13925] usb 3-1: SerialNumber: syz
[ 1610.559833][T13925] usb 3-1: config 0 descriptor??
[ 1610.680862][T18816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=18816 comm=syz.5.3090
[ 1610.703392][T18816] netlink: 83 bytes leftover after parsing attributes in process `syz.5.3090'.
[ 1610.759826][   T31] audit: type=1326 audit(1789493730.674:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.5.3090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f239e59e159 code=0x0
[ 1611.132450][T16008] Bluetooth: hci4: command tx timeout
[ 1611.758435][T18814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1611.791268][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'.
[ 1611.915556][T10550] tipc: Node number set to 2886997007
[ 1613.018237][T18367] usb 3-1: USB disconnect, device number 6
[ 1613.095533][T18825] syzkaller0: entered promiscuous mode
[ 1613.095555][T18825] syzkaller0: entered allmulticast mode
[ 1613.617486][T18825] tipc: Started in network mode
[ 1613.617514][T18825] tipc: Node identity 2a4bcd100b83, cluster identity 4711
[ 1613.623260][T18825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1613.721670][T13925] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1613.965880][T13925] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1613.966135][T13925] usb 7-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[ 1614.044531][T13925] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1614.044598][T13925] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7
[ 1614.154380][T13925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.154806][T13925] usb 7-1: Product: syz
[ 1614.154835][T13925] usb 7-1: Manufacturer: syz
[ 1614.154878][T13925] usb 7-1: SerialNumber: syz
[ 1614.322630][T13925] usb 7-1: config 0 descriptor??
[ 1614.987317][T18842] tipc: Resetting bearer <eth:syzkaller0>
[ 1615.116337][T18823] tipc: Resetting bearer <eth:syzkaller0>
[ 1615.488045][T18823] tipc: Disabling bearer <eth:syzkaller0>
[ 1615.506296][T13208] tipc: Node number set to 566807824
[ 1615.588111][   T31] audit: type=1400 audit(1789493735.505:2292): avc:  denied  { write } for  pid=18820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1615.658333][T18700] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1615.672219][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1615.674800][T18700] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1615.685679][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1615.687674][T18700] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1615.731244][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1615.732826][T18700] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1615.751091][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1615.779393][T18852] netlink: 'syz.2.3095': attribute type 2 has an invalid length.
[ 1615.779432][T18852] netlink: 'syz.2.3095': attribute type 2 has an invalid length.
[ 1615.900581][   T31] audit: type=1400 audit(1789493735.815:2293): avc:  denied  { write } for  pid=18861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1616.048710][T18864] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1616.063781][T18700] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1616.100325][T18700] 8021q: adding VLAN 0 to HW filter on device team0
[ 1616.119693][T14848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1616.119792][T14848] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1616.151314][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1616.151411][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1616.264041][   T31] audit: type=1400 audit(1789493736.185:2294): avc:  denied  { create } for  pid=18863 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1617.359269][   T31] audit: type=1400 audit(1789493737.275:2295): avc:  denied  { write } for  pid=18865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1617.499430][T13925] usb 7-1: USB disconnect, device number 17
[ 1617.622715][   T31] audit: type=1400 audit(1789493737.545:2296): avc:  denied  { write } for  pid=18891 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1618.026602][T13925] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1618.112396][T18910] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1618.112465][T18910] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1618.112533][T18910] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1618.356904][T13925] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1618.409233][T18910] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98
[ 1618.409417][T13925] usb 7-1: config 0 has no interfaces?
[ 1618.909081][T13925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.909109][T13925] usb 7-1: Product: syz
[ 1618.909124][T13925] usb 7-1: Manufacturer: syz
[ 1618.909139][T13925] usb 7-1: SerialNumber: syz
[ 1619.264007][T13925] usb 7-1: config 0 descriptor??
[ 1619.744627][   T31] audit: type=1400 audit(1789493739.615:2297): avc:  denied  { write } for  pid=18902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1621.302120][T18367] usb 7-1: USB disconnect, device number 18
[ 1622.400269][T18700] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1622.454258][   T31] audit: type=1400 audit(1789493742.375:2298): avc:  denied  { write } for  pid=18937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1622.566781][T18700] veth0_vlan: entered promiscuous mode
[ 1622.589066][T18700] veth1_vlan: entered promiscuous mode
[ 1622.601411][T10550] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1622.630752][T18700] veth0_macvtap: entered promiscuous mode
[ 1622.649225][T18700] veth1_macvtap: entered promiscuous mode
[ 1622.680408][T18700] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1622.700003][T18700] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1622.717558][ T6006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.717650][ T6006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.717679][ T6006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.717698][ T6006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.752033][T10550] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1622.752914][T10550] usb 7-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1622.752936][T10550] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1622.752968][T10550] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1622.899033][T10550] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.899062][T10550] usb 7-1: Product: syz
[ 1622.900586][T10550] usb 7-1: Manufacturer: syz
[ 1622.900603][T10550] usb 7-1: SerialNumber: syz
[ 1623.873261][T14849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1623.873309][T14849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1623.994464][T14849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1623.994486][T14849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1625.233966][T18970] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3115'.
