last executing test programs:

3m13.458453114s ago: executing program 2 (id=610):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2ea3c1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x1, 0x1, 0x80d8, 0x3f, 0x15, "3eccee2b69e20900"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = fsopen(&(0x7f0000000380)='exfat\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = fsmount(r3, 0x0, 0x80)
setreuid(0xee01, 0xee01)
r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000200)={0x2b0859100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10d00, 0xf)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x5000000, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r7, &(0x7f0000001200)={'#! ', './file0'}, 0xb)
close(r7)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

3m12.218678623s ago: executing program 2 (id=614):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4})
r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r7, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {0x0}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)

3m10.975590379s ago: executing program 2 (id=617):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x101, 0x4, {0x400e802, 0x1, 0x7, 0xfff}})

3m10.873934737s ago: executing program 2 (id=618):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:clock_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = syz_pidfd_open(r3, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
shutdown(r8, 0x1)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'ni_daq_700\x00', [0xd00, 0x6, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]})
waitid$P_PIDFD(0x3, r6, 0x0, 0x8, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x400, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x440d8}}, 0x20}}, 0x1)

3m10.45810838s ago: executing program 2 (id=622):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
rmdir(&(0x7f0000000100)='./control\x00')

3m10.177867121s ago: executing program 2 (id=625):
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000700f7ffffffff28ac94583b91", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000004e000000a5393500080000008510000000000000186000000200000000000000e6050000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xd9, &(0x7f00000007c0)=""/217, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x8, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x8, 0x9}, {0x2, 0x5, 0x10, 0x8}, {0x4, 0x1, 0xb, 0xa}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xef, 0x0, &(0x7f0000000980)="387369380e3b9ae2ca4c9850df0f002157181a2ee6ba4ce4a011b54c9c7ed640c1b13d96d38ad86cd8942712acc7aecd30e850892d50f463e140a8da755843f9de5a81a7ebfb74cd9936e1a587e628d1431172d0a285be473ffebd397c29cc114fc5e81157f2be979fd1e415bf234f1c6f42e834db1a1b8563ab13fe0aa25311420de0aa90216badec4e5d1b5fa552896266acefff93cb58a2b873c7a957f11a9912302c8872983207ccb206029b11c9afa692a0dc9803c4962eaf2d8d339e1930a7cd6b831a22a5f0523276fdc02ec3ab2dbf184bd75d7e6d26e227e55866d090bbc1fb285fbd10f9a33caee9960a", 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x4}, 0x50)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f00000008c0), 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001fc0))
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100))
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x2, 0x2, 0x1)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = socket(0x2, 0x2, 0x1)
bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106)
readv(r5, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1)
dup(r2)
r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c686"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}])
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0xc0)

3m9.780134593s ago: executing program 32 (id=625):
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000700f7ffffffff28ac94583b91", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000004e000000a5393500080000008510000000000000186000000200000000000000e6050000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xd9, &(0x7f00000007c0)=""/217, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x8, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x8, 0x9}, {0x2, 0x5, 0x10, 0x8}, {0x4, 0x1, 0xb, 0xa}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xef, 0x0, &(0x7f0000000980)="387369380e3b9ae2ca4c9850df0f002157181a2ee6ba4ce4a011b54c9c7ed640c1b13d96d38ad86cd8942712acc7aecd30e850892d50f463e140a8da755843f9de5a81a7ebfb74cd9936e1a587e628d1431172d0a285be473ffebd397c29cc114fc5e81157f2be979fd1e415bf234f1c6f42e834db1a1b8563ab13fe0aa25311420de0aa90216badec4e5d1b5fa552896266acefff93cb58a2b873c7a957f11a9912302c8872983207ccb206029b11c9afa692a0dc9803c4962eaf2d8d339e1930a7cd6b831a22a5f0523276fdc02ec3ab2dbf184bd75d7e6d26e227e55866d090bbc1fb285fbd10f9a33caee9960a", 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x4}, 0x50)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f00000008c0), 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001fc0))
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100))
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x2, 0x2, 0x1)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = socket(0x2, 0x2, 0x1)
bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106)
readv(r5, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1)
dup(r2)
r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c686"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}])
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0xc0)

15.350470128s ago: executing program 1 (id=1059):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009400c0ffffffffff9500000000000000264708a7bbd864687d924f589f3f93154b37f7dee0ea8495182324db19eedd31811f83923dbeaf624dd3dc2e00e44f43c425786e02f623944ab8a96c820bd0e67d6130d4e84e7a1a7a759e0c0b3b77471ce3bf0f22e1b80ce7c5ac98f761f1fe2c014c5103bd34d8278c734f84b0040c0850fd9f7c0f963ab6dc026aadbefece6847bf0704e438bd62539eaad06897561959dd20eec8031ba8997690bc95ff3339fab0bca2e6b74f64cb221024de00eb01f26c2739f9b150df"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8)
mount$nfs4(&(0x7f0000000200)=')::\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x201004, &(0x7f0000000640)={[{'!{]-'}, {'police\x00'}, {'\x00'}, {'}*-\x19(\\'}, {'/'}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@hash}]})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10d00, 0xf)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
close(0xffffffffffffffff)

12.139501433s ago: executing program 4 (id=1070):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000400)=0x13)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xd)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x8c, 0x8, 0x19, "007de521ec070ef4f834bbeda7f6647bbfdef7"})
openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000400140000fe000001000000000c001a0001530cd998", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000400)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440))

11.488600185s ago: executing program 1 (id=1073):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x206, 0x2b4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"})
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7)

10.677297993s ago: executing program 4 (id=1076):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.898892566s ago: executing program 4 (id=1077):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1)

9.049163529s ago: executing program 4 (id=1080):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWMDB={0x18, 0x54, 0x100, 0x70bd27, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc850)
syz_usb_connect(0x4, 0x2b9, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0x62, 0x20, 0xeb1a, 0x8179, 0x1e73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a7, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x5, 0xf9, 0xca, 0xb4, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x2, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}, @generic={0x9c, 0x21, "d92dc6d1c32e6aef20e42b80634656d887340dd570238e18e0ad19b34f0cd6160529793fb0a2694157fe9c05499aa4dcb0145acd36641c4867b47fb36d35778f75c08fdb7d39093d0a754dc4dfe19f9e4164e42a778c2dbc9edb0a0097bda2917e86908e943bd349452f888cda38cc94ab4fb024a8bb387907bed8a3152cb1f04ed3d9f53d35ed7baef35a6ae6d821c172a7eb2640f8512c4cce"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x5, 0xcc, 0x3, [@generic={0x9a, 0x24, "8a14fe79fbcfaf694654197e1f50c420000c1c0872821becd425efbafe5700c3ec846ac0c56596aa72db2ae938fc8e7612a4c1b1af8cbea5bbd9caed1cbc2ad8ede7cf2e7a71bed922ec31da44420a3be29271febe9cdb3c714455e935277056cd18aa82c7e1d53d7db2fdb8c6be1516c17daa919d3fa3f367d9c4bc96e41adca82aff28e36cf9aa0c1f30d5beac4667b366b1b812d67ff0"}]}}, {{0x9, 0x5, 0x1d, 0x0, 0x400, 0x7, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}, @generic={0xb5, 0x21, "29769dd398d991314956ae4ab57adc96a7fbf7b4bf249beebf347b5f2f9e2ed9537a55d6c7b4bd4ce023a585b372b2d4a2a40d291bf3b6b582df55129290dbb5871cf45f646b42b6f6bb622c851ad9f4dad0d7e7620bb7e5acad0ccfb60c86dd7b94189a1d82b463f5fcd265edfdf817ebe5469e42d1db6d275b8755ca3eaf3189bb41dad390dfb5cb2811c0b153d20002a0b48ab349dd9c31e6caf2043996a564e76a87b6f3a23b0fd5ea9aab7163606e0ee3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x9, 0x9, [@generic={0x6f, 0x9, "88c35f0355190d71c977728c9d9015ddd2c50c62eac4b942be4c8a615ff950da24784263770efc4cd4517e766d16aaa1428219f3b641549c5eee53fdbfe20221656b6916ea5a9a669f8551e075ff7298c7b01b7124ca3309946c0e41f504ca211ea32502e5172c9e99f3ccf4d0"}]}}]}}]}}]}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
write$char_usb(r3, 0x0, 0x0)
r9 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)