[ 1625.594361][T10550] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22
[ 1625.599909][T10550] usb 7-1: USB disconnect, device number 19
[ 1626.055714][T18977] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1626.130743][   T31] audit: type=1400 audit(1789493746.045:2299): avc:  denied  { remount } for  pid=18976 comm="syz.3.3118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1626.327718][T18986] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3120'.
[ 1626.360750][T18986] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3120'.
[ 1626.376038][   T31] audit: type=1400 audit(1789493746.295:2300): avc:  denied  { create } for  pid=18985 comm="syz.5.3120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1626.441666][   T31] audit: type=1400 audit(1789493746.325:2301): avc:  denied  { execute } for  pid=18985 comm="syz.5.3120" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1626.491774][   T31] audit: type=1400 audit(1789493746.405:2302): avc:  denied  { write } for  pid=18985 comm="syz.5.3120" name="file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1626.491809][   T31] audit: type=1400 audit(1789493746.405:2303): avc:  denied  { open } for  pid=18985 comm="syz.5.3120" path="/316/file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1626.561941][   T31] audit: type=1400 audit(1789493746.415:2304): avc:  denied  { ioctl } for  pid=18985 comm="syz.5.3120" path="/316/file0" dev="tmpfs" ino=1802 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1627.100188][T18996] kAFS: No cell specified
[ 1627.282328][T10561] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1627.451054][T10561] usb 4-1: Using ep0 maxpacket: 16
[ 1627.463108][T10561] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1627.508306][T10561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1627.508487][T10561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.610521][T10561] usb 4-1: config 0 descriptor??
[ 1628.457350][   T31] audit: type=1400 audit(1789493748.375:2305): avc:  denied  { unlink } for  pid=13561 comm="syz-executor" name="file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1630.624092][T19010] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3127'.
[ 1632.554960][T19025] binder: 19021:19025 ioctl c0306201 200000000040 returned -22
[ 1632.978759][T10561] usbhid 4-1:0.0: can't add hid device: -32
[ 1632.978861][T10561] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[ 1632.997574][T13322] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1633.023555][T13208] usb 4-1: USB disconnect, device number 13
[ 1633.161377][T13322] usb 3-1: Using ep0 maxpacket: 8
[ 1633.162047][T13322] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1633.162969][T13322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1633.162999][T13322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1633.163038][T13322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.242407][T13322] usb 3-1: config 0 descriptor??
[ 1633.288687][T19027] FAULT_INJECTION: forcing a failure.
[ 1633.288687][T19027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1633.288713][T19027] CPU: 0 UID: 0 PID: 19027 Comm: syz.6.3132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1633.288744][T19027] Tainted: [L]=SOFTLOCKUP
[ 1633.288753][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1633.288767][T19027] Call Trace:
[ 1633.288775][T19027]  <TASK>
[ 1633.288783][T19027]  dump_stack_lvl+0x100/0x190
[ 1633.288810][T19027]  should_fail_ex.cold+0x5/0xa
[ 1633.288827][T19027]  strncpy_from_user+0x3b/0x2d0
[ 1633.288845][T19027]  do_getname+0x78/0x390
[ 1633.288873][T19027]  do_sys_openat2+0xc7/0x1e0
[ 1633.288902][T19027]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1633.288933][T19027]  ? __fget_files+0x21f/0x3d0
[ 1633.288955][T19027]  __x64_sys_openat+0x12d/0x210
[ 1633.288971][T19027]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1633.288986][T19027]  ? selinux_file_ioctl+0xb6/0x290
[ 1633.289008][T19027]  do_syscall_64+0x123/0x790
[ 1633.289039][T19027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1633.289060][T19027] RIP: 0033:0x7f984539e159
[ 1633.289078][T19027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1633.289092][T19027] RSP: 002b:00007f984625a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1633.289106][T19027] RAX: ffffffffffffffda RBX: 00007f9845625fa0 RCX: 00007f984539e159
[ 1633.289114][T19027] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[ 1633.289121][T19027] RBP: 00007f984543503b R08: 0000000000000000 R09: 0000000000000000
[ 1633.289128][T19027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1633.289135][T19027] R13: 00007f9845626038 R14: 00007f9845625fa0 R15: 00007ffe698cd4e8
[ 1633.289156][T19027]  </TASK>
[ 1633.290270][T19027] netlink: 7020 bytes leftover after parsing attributes in process `syz.6.3132'.
[ 1633.290313][T19027] openvswitch: netlink: Flow key attr not present in new flow.
[ 1633.374356][T19030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1633.547021][T13322] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1633.600918][   T31] audit: type=1400 audit(1789493753.515:2306): avc:  denied  { ioctl } for  pid=19033 comm="syz.6.3135" path="socket:[57839]" dev="sockfs" ino=57839 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1633.642915][   T31] audit: type=1400 audit(1789493753.565:2307): avc:  denied  { read } for  pid=19033 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1633.652432][T19036] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1633.785225][T10561] usb 3-1: USB disconnect, device number 7
[ 1633.785284][    C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1634.219259][T19047] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3139'.
[ 1635.702420][T10561] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1635.861503][T10561] usb 3-1: Using ep0 maxpacket: 16
[ 1635.862415][T10561] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1635.864214][T10561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1635.864255][T10561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.971551][T13322] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[ 1636.113859][T13322] usb 2-1: device descriptor read/64, error -71
[ 1636.179448][T10561] usb 3-1: config 0 descriptor??
[ 1636.359867][T13322] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 1636.558795][T13322] usb 2-1: device descriptor read/64, error -71
[ 1636.662655][T13322] usb usb2-port1: attempt power cycle
[ 1637.073343][T13322] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1637.113600][T13322] usb 2-1: device descriptor read/8, error -71
[ 1637.230020][T19073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1637.230456][T19073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1637.352217][T13322] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[ 1637.372571][T13322] usb 2-1: device descriptor read/8, error -71
[ 1637.463431][T19079] loop5: detected capacity change from 0 to 4095
[ 1637.481699][T13322] usb usb2-port1: unable to enumerate USB device
[ 1637.556541][T18633] Buffer I/O error on dev loop5, logical block 511, async page read
[ 1638.509771][T19092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3152'.
[ 1639.249183][   T31] audit: type=1400 audit(1789493759.165:2308): avc:  denied  { accept } for  pid=19095 comm="syz.1.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1639.363582][T10561] usbhid 3-1:0.0: can't add hid device: -71
[ 1639.363673][T10561] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1639.382652][T10561] usb 3-1: USB disconnect, device number 8
[ 1640.396328][T19108] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1640.458868][   T31] audit: type=1400 audit(1789493760.375:2309): avc:  denied  { load_policy } for  pid=19095 comm="syz.1.3154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1640.512511][T19098] SELinux:  policydb version -1520850472 does not match my version range 15-35
[ 1640.512812][T19098] SELinux: failed to load policy
[ 1642.491559][T16944] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1642.642013][T16944] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1642.642873][T16944] usb 7-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1642.642888][T16944] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1642.642907][T16944] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1642.677187][T16944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1642.677214][T16944] usb 7-1: Product: syz
[ 1642.677233][T16944] usb 7-1: Manufacturer: syz
[ 1642.677247][T16944] usb 7-1: SerialNumber: syz
[ 1642.904103][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'.
[ 1643.495797][T19144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.513628][T19145] jffs2: notice: (19145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1643.544754][   T31] audit: type=1400 audit(1789493763.465:2310): avc:  denied  { write } for  pid=19135 comm="syz.6.3164" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1644.977909][T19157] siw: device registration error -23
[ 1646.022100][T10550] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1646.160576][T16944] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22
[ 1646.178033][T16944] usb 7-1: USB disconnect, device number 20
[ 1646.196912][T10550] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1646.197398][T10550] usb 2-1: config 0 has no interfaces?
[ 1646.221204][T10550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.221719][T10550] usb 2-1: Product: syz
[ 1646.222177][T10550] usb 2-1: Manufacturer: syz
[ 1646.222188][T10550] usb 2-1: SerialNumber: syz
[ 1646.230079][T10550] usb 2-1: config 0 descriptor??