8.40334206s ago: executing program 5 (id=1082):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setuid(0xee01)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8001}, 0x1c)
socket$kcm(0xa, 0x922000000002, 0x11)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

7.773397535s ago: executing program 0 (id=1084):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0xffffffffffffffe8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYRES32=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
ustat(0x11, &(0x7f0000000600))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xe4ff, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0x84, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

7.722360306s ago: executing program 1 (id=1085):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x200, 0x2000006, 0x3ce}, &(0x7f0000000040), 0x0)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc0106442, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x800000000000000, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7", 0x12, 0x0, 0x0, 0x0)
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee)
close(r3)
mknod(0x0, 0x1ffa, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x5ac, 0x11, 0x111, 0x70bd07, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x8, 0xffff}, {0xfff1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x77}, @filter_kind_options=@f_flow={{0x9}, {0x56c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_EMATCHES={0x3a4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x82}, {0x400, 0x6, 0x0, "0a64d0a13c4e"}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x97}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="55bb44b847", @TCF_META_TYPE_VAR="eaa3df3aa1b225ba63"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="aba461b302e409265f"]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="52845ea865db81383260", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x663}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xf}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x3}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x100, 0x2, 0x0, 0x0, {{0xbb77, 0x0, 0xffff}, "73ef516e8dbd02b7cf4e5d50c5de18a30e144c7e9c71656c226a0bbad423eb9a5b081b606e09e8a1100a6b5ba95e178d04e6e442c3e47b02221ba5f51efe9f15d667144957259db45f50633f5dadc2d5bd3bc857a829272cfc83f0c08559dbf3b867e4ea6554e7d795c3bfb20d212c665d382996ed70c9ecc0d4b84deb1fa1814f474d2844b41d3172fa4c9ccb30e71f40ec2b736592efb61f17b47107add648385be9ac796e21a958791a0a5428ce4ca5d32d3ef0a927c73aa8d592b44a2d9cbdded40976c83ae8bc48c7c7d393d5efd66bba362122f4818945760fe2cc79070edb2600a2fdf91708f8bc38898a900f27"}}, @TCF_EM_IPT={0x54, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xfffe}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0x9, 0x5, "10d59de156"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x7, 0x6, 0x1000, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x719a, 0x1, 0xb}, {0x7, 0x0, 0x5, 0x1, 0xa, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x86ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}, "4eac8e7f9317f1437bc22768c08b8e6d682ebb9eba5622d76d601b5d8573bf003bd825231f124c096ebe3e800760d1000595301e9dd4b19a12adf53fef0df62d2d956a860f0951ace889fedf2cfa407825701a3572db3f192d4f24a0f2caf3596332c96452608f7c32b4caf749529919b6fe8e13c2527822f13906cd33250a7cacc1dda7ae93b7a8842e2e696fa3b07ccb00ad57ee4b916d58051d914449b5b841e7167ae7264220a4182877fac5e18c9c8ee0402a4e2260587ac6ec69a8e70671e4d135c8bfb23930033ddd4235356b5378b6b1817bc817b5"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x9}, {0x9, 0x8000, 0x8000, 0x1}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x79, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8d, 0x2}, {0x3ff, 0x7f}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="8f20c12dc5"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1}}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ACT={0x1b4, 0x9, 0x0, 0x1, [@m_mpls={0x128, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}]}, {0xe2, 0x6, "d205751c61cea95f8099dbe6ac91919f5957c1d70e413400689e80463b3e440e60fac431fb85cfb4a4fff118bc2839e6a8348cde0631648a4a5cd9bcaf5d1e4ee65ff139fc465e880a9aa8d541fbb381bfca54cb88590c1f39d3b605f2411bd79e08728616f5c612dee4e285ef6b7b72b0d59a2df0c11e80465291d9dcf4f0e6d038a3f99732e3289abf556cf2eac785940b0e432d40aa4122770a85d7782a2855d02765093f00f7f6a6c162a9b2f3be34854bb188df602295d618c86241766b47e27b2c3a55cb3face75e05a9d32b79916258a47d72b83dafe3499d8948"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x88, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x52, 0x6, "a4e20e611102e7d4d7792eacf626174056ae38df7e989a4d3dede02bf4ef7448db5618be1ab84d736d29a2f3cadb1102206964ae7263d6c61f06ee9dda22d5bff4bf7657672277a7e4d0343c6773"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xff}}]}, 0x5ac}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x8080)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r7, 0x6)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0)

7.556649993s ago: executing program 5 (id=1086):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x7, 0x81)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)

6.201802348s ago: executing program 1 (id=1087):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="3d00009d000000", @ANYRESHEX, @ANYBLOB=',k'])
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f00000011c0)={0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, 0x140, 0x3, 0x4, 0xffff, 0x4, 0xffffffff, 0x3})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index, 0x3, &(0x7f0000001280)="d1ec9c58089ae928a7ef684808282c06fe7b450e002c639f76d2972fdd8d3c3a015c49048731aa9b56edd0715fda66237612c2b77cce8dee132f81634bbb7795614e7e0bdd0c28a49522b85135b5ab078bc47451c2c3aabf484ca6135fbe783b2cad3aab357fad8428666280e462bb0fc98e625a4855e226e7c28ee3367c1c67559a6e999170a8d4768e38c185f2ea5a620238483864f06a701f66fa699a60b44b", 0xa1, 0xc, 0x1})
io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0)
exit(0x7)

6.05336064s ago: executing program 5 (id=1088):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000881)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x80c00, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000680)={0x200, 0x4})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xa)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x1403, 0x200, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4004860)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)

5.634121908s ago: executing program 0 (id=1089):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r4 = socket$inet6(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)

4.71844703s ago: executing program 0 (id=1091):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x2ed5, 0x2004c8, 0x0, 0x0, 0x3, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003, 0x4040})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000340)={0xc0000008})
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000140))
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16], 0x1000f)

4.156489347s ago: executing program 3 (id=1092):
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x8, 0x1000}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x1800}]}}]}, 0x38}}, 0x0)
listen(r0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80400)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000680)={<r11=>0x0, @dev, @loopback}, &(0x7f00000006c0)=0xc)
bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x11, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14)
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x400000400, {0x0, 0x0, 0x0, {0x2, 0x10000000, 0x0, 0x6, 0x7ff, 0xfffffffffffffffd, 0x0, 0x3966, 0x3, 0x8000, 0x4, r9, r10, 0xc3d, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x400, 0x2, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0})
r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x2400, 0x0)
sendmmsg$unix(r6, &(0x7f0000001780)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000008340)="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", 0x1116}, {&(0x7f0000000240)="3770fab68cbdd96363b4a65028d31ce5b06d93c95973574c07ed10c558b660320b9feff400ec8d757c65c01e6955fa081519ba306838f99523ac38832f805fbbef3abccdab256b9d6f8449f9e5cb76c3b4bef4739dfb09e87ba911a3d10ce0b7916fbd89e7ff565a04a10cdfcca3e24b200c3bfc5f4457d81a1162c2666cb40651df7ec2d23fdc31b10aba51e1ed1289faa3377ad4b704be578ec0da309bf02ffc9cc91517771cba08d25d", 0xab}, {&(0x7f00000003c0)="eafedee380cb38bb249c89cc82c2bf49d512ce927f779d49fabfcc55a806a093a74c1997e8f0d3fb34f45af0ebbebb4862c1f0c100a944ecee54cfa0dbe58072d2469d7f192f33e9d809aefcf358fc8953e0aee2fba6b5c2d0e423d34dcd6d93ecce0c8e27dd98ec11dc1ab2481298ddde63e94cc253ea7c60f2f77c69b593", 0x7f}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r14, r0, 0xffffffffffffffff, r4, r0]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x60, 0x4080}}], 0x1, 0x41)
r15 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d00010000000000000017cd4460bc08eab5569297d11e61828837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x69}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
r16 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r16, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r16, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r17 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r16, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})

3.853615772s ago: executing program 4 (id=1093):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb32d13b2a4a2719302000000030b43026c26236925000400d1870000bd2dca8a9848a3c728f1c46b7b31afdc13ea0c00000000000100005ae583de0dd7d8319f929ade", 0x4b}, {&(0x7f0000000080)="e5503937e17dcc5e2868", 0xa}], 0x2}, 0x0)
write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

3.846362625s ago: executing program 3 (id=1094):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x304, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x3e, 0xfd}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r2=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x30, 0x0, @ib={0x1b, 0x1, 0x1, {"f8430000000000000000000000070080"}, 0x7, 0x5, 0x3}}}, 0xa0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, 0x0, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRES64=r2], 0x48)

3.687666153s ago: executing program 3 (id=1095):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2f, 0x7, 0x91, {0x4, @usr_ip6_spec={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0xfffffffb, 0x80, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x6a2, 0x7, [0x7, 0x5]}, @esp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x7}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0xfff, 0x1, [0x1000, 0x9]}, 0x2, 0x800}, 0x9, [0x5, 0x4, 0xb, 0x8, 0xc6b, 0x81, 0x10000, 0x8, 0xffff]}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]})
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r5, 0x6, "030be4", "20e6fcd705aa5570aa272f04dea963805549211fd0023be06dd33d69e1733c663c0f3ddf5e0e1267833d632b0e702ab04b15223c09085dccd79835f0cf4f1eede5a81dc0b0124cf6df0daaa16850ed5e6dcb211fae72580f87558ddc90e7c41cad474918247b14d73fafd46c2b76670ce7d693498e73aa18177deed00e4e23827de654657bdf3b2858df5602859bcfbb2f902ddd5b10b710a204cb1fc5c977795f7cd43e5836bb656fec846a628a750efbe76f8d198edbea6b3eae97430b741866a37dec3ec7ed4cd95a15ec6041d38d970f41a167038dc69aa4bc8549e0de68822eb7848a8004b9840e02fb4a6c119b055ba50940c74e162e5648510656fe87"}}, 0x110)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timerfd_create(0x7, 0x800)

3.542128937s ago: executing program 0 (id=1096):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setuid(0xee01)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8001}, 0x1c)
socket$kcm(0xa, 0x922000000002, 0x11)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

3.136833374s ago: executing program 5 (id=1097):
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}}, 0x0, 0x26, 0x0, 0x6, 0x9}, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000})
r8 = fcntl$dupfd(r7, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8})

2.929328788s ago: executing program 1 (id=1098):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x200, 0x2000006, 0x3ce}, &(0x7f0000000040), 0x0)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc0106442, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x800000000000000, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7", 0x12, 0x0, 0x0, 0x0)
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee)
close(r3)
mknod(0x0, 0x1ffa, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x5ac, 0x11, 0x111, 0x70bd07, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x8, 0xffff}, {0xfff1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x77}, @filter_kind_options=@f_flow={{0x9}, {0x56c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_EMATCHES={0x3a4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x82}, {0x400, 0x6, 0x0, "0a64d0a13c4e"}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x97}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="55bb44b847", @TCF_META_TYPE_VAR="eaa3df3aa1b225ba63"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="aba461b302e409265f"]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="52845ea865db81383260", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x663}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xf}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x3}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x100, 0x2, 0x0, 0x0, {{0xbb77, 0x0, 0xffff}, "73ef516e8dbd02b7cf4e5d50c5de18a30e144c7e9c71656c226a0bbad423eb9a5b081b606e09e8a1100a6b5ba95e178d04e6e442c3e47b02221ba5f51efe9f15d667144957259db45f50633f5dadc2d5bd3bc857a829272cfc83f0c08559dbf3b867e4ea6554e7d795c3bfb20d212c665d382996ed70c9ecc0d4b84deb1fa1814f474d2844b41d3172fa4c9ccb30e71f40ec2b736592efb61f17b47107add648385be9ac796e21a958791a0a5428ce4ca5d32d3ef0a927c73aa8d592b44a2d9cbdded40976c83ae8bc48c7c7d393d5efd66bba362122f4818945760fe2cc79070edb2600a2fdf91708f8bc38898a900f27"}}, @TCF_EM_IPT={0x54, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xfffe}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0x9, 0x5, "10d59de156"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x7, 0x6, 0x1000, 0x2, 0xc, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x719a, 0x1, 0xb}, {0x7, 0x0, 0x5, 0x1, 0xa, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x86ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}, "4eac8e7f9317f1437bc22768c08b8e6d682ebb9eba5622d76d601b5d8573bf003bd825231f124c096ebe3e800760d1000595301e9dd4b19a12adf53fef0df62d2d956a860f0951ace889fedf2cfa407825701a3572db3f192d4f24a0f2caf3596332c96452608f7c32b4caf749529919b6fe8e13c2527822f13906cd33250a7cacc1dda7ae93b7a8842e2e696fa3b07ccb00ad57ee4b916d58051d914449b5b841e7167ae7264220a4182877fac5e18c9c8ee0402a4e2260587ac6ec69a8e70671e4d135c8bfb23930033ddd4235356b5378b6b1817bc817b5"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x9}, {0x9, 0x8000, 0x8000, 0x1}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x79, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8d, 0x2}, {0x3ff, 0x7f}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="8f20c12dc5"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1}}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ACT={0x1b4, 0x9, 0x0, 0x1, [@m_mpls={0x128, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}]}, {0xe2, 0x6, "d205751c61cea95f8099dbe6ac91919f5957c1d70e413400689e80463b3e440e60fac431fb85cfb4a4fff118bc2839e6a8348cde0631648a4a5cd9bcaf5d1e4ee65ff139fc465e880a9aa8d541fbb381bfca54cb88590c1f39d3b605f2411bd79e08728616f5c612dee4e285ef6b7b72b0d59a2df0c11e80465291d9dcf4f0e6d038a3f99732e3289abf556cf2eac785940b0e432d40aa4122770a85d7782a2855d02765093f00f7f6a6c162a9b2f3be34854bb188df602295d618c86241766b47e27b2c3a55cb3face75e05a9d32b79916258a47d72b83dafe3499d8948"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x88, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x52, 0x6, "a4e20e611102e7d4d7792eacf626174056ae38df7e989a4d3dede02bf4ef7448db5618be1ab84d736d29a2f3cadb1102206964ae7263d6c61f06ee9dda22d5bff4bf7657672277a7e4d0343c6773"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xff}}]}, 0x5ac}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x8080)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r7, 0x6)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0)

2.185818603s ago: executing program 5 (id=1099):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x0, 0x240)
write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12)

2.045932856s ago: executing program 5 (id=1100):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}}, 0x0, 0x26, 0x0, 0x6, 0x9}, 0x28)
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r7 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000})
r9 = fcntl$dupfd(r8, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9})
close_range(r1, 0xffffffffffffffff, 0x0)

1.958204987s ago: executing program 0 (id=1101):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4})
r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r7, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9c", 0xd1}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)

1.04609701s ago: executing program 3 (id=1102):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = syz_open_dev$dri(0x0, 0x1, 0x80000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540)})
r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c)
setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1608010800000000fe880000000000df0000000000000101ff010000000000000000000000000001fc000000000000000000000000000000ff020000000000000000000000000001"], 0x48)

690.432456ms ago: executing program 0 (id=1103):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0xffffff00, 'syz0\x00', 0x80001}, 0x6, 0x10000000, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0})
mkdir(0x0, 0x13b)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Cap'], 0x86)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
open(0x0, 0x80342, 0x1df2a23c5997fa5f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)

662.998073ms ago: executing program 1 (id=1104):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWMDB={0x18, 0x54, 0x100, 0x70bd27, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc850)
syz_usb_connect(0x4, 0x2bd, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0x62, 0x20, 0xeb1a, 0x8179, 0x1e73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ab, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x5, 0xf9, 0xca, 0xb4, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x2, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}, @generic={0x9c, 0x21, "d92dc6d1c32e6aef20e42b80634656d887340dd570238e18e0ad19b34f0cd6160529793fb0a2694157fe9c05499aa4dcb0145acd36641c4867b47fb36d35778f75c08fdb7d39093d0a754dc4dfe19f9e4164e42a778c2dbc9edb0a0097bda2917e86908e943bd349452f888cda38cc94ab4fb024a8bb387907bed8a3152cb1f04ed3d9f53d35ed7baef35a6ae6d821c172a7eb2640f8512c4cce"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x5, 0xcc, 0x3, [@generic={0x9a, 0x24, "8a14fe79fbcfaf694654197e1f50c420000c1c0872821becd425efbafe5700c3ec846ac0c56596aa72db2ae938fc8e7612a4c1b1af8cbea5bbd9caed1cbc2ad8ede7cf2e7a71bed922ec31da44420a3be29271febe9cdb3c714455e935277056cd18aa82c7e1d53d7db2fdb8c6be1516c17daa919d3fa3f367d9c4bc96e41adca82aff28e36cf9aa0c1f30d5beac4667b366b1b812d67ff0"}]}}, {{0x9, 0x5, 0x1d, 0x0, 0x400, 0x7, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}, @generic={0xb5, 0x21, "29769dd398d991314956ae4ab57adc96a7fbf7b4bf249beebf347b5f2f9e2ed9537a55d6c7b4bd4ce023a585b372b2d4a2a40d291bf3b6b582df55129290dbb5871cf45f646b42b6f6bb622c851ad9f4dad0d7e7620bb7e5acad0ccfb60c86dd7b94189a1d82b463f5fcd265edfdf817ebe5469e42d1db6d275b8755ca3eaf3189bb41dad390dfb5cb2811c0b153d20002a0b48ab349dd9c31e6caf2043996a564e76a87b6f3a23b0fd5ea9aab7163606e0ee3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x9, 0x9, [@generic={0x73, 0x9, "88c35f0355190d71c977728c9d9015ddd2c50c62eac4b942be4c8a615ff950da24784263770efc4cd4517e766d16aaa1428219f3b641549c5eee53fdbfe20221656b6916ea5a9a669f8551e075ff7298c7b01b7124ca3309946c0e41f504ca211ea32502e5172c9e99f3ccf4d05af7301b"}]}}]}}]}}]}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
write$char_usb(r3, 0x0, 0x0)
r9 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)