[ 1646.428757][   T31] audit: type=1400 audit(1789493766.345:2311): avc:  denied  { read write } for  pid=19160 comm="syz.3.3174" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1646.429031][   T31] audit: type=1400 audit(1789493766.345:2312): avc:  denied  { open } for  pid=19160 comm="syz.3.3174" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1646.490468][   T31] audit: type=1400 audit(1789493766.405:2313): avc:  denied  { ioctl } for  pid=19160 comm="syz.3.3174" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1646.945341][T19167] sctp: [Deprecated]: syz.6.3173 (pid 19167) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1646.945341][T19167] Use struct sctp_sack_info instead
[ 1647.133671][T13925] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1647.281574][T13925] usb 4-1: Using ep0 maxpacket: 8
[ 1647.360460][T13925] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=e3.39
[ 1647.401748][T13925] usb 4-1: config 128 has an invalid interface number: 125 but max is 0
[ 1647.401815][T13925] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[ 1647.401899][T13925] usb 4-1: config 128 has no interface number 0
[ 1647.402179][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1647.402215][T13925] usb 4-1: config 128 interface 125 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[ 1647.402384][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1647.402417][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[ 1647.402451][T13925] usb 4-1: config 128 interface 125 altsetting 255 has a duplicate endpoint with address 0x5, skipping
[ 1647.402628][T13925] usb 4-1: config 128 interface 125 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[ 1647.402661][T13925] usb 4-1: config 128 interface 125 altsetting 255 has an endpoint descriptor with address 0xEA, changing to 0x8A
[ 1647.402692][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x8A has invalid maxpacket 1023, setting to 64
[ 1647.402730][T13925] usb 4-1: config 128 interface 125 altsetting 255 has a duplicate endpoint with address 0x5, skipping
[ 1647.402761][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1647.403966][T13925] usb 4-1: config 128 interface 125 altsetting 255 has a duplicate endpoint with address 0x5, skipping
[ 1647.404507][T13925] usb 4-1: config 128 interface 125 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1647.405063][T13925] usb 4-1: config 128 interface 125 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[ 1647.405126][T13925] usb 4-1: config 128 interface 125 has no altsetting 0
[ 1648.023054][T13925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.023089][T13925] usb 4-1: Product: ф
[ 1648.023132][T13925] usb 4-1: Manufacturer: 䶩᭍鲣֟❝夬틤̸
[ 1648.023173][T13925] usb 4-1: SerialNumber: 琺ꌅߐ蝏ꐓ榦簣힮턹殉ዉʬꪙМ栒ꒋ鬴볽隔龼燅⥧괷
[ 1648.701612][T13925] kvaser_usb 4-1:128.125: error -ENODEV: Cannot get usb endpoint(s)
[ 1649.000272][T13925] usb 4-1: USB disconnect, device number 14
[ 1649.099047][T16944] usb 2-1: USB disconnect, device number 116
[ 1649.625282][T19177] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1649.711451][T16944] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1649.861387][T10550] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1649.881534][T16944] usb 2-1: Using ep0 maxpacket: 32
[ 1649.883474][T16944] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1649.885658][T16944] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1649.885673][T16944] usb 2-1: config 0 has no interface number 0
[ 1649.888037][T16944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.888052][T16944] usb 2-1: Product: syz
[ 1649.888061][T16944] usb 2-1: Manufacturer: syz
[ 1649.888070][T16944] usb 2-1: SerialNumber: syz
[ 1649.923418][T16944] usb 2-1: config 0 descriptor??
[ 1650.021024][T10550] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1650.023257][T10550] usb 3-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1650.023281][T10550] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1650.023319][T10550] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1650.039393][T10550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.039417][T10550] usb 3-1: Product: syz
[ 1650.039433][T10550] usb 3-1: Manufacturer: syz
[ 1650.039448][T10550] usb 3-1: SerialNumber: syz
[ 1651.109679][T13761] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1651.127499][T16944] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[ 1651.127529][T16944] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1651.219108][T19192] jffs2: notice: (19192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1651.235993][   T31] audit: type=1400 audit(1789493770.143:2314): avc:  denied  { write } for  pid=19179 comm="syz.2.3169" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1651.273030][ T5794] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1651.352775][T13761] usb 4-1: Using ep0 maxpacket: 8
[ 1651.353699][T13761] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1651.360706][T13761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1651.360736][T13761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1651.360776][T13761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1651.415108][ T5794] usb 7-1: device descriptor read/64, error -71
[ 1651.420179][T13761] usb 4-1: config 0 descriptor??
[ 1651.651473][ T5794] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1651.655291][T13761] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1651.751823][T16944] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1651.752026][T16944] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1651.760195][T16944] usb 2-1: USB disconnect, device number 117
[ 1651.790673][ T5794] usb 7-1: device descriptor read/64, error -71
[ 1651.865635][T13925] usb 4-1: USB disconnect, device number 15
[ 1651.865664][    C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1651.892318][ T5794] usb usb7-port1: attempt power cycle
[ 1652.231372][ T5794] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1652.259410][ T5794] usb 7-1: device descriptor read/8, error -71
[ 1652.368047][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'.
[ 1652.386823][T19195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1652.491549][ T5794] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1652.515679][ T5794] usb 7-1: device descriptor read/8, error -71
[ 1652.624307][ T5794] usb usb7-port1: unable to enumerate USB device
[ 1652.669688][T10550] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22
[ 1652.687789][T10550] usb 3-1: USB disconnect, device number 9
[ 1652.899284][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'.
[ 1652.926221][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3186'.
[ 1653.496342][T19218] 9pnet_fd: Insufficient options for proto=fd
[ 1653.841363][T13925] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1653.988286][T19222] i2c i2c-0: dtv_property_process_set: SET cmd 0x6b636f73 undefined
[ 1654.017183][T13925] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1654.018301][T13925] usb 4-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[ 1654.018323][T13925] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1654.018342][T13925] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1654.019888][T13925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.019903][T13925] usb 4-1: Product: syz
[ 1654.019912][T13925] usb 4-1: Manufacturer: syz
[ 1654.019920][T13925] usb 4-1: SerialNumber: syz
[ 1654.657512][T19228] jffs2: notice: (19228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1654.691432][   T31] audit: type=1400 audit(1789493773.583:2315): avc:  denied  { write } for  pid=19198 comm="syz.3.3183" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1656.367113][T13925] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[ 1656.384294][T13925] usb 4-1: USB disconnect, device number 16
[ 1657.153326][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'.