649.112866ms ago: executing program 3 (id=1105):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x304, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x3e, 0xfd}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r2=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x30, 0x0, @ib={0x1b, 0x1, 0x1, {"f8430000000000000000000000070080"}, 0x7, 0x5, 0x3}}}, 0xa0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, 0x0, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRES64=r2], 0x48)

1.796978ms ago: executing program 4 (id=1106):
socket(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000006914416f00000000000041c4531ee2fbb0caee07fbd0f2dcf4844a1e68e6983299e0e43d2e3da371170140c813697dde57adcbea81bc6b23f2c96e189519f8692a67460c0b82daf535fc03469b717b5a0e7c3e11ef71ba04270e7d465954a3"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
migrate_pages(r7, 0x9, &(0x7f0000000040)=0x8000000000000000, &(0x7f0000000080)=0x5)
recvmmsg(r5, &(0x7f0000003040), 0x4f, 0x62, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

0s ago: executing program 3 (id=1107):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8)
mount$nfs4(&(0x7f0000000200)=')::\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x201004, &(0x7f0000000640)={[{'!{]-'}, {'police\x00'}, {'\x00'}, {'}*-\x19(\\'}, {'/'}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@hash}]})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10d00, 0xf)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb)
close(r7)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

_r:tmpfs_t tclass=dir permissive=1
[  251.686743][   T24] usb 4-1: config 0 descriptor??
[  251.708935][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  251.723883][   T30] audit: type=1400 audit(1753994788.623:334): avc:  denied  { unlink } for  pid=7961 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=3870 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  251.746997][    C1] vkms_vblank_simulate: vblank timer overrun
[  251.880013][   T10] usb 2-1: Using ep0 maxpacket: 16
[  251.958305][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.992336][    T9] usb 4-1: USB disconnect, device number 17
[  252.063908][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  252.167009][   T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  252.212407][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.279826][   T10] usb 2-1: Product: syz
[  252.296286][   T10] usb 2-1: Manufacturer: syz
[  252.324074][   T10] usb 2-1: SerialNumber: syz
[  252.433998][   T10] usb 2-1: config 0 descriptor??
[  252.723859][ T5979] aquacomputer_d5next 0003:0C70:F010.0007: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0
[  252.841481][ T5979] usb 5-1: USB disconnect, device number 15
[  252.871046][   T10] usb 2-1: USB disconnect, device number 16
[  252.892247][ T7970] fido_id[7970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  254.197659][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'.
[  254.318635][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  254.501309][ T8002] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  254.528724][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  254.564002][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.877597][    T9] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  254.899471][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.929593][    T9] usb 5-1: config 0 descriptor??
[  255.008583][   T10] usb 1-1: Using ep0 maxpacket: 16
[  255.017749][   T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  255.060862][   T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  255.085491][   T10] usb 1-1: Product: syz
[  255.097684][   T10] usb 1-1: Manufacturer: syz
[  255.106042][   T10] usb 1-1: SerialNumber: syz
[  255.112960][   T10] usb 1-1: config 0 descriptor??
[  255.329309][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.401869][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.502'.
[  255.807159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  257.432803][   T10] usb 5-1: USB disconnect, device number 16
[  258.566582][ T8027] comedi comedi0: Minor 3 could not be opened
[  258.730269][ T5933] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  258.988585][ T5933] usb 4-1: Using ep0 maxpacket: 16
[  258.996519][ T5933] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  259.008125][ T5933] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  259.018128][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.026582][ T5933] usb 4-1: Product: syz
[  259.707733][   T10] usb 1-1: USB disconnect, device number 16
[  259.733304][ T8041] netlink: 1492 bytes leftover after parsing attributes in process `syz.4.511'.
[  259.748241][ T5933] usb 4-1: Manufacturer: syz
[  259.815655][ T5933] usb 4-1: SerialNumber: syz
[  260.245220][ T8045] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  260.633145][ T5933] usb 4-1: config 0 descriptor??
[  260.676503][ T5933] usb 4-1: can't set config #0, error -71
[  260.699776][ T5933] usb 4-1: USB disconnect, device number 18
[  261.173326][ T8053] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  262.122470][ T8061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.227282][ T8064] syzkaller0: entered promiscuous mode
[  262.258779][ T8064] syzkaller0: entered allmulticast mode
[  262.282676][ T8061] tipc: Resetting bearer <eth:syzkaller0>
[  262.411528][ T8059] tipc: Resetting bearer <eth:syzkaller0>
[  262.419065][   T30] audit: type=1400 audit(1753994799.283:335): avc:  denied  { read } for  pid=8065 comm="syz.2.520" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  262.795510][ T8059] tipc: Disabling bearer <eth:syzkaller0>
[  262.801983][   T30] audit: type=1400 audit(1753994799.283:336): avc:  denied  { open } for  pid=8065 comm="syz.2.520" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  262.839897][   T30] audit: type=1400 audit(1753994799.383:337): avc:  denied  { mount } for  pid=8065 comm="syz.2.520" name="/" dev="ramfs" ino=16830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  263.249575][ T5979] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  263.272585][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'.
[  263.284833][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'.
[  263.416255][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.462871][ T5979] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  263.477541][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.581063][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.603778][ T5979] usb 5-1: config 0 descriptor??
[  263.651520][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.718659][ T5972] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  264.340336][ T5972] usb 1-1: Using ep0 maxpacket: 16
[  264.689599][ T8098] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  264.998140][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'.
[  265.737947][ T5972] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  265.780648][ T5972] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  265.812993][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.845586][ T5972] usb 1-1: Product: syz
[  265.863223][ T5972] usb 1-1: Manufacturer: syz
[  265.875297][ T5972] usb 1-1: SerialNumber: syz
[  265.896273][ T5972] usb 1-1: config 0 descriptor??
[  265.914461][ T5972] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  265.942964][ T5972] usb 1-1: Detected FT232R
[  266.127094][ T5972] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  266.150191][ T5972] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  266.169282][ T5972] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  266.189895][ T5972] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  266.218077][ T5972] usb 1-1: USB disconnect, device number 17
[  266.241402][ T5972] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  266.263470][ T5972] ftdi_sio 1-1:0.0: device disconnected
[  266.665984][ T5972] usb 5-1: USB disconnect, device number 17
[  267.431441][ T8114] netlink: 'syz.4.529': attribute type 4 has an invalid length.
[  267.439144][ T8114] netlink: 17 bytes leftover after parsing attributes in process `syz.4.529'.
[  267.475605][ T8117] netlink: 'syz.0.530': attribute type 4 has an invalid length.
[  267.483371][ T8117] netlink: 17 bytes leftover after parsing attributes in process `syz.0.530'.
[  267.513391][ T5979] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  267.978612][ T5979] usb 2-1: Using ep0 maxpacket: 16
[  267.995219][ T5979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  268.179582][ T5979] usb 2-1: config 0 has no interface number 0
[  268.186254][ T5979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.197592][ T5979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.911217][ T8128] netlink: 'syz.4.532': attribute type 4 has an invalid length.
[  268.918942][ T8128] netlink: 17 bytes leftover after parsing attributes in process `syz.4.532'.
[  269.007605][ T5979] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  269.020891][ T8130] netlink: 'syz.0.533': attribute type 4 has an invalid length.
[  269.027833][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.032721][ T8130] netlink: 17 bytes leftover after parsing attributes in process `syz.0.533'.
[  269.860921][ T5979] usb 2-1: config 0 descriptor??
[  270.206704][ T5979] usb 2-1: can't set config #0, error -71
[  270.216639][   T30] audit: type=1400 audit(1753994807.183:338): avc:  denied  { append } for  pid=8131 comm="syz.3.534" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  270.343781][   T30] audit: type=1400 audit(1753994807.283:339): avc:  denied  { name_bind } for  pid=8138 comm="syz.0.536" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  270.440465][ T5979] usb 2-1: USB disconnect, device number 17
[  270.492256][ T8136] tipc: Enabled bearer <udp:s>, priority 10
[  270.560647][ T8144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.593713][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  270.611897][   T30] audit: type=1400 audit(1753994807.283:340): avc:  denied  { create } for  pid=8138 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  270.778550][ T8147] syz_tun: entered allmulticast mode
[  270.855584][ T8143] syz_tun: left allmulticast mode