[ 1657.275612][   T31] audit: type=1400 audit(1789493776.193:2316): avc:  denied  { relabelfrom } for  pid=19239 comm="syz.1.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1657.286293][   T31] audit: type=1400 audit(1789493776.203:2317): avc:  denied  { relabelto } for  pid=19239 comm="syz.1.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1657.313351][T19237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.405059][T19250] jffs2: notice: (19250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1657.609530][   T31] audit: type=1400 audit(1789493776.523:2318): avc:  denied  { map } for  pid=19239 comm="syz.1.3195" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1657.609576][   T31] audit: type=1400 audit(1789493776.523:2319): avc:  denied  { execute } for  pid=19239 comm="syz.1.3195" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1657.707872][T19256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.741628][T13925] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1657.871364][T13925] usb 7-1: device descriptor read/64, error -71
[ 1657.954503][ T5794] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1658.101514][ T5794] usb 3-1: Using ep0 maxpacket: 8
[ 1658.102060][ T5794] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1658.102936][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1658.102955][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1658.102977][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.108033][ T5794] usb 3-1: config 0 descriptor??
[ 1658.139404][T13925] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[ 1658.172032][T10550] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1658.281350][T13925] usb 7-1: device descriptor read/64, error -71
[ 1658.315172][ T5794] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1658.335756][T10550] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1658.336657][T10550] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1658.336679][T10550] usb 4-1: config 0 has no interface number 0
[ 1658.338523][T10550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.338537][T10550] usb 4-1: Product: syz
[ 1658.338546][T10550] usb 4-1: Manufacturer: syz
[ 1658.338554][T10550] usb 4-1: SerialNumber: syz
[ 1658.340255][T10550] usb 4-1: config 0 descriptor??
[ 1658.376563][T13761] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1658.407236][T13925] usb usb7-port1: attempt power cycle
[ 1658.522063][T18367] usb 3-1: USB disconnect, device number 10
[ 1658.522163][    C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1658.548393][T13761] usb 2-1: Using ep0 maxpacket: 8
[ 1658.554389][T10550] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1658.554620][T13761] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1658.555528][T13761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1658.555557][T13761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1658.555594][T13761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.557712][T10550] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1658.557894][T10550] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1658.557919][T10550] usb 4-1: media controller created
[ 1658.559383][T13761] usb 2-1: config 0 descriptor??
[ 1658.633372][T10550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1658.741410][T13925] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[ 1658.768860][T13761] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1658.777284][T13925] usb 7-1: device descriptor read/8, error -71
[ 1658.978647][T18367] usb 2-1: USB disconnect, device number 118
[ 1658.978699][    C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1659.012027][T13925] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 1659.033115][T13925] usb 7-1: device descriptor read/8, error -71
[ 1659.141607][T13925] usb usb7-port1: unable to enumerate USB device
[ 1659.532075][T18367] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1659.681420][T18367] usb 3-1: Using ep0 maxpacket: 8
[ 1659.684571][T18367] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1659.685443][T18367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[ 1659.685472][T18367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[ 1659.685509][T18367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.688094][T18367] usb 3-1: config 0 descriptor??
[ 1659.693532][T10550] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 1659.696042][T19263] usb 4-1: dvb_usb_ec168: I2C read not implemented
[ 1659.783915][T10550] usb 4-1: USB disconnect, device number 17
[ 1659.895975][T18367] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1660.052621][T13925] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1660.074049][T19298] netlink: 'syz.5.3210': attribute type 2 has an invalid length.
[ 1660.074720][   T31] audit: type=1400 audit(1789493778.993:2320): avc:  denied  { connect } for  pid=19297 comm="syz.5.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1660.121699][T10550] usb 3-1: USB disconnect, device number 11
[ 1660.121795][    C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1660.129679][   T31] audit: type=1400 audit(1789493779.043:2321): avc:  denied  { setopt } for  pid=19297 comm="syz.5.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1660.201326][T13925] usb 2-1: Using ep0 maxpacket: 8
[ 1660.202026][T13925] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1660.202920][T13925] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1660.202944][T13925] usb 2-1: config 0 has no interface number 0
[ 1660.204892][T13925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.204915][T13925] usb 2-1: Product: syz
[ 1660.204930][T13925] usb 2-1: Manufacturer: syz
[ 1660.204945][T13925] usb 2-1: SerialNumber: syz
[ 1660.207819][T13925] usb 2-1: config 0 descriptor??
[ 1660.356091][T19306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1660.478600][T19292] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16)
[ 1660.482099][T13925] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1660.482158][T13925] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized!
[ 1660.518222][T13925] usb 2-1: USB disconnect, device number 119
[ 1660.570091][   T31] audit: type=1400 audit(1789493779.483:2322): avc:  denied  { write } for  pid=19301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1660.635343][T19313] 
[ 1660.637928][T19313] ======================================================
[ 1660.645633][T19313] WARNING: possible circular locking dependency detected
[ 1660.653343][T19313] syzkaller #0 Tainted: G             L     
[ 1660.659896][T19313] ------------------------------------------------------
[ 1660.667589][T19313] syz.6.3212/19313 is trying to acquire lock:
[ 1660.674258][T19313] ffff88806cfbb138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90
[ 1660.684968][T19313] 
[ 1660.684968][T19313] but task is already holding lock:
[ 1660.693047][T19313] ffff888031daa080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1660.703268][T19313] 
[ 1660.703268][T19313] which lock already depends on the new lock.
[ 1660.703268][T19313] 
[ 1660.714682][T19313] 
[ 1660.714682][T19313] the existing dependency chain (in reverse order) is:
[ 1660.724568][T19313] 
[ 1660.724568][T19313] -> #3 (&of->mutex){+.+.}-{4:4}:
[ 1660.732493][T19313]        lock_acquire+0x1d1/0x380
[ 1660.738002][T19313]        __mutex_lock+0x1a4/0x1bd0
[ 1660.743609][T19313]        kernfs_seq_start+0x4f/0x2a0
[ 1660.749403][T19313]        seq_read_iter+0x2c1/0x1270
[ 1660.755101][T19313]        kernfs_fop_read_iter+0x46c/0x610
[ 1660.761368][T19313]        copy_splice_read+0x4ba/0xbb0
[ 1660.767255][T19313]        do_splice_read+0x285/0x370
[ 1660.772949][T19313]        splice_direct_to_actor+0x2a1/0xa30
[ 1660.779415][T19313]        do_splice_direct+0x174/0x240
[ 1660.785308][T19313]        do_sendfile+0xadc/0xe20
[ 1660.790715][T19313]        __x64_sys_sendfile64+0x1d8/0x220
[ 1660.796985][T19313]        do_syscall_64+0x123/0x790
[ 1660.802587][T19313]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.809620][T19313] 
[ 1660.809620][T19313] -> #2 (&p->lock){+.+.}-{4:4}:
[ 1660.817337][T19313]        lock_acquire+0x1d1/0x380
[ 1660.822839][T19313]        __mutex_lock+0x1a4/0x1bd0
[ 1660.828443][T19313]        seq_read_iter+0xe1/0x1270
[ 1660.834047][T19313]        proc_reg_read_iter+0x220/0x310
[ 1660.840128][T19313]        copy_splice_read+0x4ba/0xbb0
[ 1660.846016][T19313]        do_splice_read+0x285/0x370
[ 1660.851712][T19313]        splice_file_to_pipe+0x82/0x120
[ 1660.857788][T19313]        do_sendfile+0x366/0xe20
[ 1660.863190][T19313]        __x64_sys_sendfile64+0x1d8/0x220
[ 1660.869460][T19313]        do_syscall_64+0x123/0x790
[ 1660.875060][T19313]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.882090][T19313] 
[ 1660.882090][T19313] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[ 1660.890183][T19313]        lock_acquire+0x1d1/0x380
[ 1660.895683][T19313]        __mutex_lock+0x1a4/0x1bd0
[ 1660.901285][T19313]        anon_pipe_prefill_and_lock+0x16c/0x580
[ 1660.908127][T19313]        anon_pipe_write+0x164/0x1b50
[ 1660.914011][T19313]        __kernel_write_iter+0x6bb/0x930
[ 1660.920181][T19313]        __kernel_write+0xf6/0x140
[ 1660.925774][T19313]        autofs_notify_daemon+0x50d/0xd90
[ 1660.932048][T19313]        autofs_wait+0x10fd/0x1b50
[ 1660.937649][T19313]        autofs_mount_wait+0x132/0x3b0
[ 1660.943632][T19313]        autofs_d_automount+0x490/0x950
[ 1660.949713][T19313]        __traverse_mounts+0x1b9/0x8a0
[ 1660.955701][T19313]        step_into_slowpath+0xb7e/0xf90
[ 1660.961773][T19313]        path_lookupat+0x58b/0xc40
[ 1660.967367][T19313]        filename_lookup+0x202/0x590
[ 1660.973174][T19313]        user_path_at+0x3c/0x60
[ 1660.978485][T19313]        __x64_sys_umount+0x10a/0x1a0
[ 1660.984371][T19313]        do_syscall_64+0x123/0x790
[ 1660.989971][T19313]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.997000][T19313] 
[ 1660.997000][T19313] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1661.005480][T19313]        check_prev_add+0xeb/0xe60