[  271.129235][   T30] audit: type=1400 audit(1753994807.283:341): avc:  denied  { connect } for  pid=8138 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  271.129359][   T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  271.161650][   T30] audit: type=1400 audit(1753994807.823:342): avc:  denied  { connect } for  pid=8143 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  271.211792][   T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  271.229921][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  271.240243][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.288591][ T8139] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  271.309959][ T8160] Invalid logical block size (768)
[  271.311943][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  271.611543][   T43] tipc: Node number set to 2170058635
[  271.811916][ T8156] netlink: 1492 bytes leftover after parsing attributes in process `syz.3.539'.
[  271.836550][ T8167] loop2: detected capacity change from 0 to 7
[  271.884155][ T8167] Dev loop2: unable to read RDB block 7
[  271.884189][ T8167]  loop2: unable to read partition table
[  271.884280][ T8167] loop2: partition table beyond EOD, truncated
[  271.884291][ T8167] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  272.045337][ T8139] 9pnet_fd: Insufficient options for proto=fd
[  272.088129][   T10] usb 1-1: USB disconnect, device number 18
[  272.096142][   T30] audit: type=1400 audit(1753994809.063:343): avc:  denied  { mounton } for  pid=8166 comm="syz.2.543" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  272.916691][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'.
[  272.922288][   T30] audit: type=1400 audit(1753994809.883:344): avc:  denied  { bind } for  pid=8157 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  274.532642][ T8204] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  275.230334][   T30] audit: type=1400 audit(1753994812.203:345): avc:  denied  { unmount } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  276.258677][   T30] audit: type=1400 audit(1753994813.173:346): avc:  denied  { write } for  pid=8213 comm="syz.3.552" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  276.298481][ T8214] binder: BINDER_SET_CONTEXT_MGR already set
[  276.304761][ T8214] binder: 8213:8214 ioctl 4018620d 2000000002c0 returned -16
[  276.328979][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[  276.550347][   T30] audit: type=1400 audit(1753994813.263:347): avc:  denied  { map } for  pid=8213 comm="syz.3.552" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  276.573919][    C0] vkms_vblank_simulate: vblank timer overrun
[  276.870670][ T8237] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  277.692617][ T8245] netlink: 1492 bytes leftover after parsing attributes in process `syz.1.556'.
[  279.019190][   T30] audit: type=1400 audit(1753994815.963:348): avc:  denied  { connect } for  pid=8258 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  279.525307][ T8266] sctp: [Deprecated]: syz.4.561 (pid 8266) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.525307][ T8266] Use struct sctp_sack_info instead
[  279.722047][ T8264] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  279.729643][ T8264] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  279.736799][ T8264] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  279.807271][ T8264] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  280.134866][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'.
[  281.772578][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  281.803788][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[  281.810662][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  281.868597][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  283.202068][ T5979] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  283.438094][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.904321][ T5979] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  286.014295][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  286.061070][ T5979] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  286.178849][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.680857][ T5979] usb 1-1: config 0 descriptor??
[  286.709872][ T5979] usb 1-1: can't set config #0, error -71
[  286.768542][ T5979] usb 1-1: USB disconnect, device number 19
[  287.009917][ T8334] netlink: 1492 bytes leftover after parsing attributes in process `syz.1.576'.
[  287.355931][ T8356] netlink: 'syz.2.579': attribute type 4 has an invalid length.
[  287.363822][ T8356] netlink: 17 bytes leftover after parsing attributes in process `syz.2.579'.
[  288.171885][ T8361] IPv6: NLM_F_CREATE should be specified when creating new route
[  289.237969][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'.
[  289.920180][ T8372] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.583'.
[  290.843832][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.894085][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.827476][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'.
[  292.639856][ T5972] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  293.376622][ T8404] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  293.453783][   T30] audit: type=1400 audit(1753994830.423:349): avc:  denied  { bind } for  pid=8403 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  293.655907][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'.
[  293.677704][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'.
[  293.988260][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.062113][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.374306][ T8421] netlink: 'syz.1.594': attribute type 4 has an invalid length.
[  294.382086][ T8421] netlink: 17 bytes leftover after parsing attributes in process `syz.1.594'.
[  295.059848][ T8430] syz.0.596: attempt to access beyond end of device
[  295.059848][ T8430] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  295.073106][ T8430] hfsplus: unable to find HFS+ superblock
[  295.379320][ T8437] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.595'.
[  298.214110][ T8459] block device autoloading is deprecated and will be removed.
[  300.899077][ T5972] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  301.068622][ T5972] usb 4-1: Using ep0 maxpacket: 16
[  301.101649][ T5972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  301.114651][ T5972] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  301.124389][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.133442][ T5972] usb 4-1: Product: syz
[  301.140699][ T5972] usb 4-1: Manufacturer: syz
[  301.149565][ T5972] usb 4-1: SerialNumber: syz
[  301.189499][ T5972] usb 4-1: config 0 descriptor??
[  301.222983][ T5972] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  301.263305][ T5972] usb 4-1: Detected FT232R
[  301.420379][ T8515] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.613'.
[  301.688694][ T5972] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  301.703509][ T5972] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  301.710898][ T5972] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  301.730881][ T5972] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  301.746450][ T5972] usb 4-1: USB disconnect, device number 20
[  301.781807][ T5972] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  301.847144][ T5972] ftdi_sio 4-1:0.0: device disconnected
[  302.558443][ T8526] netlink: 'syz.3.616': attribute type 4 has an invalid length.
[  302.566222][ T8526] netlink: 17 bytes leftover after parsing attributes in process `syz.3.616'.
[  303.310969][   T30] audit: type=1400 audit(1753994840.283:350): avc:  denied  { mount } for  pid=8529 comm="syz.2.618" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  303.344115][ T8530] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config
[  303.408777][   T30] audit: type=1400 audit(1753994840.303:351): avc:  denied  { mounton } for  pid=8529 comm="syz.2.618" path="/143/file0" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  303.451997][ T8534] random: crng reseeded on system resumption
[  303.511060][   T30] audit: type=1400 audit(1753994840.313:352): avc:  denied  { shutdown } for  pid=8529 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  303.555403][ T8534] netlink: 64 bytes leftover after parsing attributes in process `syz.1.620'.
[  303.568423][   T30] audit: type=1400 audit(1753994840.403:353): avc:  denied  { unmount } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  303.589777][   T30] audit: type=1400 audit(1753994840.423:354): avc:  denied  { write } for  pid=8533 comm="syz.1.620" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  303.672329][ T5889] usb 3-1: USB disconnect, device number 2
[  305.117138][ T4172] bridge_slave_1: left allmulticast mode
[  305.171897][ T8558] dlm: no local IP address has been set
[  305.177569][ T8558] dlm: cannot start dlm midcomms -107
[  305.189514][ T4172] bridge_slave_1: left promiscuous mode
[  305.191084][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.196497][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.211483][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.253792][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.274975][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.284800][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.372481][ T4172] bridge_slave_0: left allmulticast mode
[  305.378168][ T4172] bridge_slave_0: left promiscuous mode
[  305.384049][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.529478][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  305.696353][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  305.720618][   T24] usb 2-1: config 249 has an invalid interface number: 147 but max is 0
[  305.738282][   T24] usb 2-1: config 249 has no interface number 0
[  305.770398][   T24] usb 2-1: config 249 interface 147 has no altsetting 0
[  305.782880][   T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=d013, bcdDevice=cf.13
[  305.809257][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.837005][   T24] usb 2-1: Product: syz
[  305.855503][   T24] usb 2-1: Manufacturer: syz
[  305.912208][   T24] usb 2-1: SerialNumber: syz
[  306.389898][ T4172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.401146][ T4172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.415641][ T4172] bond0 (unregistering): (slave team0): Releasing backup interface
[  306.439771][ T4172] bond0 (unregistering): Released all slaves
[  306.840941][ T4172] bond1 (unregistering): Released all slaves
[  306.874980][ T8567] tipc: Started in network mode
[  306.898622][ T8567] tipc: Node identity 12ff44e2a55b, cluster identity 4711
[  306.905893][ T8567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.908971][   T24] hso 2-1:249.147: Not our interface
[  306.951320][ T8570] syzkaller0: entered promiscuous mode
[  306.958022][   T24] usb 2-1: USB disconnect, device number 18
[  306.971089][ T8570] syzkaller0: entered allmulticast mode
[  307.096351][ T8580] tipc: Resetting bearer <eth:syzkaller0>
[  307.184273][ T8580] tipc: Disabling bearer <eth:syzkaller0>
[  307.336826][ T5839] Bluetooth: hci4: command tx timeout
[  308.021223][ T8557] lo speed is unknown, defaulting to 1000
[  308.069210][ T8557] wg1 speed is unknown, defaulting to 1000
[  309.425517][ T5839] Bluetooth: hci4: command tx timeout
[  309.644790][ T8637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.639'.
[  309.756571][ T4172] hsr_slave_0: left promiscuous mode
[  309.767370][ T4172] hsr_slave_1: left promiscuous mode
[  311.177934][ T4172] team0 (unregistering): Port device team_slave_1 removed
[  311.216675][ T4172] team0 (unregistering): Port device team_slave_0 removed
[  311.469439][ T5839] Bluetooth: hci4: command tx timeout
[  311.743143][ T8667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  312.185378][ T8671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.952161][ T8672] syzkaller0: entered promiscuous mode
[  312.959368][ T8672] syzkaller0: entered allmulticast mode
[  313.007002][ T8669] tipc: Resetting bearer <eth:syzkaller0>
[  313.146067][ T8686] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  313.152614][ T8686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  313.171160][ T8686] vhci_hcd vhci_hcd.0: Device attached
[  313.221089][ T8668] tipc: Resetting bearer <eth:syzkaller0>
[  313.272047][ T8668] tipc: Disabling bearer <eth:syzkaller0>
[  313.353397][ T8697] netlink: 'syz.3.647': attribute type 11 has an invalid length.
[  313.362031][ T5979] tipc: Node number set to 3080996066
[  313.408653][   T24] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  313.461141][ T8691] netlink: 156 bytes leftover after parsing attributes in process `syz.3.647'.
[  313.473034][ T8691] netlink: 'syz.3.647': attribute type 21 has an invalid length.
[  313.553459][ T5839] Bluetooth: hci4: command tx timeout
[  313.578452][ T8687] vhci_hcd: connection reset by peer
[  313.605354][   T49] vhci_hcd: stop threads
[  313.611738][ T8557] chnl_net:caif_netlink_parms(): no params data found
[  313.618635][   T49] vhci_hcd: release socket
[  313.618686][   T49] vhci_hcd: disconnect device
[  313.759393][ T5979] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  313.947406][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.971558][ T5979] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  313.985871][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.117776][ T5979] usb 2-1: config 0 descriptor??
[  314.212455][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.237848][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.265435][ T8557] bridge_slave_0: entered allmulticast mode
[  314.307926][ T8557] bridge_slave_0: entered promiscuous mode
[  314.323783][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.355840][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.484116][ T8557] bridge_slave_1: entered allmulticast mode
[  314.491671][ T8557] bridge_slave_1: entered promiscuous mode
[  314.858839][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'.
[  316.484666][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.507710][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.551759][ T8732] syz.0.652: attempt to access beyond end of device
[  316.551759][ T8732] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  316.564843][ T8732] hfsplus: unable to find HFS+ superblock
[  316.701839][ T8557] team0: Port device team_slave_0 added
[  316.720192][ T8557] team0: Port device team_slave_1 added
[  316.755557][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  316.762467][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.326655][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.343716][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.679692][    T9] usb 2-1: USB disconnect, device number 19
[  317.751125][ T8762] libceph: resolve '.
[  317.751125][ T8762] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  317.751125][ T8762] ' (ret=-3): failed
[  317.773466][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.785720][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.792734][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.908553][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.172366][ T8769] libceph: resolve '.
[  318.172366][ T8769] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  318.172366][ T8769] ' (ret=-3): failed
[  318.208049][   T30] audit: type=1400 audit(1753994855.171:355): avc:  denied  { write } for  pid=8768 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  318.356027][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'.
[  318.601007][   T24] vhci_hcd: vhci_device speed not set
[  318.774610][ T8557] hsr_slave_0: entered promiscuous mode
[  318.854422][ T5933] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  319.325844][ T8557] hsr_slave_1: entered promiscuous mode
[  319.335624][ T8557] debugfs: 'hsr0' already exists in 'hsr'
[  319.341933][ T8557] Cannot create hsr debugfs directory
[  319.398587][ T5933] usb 1-1: Using ep0 maxpacket: 8
[  319.414158][ T5933] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  319.442538][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.487894][ T5933] pvrusb2: Hardware description: Terratec Grabster AV400
[  319.519170][ T5933] pvrusb2: **********
[  319.528428][ T5933] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  319.557398][ T5933] pvrusb2: Important functionality might not be entirely working.
[  319.578372][ T5933] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  319.672674][ T5933] pvrusb2: **********
[  319.736256][ T2336] pvrusb2: Invalid write control endpoint
[  319.944545][   T43] usb 1-1: USB disconnect, device number 20
[  320.513870][ T2336] pvrusb2: Invalid write control endpoint
[  320.535264][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  320.560460][ T8557] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  320.567608][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  320.580889][ T8557] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  320.587714][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  320.600890][ T2336] pvrusb2: Device being rendered inoperable
[  320.609445][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  320.617790][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  320.632287][ T8557] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  320.652124][ T8557] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  320.659736][ T2336] pvrusb2: Attached sub-driver cx25840
[  320.665365][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  320.683455][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  321.280430][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.308760][   T30] audit: type=1400 audit(1753994858.271:356): avc:  denied  { execmem } for  pid=8832 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  321.365610][ T8557] 8021q: adding VLAN 0 to HW filter on device team0
[  321.386086][   T30] audit: type=1400 audit(1753994858.311:357): avc:  denied  { search } for  pid=8831 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  321.499757][   T30] audit: type=1400 audit(1753994858.311:358): avc:  denied  { read } for  pid=8831 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  321.521585][    C1] vkms_vblank_simulate: vblank timer overrun
[  321.616222][ T8839] bad cache= option: no%e
[  321.616222][ T8839] 
[  321.623045][ T8839] CIFS: VFS: bad cache= option: no%e
[  322.408559][   T30] audit: type=1400 audit(1753994858.311:359): avc:  denied  { open } for  pid=8831 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  322.890437][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.897583][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.907615][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.914780][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.078845][   T30] audit: type=1400 audit(1753994858.311:360): avc:  denied  { getattr } for  pid=8831 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  323.090155][ T8847] syz.0.669: attempt to access beyond end of device
[  323.090155][ T8847] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  323.104044][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.124185][ T8847] hfsplus: unable to find HFS+ superblock
[  323.439940][ T8557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.459156][   T30] audit: type=1400 audit(1753994858.391:361): avc:  denied  { create } for  pid=8826 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  323.518183][   T30] audit: type=1400 audit(1753994858.391:362): avc:  denied  { getopt } for  pid=8826 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  323.546607][   T30] audit: type=1400 audit(1753994858.531:363): avc:  denied  { create } for  pid=8826 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  323.775193][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  323.996494][   T30] audit: type=1400 audit(1753994858.581:364): avc:  denied  { mounton } for  pid=8829 comm="syz.1.667" path="/128/file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  324.411871][   T30] audit: type=1400 audit(1753994859.361:365): avc:  denied  { prog_load } for  pid=8829 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  324.534194][   T30] audit: type=1400 audit(1753994859.361:366): avc:  denied  { bpf } for  pid=8829 comm="syz.1.667" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  324.723851][   T30] audit: type=1400 audit(1753994859.361:367): avc:  denied  { perfmon } for  pid=8829 comm="syz.1.667" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  325.081548][   T30] audit: type=1400 audit(1753994859.361:368): avc:  denied  { prog_run } for  pid=8829 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  325.258571][   T30] audit: type=1400 audit(1753994859.381:369): avc:  denied  { module_request } for  pid=8835 comm="syz.0.669" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  325.416891][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.428687][   T30] audit: type=1400 audit(1753994859.451:370): avc:  denied  { create } for  pid=8829 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  326.569557][ T8900] afs: Unknown parameter 'dyn77777777777777777777'