[ 1661.011081][T19313]        __lock_acquire+0x1528/0x1f40
[ 1661.016962][T19313]        lock_acquire+0x1d1/0x380
[ 1661.022561][T19313]        __mutex_lock+0x1a4/0x1bd0
[ 1661.028163][T19313]        autofs_notify_daemon+0x4f8/0xd90
[ 1661.034437][T19313]        autofs_wait+0x10fd/0x1b50
[ 1661.040038][T19313]        autofs_mount_wait+0x132/0x3b0
[ 1661.046021][T19313]        autofs_d_automount+0x490/0x950
[ 1661.052099][T19313]        __traverse_mounts+0x1b9/0x8a0
[ 1661.058082][T19313]        step_into_slowpath+0xb7e/0xf90
[ 1661.064154][T19313]        path_lookupat+0x58b/0xc40
[ 1661.069749][T19313]        filename_lookup+0x202/0x590
[ 1661.075544][T19313]        kern_path+0x37/0x50
[ 1661.080572][T19313]        lookup_bdev+0xd8/0x2a0
[ 1661.085893][T19313]        resume_store+0x1d6/0x460
[ 1661.091405][T19313]        kobj_attr_store+0x58/0x80
[ 1661.097022][T19313]        sysfs_kf_write+0xf2/0x150
[ 1661.102620][T19313]        kernfs_fop_write_iter+0x3e0/0x5f0
[ 1661.108979][T19313]        vfs_write+0x6af/0x1050
[ 1661.114290][T19313]        ksys_write+0x12a/0x250
[ 1661.119597][T19313]        do_syscall_64+0x123/0x790
[ 1661.125199][T19313]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.132231][T19313] 
[ 1661.132231][T19313] other info that might help us debug this:
[ 1661.132231][T19313] 
[ 1661.143450][T19313] Chain exists of:
[ 1661.143450][T19313]   &sbi->pipe_mutex --> &p->lock --> &of->mutex
[ 1661.143450][T19313] 
[ 1661.156708][T19313]  Possible unsafe locking scenario:
[ 1661.156708][T19313] 
[ 1661.164874][T19313]        CPU0                    CPU1
[ 1661.170745][T19313]        ----                    ----
[ 1661.176620][T19313]   lock(&of->mutex);
[ 1661.180973][T19313]                                lock(&p->lock);
[ 1661.187909][T19313]                                lock(&of->mutex);
[ 1661.195037][T19313]   lock(&sbi->pipe_mutex);
[ 1661.199965][T19313] 
[ 1661.199965][T19313]  *** DEADLOCK ***
[ 1661.199965][T19313] 
[ 1661.208892][T19313] locks held by syz.6.3212/19313: 4, last CPU#1:
[ 1661.215826][T19313]  #0: ffff888054ec9b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1661.225762][T19313]  #1: ffff88803866a460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1661.235596][T19313]  #2: ffff888031daa080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1661.246291][T19313]  #3: ffff888020adae18 (kn->active#89){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1661.257277][T19313] 
[ 1661.257277][T19313] stack backtrace:
[ 1661.263729][T19313] CPU: 1 UID: 0 PID: 19313 Comm: syz.6.3212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1661.275730][T19313] Tainted: [L]=SOFTLOCKUP
[ 1661.280456][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1661.291487][T19313] Call Trace:
[ 1661.295069][T19313]  <TASK>
[ 1661.298269][T19313]  dump_stack_lvl+0x100/0x190
[ 1661.303404][T19313]  print_circular_bug.cold+0x178/0x1be
[ 1661.309396][T19313]  check_noncircular+0x146/0x160
[ 1661.314811][T19313]  check_prev_add+0xeb/0xe60
[ 1661.319837][T19313]  __lock_acquire+0x1528/0x1f40
[ 1661.325154][T19313]  lock_acquire+0x1d1/0x380
[ 1661.330084][T19313]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1661.335975][T19313]  ? __pfx___might_resched+0x10/0x10
[ 1661.341766][T19313]  __mutex_lock+0x1a4/0x1bd0
[ 1661.346800][T19313]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1661.352694][T19313]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1661.358602][T19313]  ? find_held_lock+0x2b/0x80
[ 1661.363729][T19313]  ? autofs_notify_daemon+0x4a0/0xd90
[ 1661.369618][T19313]  ? autofs_notify_daemon+0x4a0/0xd90
[ 1661.375508][T19313]  ? __pfx___mutex_lock+0x10/0x10
[ 1661.381018][T19313]  ? __mutex_unlock_slowpath+0x35d/0x930
[ 1661.387195][T19313]  ? from_kgid_munged+0xab/0x130
[ 1661.392604][T19313]  ? __pfx_from_kgid_munged+0x10/0x10
[ 1661.398491][T19313]  ? path_lookupat+0x58b/0xc40
[ 1661.403708][T19313]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1661.409601][T19313]  autofs_notify_daemon+0x4f8/0xd90