[  327.135059][ T8920] binder: 8916:8920 ioctl 8933 0 returned -22
[  327.581796][ T8557] veth0_vlan: entered promiscuous mode
[  327.615269][ T8557] veth1_vlan: entered promiscuous mode
[  328.252453][ T8557] veth0_macvtap: entered promiscuous mode
[  328.408402][ T8557] veth1_macvtap: entered promiscuous mode
[  328.483322][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.492162][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  328.492177][   T30] audit: type=1400 audit(1753994865.461:434): avc:  denied  { read write } for  pid=8932 comm="syz.4.683" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  328.524835][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.553353][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.577836][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.587602][   T30] audit: type=1400 audit(1753994865.481:435): avc:  denied  { open } for  pid=8934 comm="syz.3.684" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  328.664352][ T8939] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.683'.
[  328.692550][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.701434][   T30] audit: type=1400 audit(1753994865.481:436): avc:  denied  { ioctl } for  pid=8934 comm="syz.3.684" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  328.702742][ T8941] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.684'.
[  328.776529][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.931614][   T30] audit: type=1400 audit(1753994865.641:437): avc:  denied  { write } for  pid=8932 comm="syz.4.683" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  328.954661][    C1] vkms_vblank_simulate: vblank timer overrun
[  328.973985][   T30] audit: type=1400 audit(1753994865.641:438): avc:  denied  { open } for  pid=8932 comm="syz.4.683" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  329.363269][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  329.506415][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.676476][   T30] audit: type=1400 audit(1753994865.641:439): avc:  denied  { ioctl } for  pid=8932 comm="syz.4.683" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  329.702137][   T24] usb 5-1: Using ep0 maxpacket: 32
[  329.718124][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.722985][   T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  329.734293][   T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  329.756542][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  329.874118][   T24] usb 5-1: config 1 has no interface number 0
[  329.965089][   T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  329.978318][   T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  329.997475][   T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  330.007021][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.451095][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  330.476982][   T30] audit: type=1400 audit(1753994865.651:440): avc:  denied  { read } for  pid=8932 comm="syz.4.683" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  330.521338][   T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  330.530271][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.618835][   T10] usb 4-1: Using ep0 maxpacket: 32
[  330.723638][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.744808][   T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  330.779505][   T30] audit: type=1400 audit(1753994865.651:441): avc:  denied  { open } for  pid=8932 comm="syz.4.683" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  330.804447][   T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  330.816418][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  330.834646][   T10] usb 4-1: config 1 has no interface number 0
[  330.882266][   T30] audit: type=1400 audit(1753994865.651:442): avc:  denied  { ioctl } for  pid=8932 comm="syz.4.683" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  330.907189][   T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  330.995275][   T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  331.024030][   T30] audit: type=1400 audit(1753994865.771:443): avc:  denied  { allowed } for  pid=8932 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  331.055286][   T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  331.179516][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.215594][   T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  331.587646][ T8969] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.626'.
[  331.956508][ T8973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.988375][ T8973] syzkaller0: entered promiscuous mode
[  331.997980][ T8973] syzkaller0: entered allmulticast mode
[  332.094288][ T8975] afs: Unknown parameter 'dyn77777777777777777777'
[  332.195214][ T8978] tipc: Resetting bearer <eth:syzkaller0>
[  332.282636][ T8972] tipc: Resetting bearer <eth:syzkaller0>
[  333.021494][   T43] tipc: Node number set to 3003823992
[  333.033071][   T10] snd_usb_pod 4-1:1.1: set_interface failed
[  333.051206][ T8972] tipc: Disabling bearer <eth:syzkaller0>
[  333.072785][   T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  333.104826][ T8988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  333.269260][   T10] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  333.353337][   T10] usb 4-1: USB disconnect, device number 21
[  333.373484][   T24] snd_usb_pod 5-1:1.1: set_interface failed
[  333.409036][   T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  333.454766][   T24] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  333.661611][   T24] usb 5-1: USB disconnect, device number 18
[  333.960769][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  333.960781][   T30] audit: type=1400 audit(1753994870.931:464): avc:  denied  { append } for  pid=9003 comm="syz.4.696" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  334.003829][ T9004] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config
[  334.326347][   T30] audit: type=1400 audit(1753994871.291:465): avc:  denied  { write } for  pid=8992 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  336.290953][   T30] audit: type=1400 audit(1753994873.241:466): avc:  denied  { map } for  pid=9027 comm="syz.5.700" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  337.098654][   T30] audit: type=1400 audit(1753994873.241:467): avc:  denied  { read write } for  pid=9027 comm="syz.5.700" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  337.141056][   T30] audit: type=1400 audit(1753994873.261:468): avc:  denied  { create } for  pid=9027 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  337.203240][   T30] audit: type=1400 audit(1753994874.171:469): avc:  denied  { ioctl } for  pid=9029 comm="syz.3.701" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  337.398684][   T30] audit: type=1400 audit(1753994874.231:470): avc:  denied  { read write } for  pid=9035 comm="syz.1.702" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  338.022446][   T30] audit: type=1400 audit(1753994874.231:471): avc:  denied  { open } for  pid=9035 comm="syz.1.702" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  338.058560][   T30] audit: type=1400 audit(1753994874.231:472): avc:  denied  { create } for  pid=9035 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  338.083969][ T9043] netlink: 1388 bytes leftover after parsing attributes in process `syz.3.701'.
[  338.383252][   T30] audit: type=1400 audit(1753994875.351:473): avc:  denied  { read write } for  pid=9046 comm="syz.1.704" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  339.078650][   T30] audit: type=1400 audit(1753994875.351:474): avc:  denied  { open } for  pid=9046 comm="syz.1.704" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  339.459098][   T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  339.705918][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.736386][   T43] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  339.769561][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.817114][   T43] usb 5-1: config 0 descriptor??
[  340.602103][   T30] audit: type=1400 audit(1753994877.561:475): avc:  denied  { create } for  pid=9053 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  340.856149][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.705'.
[  340.947353][   T30] audit: type=1400 audit(1753994877.841:476): avc:  denied  { create } for  pid=9053 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  341.269197][   T30] audit: type=1400 audit(1753994877.851:477): avc:  denied  { bind } for  pid=9053 comm="syz.4.705" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  341.383017][   T30] audit: type=1400 audit(1753994877.851:478): avc:  denied  { node_bind } for  pid=9053 comm="syz.4.705" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  341.759244][   T30] audit: type=1400 audit(1753994877.851:479): avc:  denied  { write } for  pid=9053 comm="syz.4.705" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.672133][ T5972] usb 5-1: USB disconnect, device number 19
[  342.870171][   T30] audit: type=1400 audit(1753994879.761:480): avc:  denied  { read append } for  pid=9092 comm="syz.4.713" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  343.040650][   T30] audit: type=1400 audit(1753994879.761:481): avc:  denied  { open } for  pid=9092 comm="syz.4.713" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  343.084514][   T30] audit: type=1400 audit(1753994879.871:482): avc:  denied  { ioctl } for  pid=9092 comm="syz.4.713" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  343.879230][ T5972] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  344.117257][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.244327][ T5972] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  344.271950][ T9101] lo speed is unknown, defaulting to 1000
[  344.400689][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.419502][ T5972] usb 5-1: config 0 descriptor??
[  344.426693][ T9101] wg1 speed is unknown, defaulting to 1000