[ 1661.415301][T19313]  ? __pfx_autofs_notify_daemon+0x10/0x10
[ 1661.421583][T19313]  ? lockdep_init_map_type+0x5c/0x250
[ 1661.427469][T19313]  ? lockdep_init_map_type+0x5c/0x250
[ 1661.433356][T19313]  autofs_wait+0x10fd/0x1b50
[ 1661.438396][T19313]  ? __pfx_autofs_wait+0x10/0x10
[ 1661.443807][T19313]  ? find_held_lock+0x2b/0x80
[ 1661.448931][T19313]  ? path_has_submounts+0xcf/0x120
[ 1661.454527][T19313]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1661.460225][T19313]  ? find_held_lock+0x2b/0x80
[ 1661.465351][T19313]  autofs_mount_wait+0x132/0x3b0
[ 1661.470767][T19313]  autofs_d_automount+0x490/0x950
[ 1661.476299][T19313]  __traverse_mounts+0x1b9/0x8a0
[ 1661.481716][T19313]  step_into_slowpath+0xb7e/0xf90
[ 1661.487235][T19313]  ? rcu_is_watching+0x13/0xc0
[ 1661.492459][T19313]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1661.498533][T19313]  ? lookup_slow+0x5b/0x70
[ 1661.503374][T19313]  ? lookup_slow+0x5b/0x70
[ 1661.508220][T19313]  path_lookupat+0x58b/0xc40
[ 1661.513247][T19313]  filename_lookup+0x202/0x590
[ 1661.518468][T19313]  ? __pfx_filename_lookup+0x10/0x10
[ 1661.524265][T19313]  ? do_getname_kernel+0x5d/0x250
[ 1661.529774][T19313]  ? __asan_memcpy+0x3c/0x60
[ 1661.534802][T19313]  kern_path+0x37/0x50
[ 1661.539252][T19313]  lookup_bdev+0xd8/0x2a0
[ 1661.544000][T19313]  ? __pfx_lookup_bdev+0x10/0x10
[ 1661.549416][T19313]  ? __asan_memcpy+0x3c/0x60
[ 1661.554440][T19313]  resume_store+0x1d6/0x460
[ 1661.559379][T19313]  ? __pfx_resume_store+0x10/0x10
[ 1661.564890][T19313]  ? lock_acquire+0x1d1/0x380
[ 1661.570011][T19313]  ? sysfs_file_kobj+0x21/0x290
[ 1661.575323][T19313]  ? find_held_lock+0x2b/0x80
[ 1661.580446][T19313]  ? sysfs_file_kobj+0xe4/0x290
[ 1661.585757][T19313]  ? sysfs_file_kobj+0xe4/0x290
[ 1661.591071][T19313]  ? __pfx_resume_store+0x10/0x10
[ 1661.596575][T19313]  kobj_attr_store+0x58/0x80
[ 1661.601608][T19313]  ? __pfx_kobj_attr_store+0x10/0x10
[ 1661.607402][T19313]  sysfs_kf_write+0xf2/0x150
[ 1661.612429][T19313]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1661.618216][T19313]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1661.623911][T19313]  vfs_write+0x6af/0x1050
[ 1661.628653][T19313]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1661.635015][T19313]  ? __pfx_vfs_write+0x10/0x10
[ 1661.640230][T19313]  ? find_held_lock+0x2b/0x80
[ 1661.645367][T19313]  ksys_write+0x12a/0x250
[ 1661.650105][T19313]  ? __pfx_ksys_write+0x10/0x10
[ 1661.655419][T19313]  do_syscall_64+0x123/0x790
[ 1661.660450][T19313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.666911][T19313] RIP: 0033:0x7f984539e159
[ 1661.671742][T19313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1661.693283][T19313] RSP: 002b:00007f984625a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1661.702512][T19313] RAX: ffffffffffffffda RBX: 00007f9845625fa0 RCX: 00007f984539e159
[ 1661.711274][T19313] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009
[ 1661.720014][T19313] RBP: 00007f984543503b R08: 0000000000000000 R09: 0000000000000000
[ 1661.728755][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1661.737496][T19313] R13: 00007f9845626038 R14: 00007f9845625fa0 R15: 00007ffe698cd4e8
[ 1661.746248][T19313]  </TASK>
[ 1661.759413][T19298] gprs0: detached
[ 1661.764363][T16008] Bluetooth: hci5: command 0x0406 tx timeout
[ 1661.795853][   T31] audit: type=1400 audit(1789493780.713:2323): avc:  denied  { write } for  pid=19317 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1661.829525][T19313] PM: Image not found (code -6)
[ 1661.997127][   T31] audit: type=1400 audit(1789493780.913:2324): avc:  denied  { write } for  pid=19323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1662.038107][   T31] audit: type=1400 audit(1789493780.953:2325): avc:  denied  { write } for  pid=19334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1668.812193][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.812236][ T1307] ieee802154 phy1 wpan1: encryption failed: -22