[  345.038610][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  345.221284][ T5972] lenovo 0003:17EF:6047.0008: item fetching failed at offset 4/5
[  345.267453][ T5972] lenovo 0003:17EF:6047.0008: hid_parse failed
[  345.298694][    T9] usb 6-1: Using ep0 maxpacket: 32
[  345.306888][ T5972] lenovo 0003:17EF:6047.0008: probe with driver lenovo failed with error -22
[  345.379372][ T9120] netlink: 1388 bytes leftover after parsing attributes in process `syz.3.718'.
[  345.412300][ T5972] usb 5-1: USB disconnect, device number 20
[  348.483744][   T30] audit: type=1400 audit(1753994885.451:483): avc:  denied  { append } for  pid=9156 comm="syz.4.725" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  348.674047][ T9162] afs: Unknown parameter 'dyn77777777777777777777'
[  348.889299][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  349.052720][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  349.121439][ T5910] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  349.454449][    T9] usb 6-1: no configurations
[  349.478318][    T9] usb 6-1: can't read configurations, error -22
[  349.522722][   T10] usb 5-1: Using ep0 maxpacket: 32
[  349.568567][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  349.579232][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  349.584582][   T10] usb 5-1: config 0 has no interface number 0
[  349.587506][ T5910] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  349.598521][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  349.599535][ T5910] usb 4-1: config 0 has no interface number 0
[  349.707348][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  349.716593][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.717585][ T5910] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  349.755438][   T10] usb 5-1: Product: syz
[  349.765302][   T10] usb 5-1: Manufacturer: syz
[  349.770073][   T10] usb 5-1: SerialNumber: syz
[  349.770217][ T5910] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  349.786337][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.789373][   T10] usb 5-1: config 0 descriptor??
[  349.795243][ T5910] usb 4-1: Product: syz
[  349.818713][ T5910] usb 4-1: Manufacturer: syz
[  349.823398][ T5910] usb 4-1: SerialNumber: syz
[  349.978537][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  349.985558][ T5910] usb 4-1: config 0 descriptor??
[  350.025349][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  350.054129][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'.
[  350.128572][   T30] audit: type=1400 audit(1753994887.021:484): avc:  denied  { write } for  pid=9187 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  350.138255][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  350.181487][    T9] usb 6-1: Using ep0 maxpacket: 32
[  350.182521][ T5910] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  350.211635][    T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  350.231444][    T9] usb 6-1: config 0 has no interface number 0
[  350.253916][    T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  350.266326][ T5910] em28xx 4-1:0.132: Video interface 132 found:
[  350.287626][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  350.330220][    T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  350.368161][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.376938][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  350.387517][    T9] usb 6-1: Product: syz
[  350.393116][    T9] usb 6-1: Manufacturer: syz
[  350.421255][    T9] usb 6-1: SerialNumber: syz
[  350.445377][    T9] usb 6-1: config 0 descriptor??
[  350.456969][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  350.479676][ T5910] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  350.485024][    T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  350.496584][   T10] em28xx 5-1:0.132: board has no eeprom
[  350.503914][    T9] em28xx 6-1:0.132: Video interface 132 found:
[  350.570190][ T5910] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  350.581325][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  350.582127][ T5910] em28xx 4-1:0.132: board has no eeprom
[  350.591996][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  350.601179][ T5933] em28xx 5-1:0.132: Registering V4L2 extension
[  350.630973][   T10] usb 5-1: USB disconnect, device number 21
[  350.647174][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  351.594976][   T30] audit: type=1400 audit(1753994887.841:485): avc:  denied  { mount } for  pid=9202 comm="syz.1.733" name="/" dev="autofs" ino=20449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  351.638396][ T5910] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  351.659725][    T9] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  351.699835][ T5910] em28xx 4-1:0.132: analog set to bulk mode.
[  351.771318][    T9] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  351.817456][ T5910] usb 4-1: USB disconnect, device number 22
[  351.826221][   T30] audit: type=1400 audit(1753994888.431:486): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  351.837967][    T9] em28xx 6-1:0.132: board has no eeprom
[  351.853305][ T5910] em28xx 4-1:0.132: Disconnecting em28xx
[  352.268792][    T9] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  352.735993][    T9] em28xx 6-1:0.132: analog set to bulk mode.
[  352.851040][ T5933] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  352.859570][    T9] usb 6-1: USB disconnect, device number 3
[  352.866142][    T9] em28xx 6-1:0.132: Disconnecting em28xx
[  353.026658][ T5933] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  353.044135][ T5933] em28xx 5-1:0.132: No AC97 audio processor
[  353.088647][   T30] audit: type=1400 audit(1753994890.011:487): avc:  denied  { accept } for  pid=9229 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  353.337372][ T5933] usb 5-1: Decoder not found
[  353.381796][ T5933] em28xx 5-1:0.132: failed to create media graph
[  353.397790][   T30] audit: type=1400 audit(1753994890.021:488): avc:  denied  { shutdown } for  pid=9229 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  353.822792][ T5933] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  353.847439][ T5933] em28xx 5-1:0.132: Remote control support is not available for this card.
[  353.862824][   T10] em28xx 5-1:0.132: Closing input extension
[  353.894810][   T10] em28xx 5-1:0.132: Freeing device
[  353.915298][   T30] audit: type=1400 audit(1753994890.021:489): avc:  denied  { ioctl } for  pid=9229 comm="syz.4.738" path="socket:[21194]" dev="sockfs" ino=21194 ioctlcmd=0x5641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  354.118501][ T5902] em28xx 4-1:0.132: Registering V4L2 extension
[  354.419192][   T30] audit: type=1400 audit(1753994890.021:490): avc:  denied  { getopt } for  pid=9229 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  354.772750][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  354.845467][   T30] audit: type=1400 audit(1753994891.811:491): avc:  denied  { write } for  pid=9257 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  354.882561][ T5902] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  354.891822][   T30] audit: type=1400 audit(1753994891.851:492): avc:  denied  { create } for  pid=9258 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  354.913881][ T5902] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  354.952172][ T5902] em28xx 4-1:0.132: No AC97 audio processor
[  354.958530][   T10] usb 5-1: Using ep0 maxpacket: 16
[  354.965411][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  354.975029][   T10] usb 5-1: config 1 has an invalid interface number: 26 but max is 1
[  354.986653][   T30] audit: type=1400 audit(1753994891.861:493): avc:  denied  { accept } for  pid=9258 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  355.010607][ T5902] usb 4-1: Decoder not found
[  355.011845][   T10] usb 5-1: config 1 has an invalid interface number: 89 but max is 1
[  355.015225][ T5902] em28xx 4-1:0.132: failed to create media graph
[  355.015257][ T5902] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  355.050831][ T5902] em28xx 4-1:0.132: Remote control support is not available for this card.
[  355.059669][ T5834] em28xx 6-1:0.132: Registering V4L2 extension
[  355.088206][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.248388][   T30] audit: type=1400 audit(1753994892.181:494): avc:  denied  { ioctl } for  pid=9264 comm="syz.0.747" path="socket:[21592]" dev="sockfs" ino=21592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  355.258635][   T10] usb 5-1: config 1 has no interface number 0
[  355.305819][   T30] audit: type=1400 audit(1753994892.181:495): avc:  denied  { write } for  pid=9264 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  355.355667][   T10] usb 5-1: config 1 has no interface number 1
[  355.414403][   T10] usb 5-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  355.451657][ T9271] netlink: 7668 bytes leftover after parsing attributes in process `syz.0.747'.
[  355.463011][   T10] usb 5-1: config 1 interface 26 has no altsetting 0
[  355.470364][   T30] audit: type=1400 audit(1753994892.181:496): avc:  denied  { connect } for  pid=9264 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  355.491403][   T30] audit: type=1400 audit(1753994892.181:497): avc:  denied  { name_connect } for  pid=9264 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  355.513161][   T10] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec
[  355.523884][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.533143][   T10] usb 5-1: Product: syz
[  355.538641][   T10] usb 5-1: Manufacturer: syz
[  355.552363][   T10] usb 5-1: SerialNumber: syz
[  355.566696][   T30] audit: type=1400 audit(1753994892.271:498): avc:  denied  { shutdown } for  pid=9264 comm="syz.0.747" lport=40575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  355.615032][ T5834] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  355.623719][ T5834] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  355.631345][ T5834] em28xx 6-1:0.132: No AC97 audio processor
[  355.685093][ T5834] usb 6-1: Decoder not found
[  356.316431][ T5834] em28xx 6-1:0.132: failed to create media graph
[  356.323058][   T10] usb 5-1: unknown interface protocol 0x7d, assuming v1
[  356.376953][ T5834] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  356.888532][   T10] usb 5-1: 26:2 : does not exist
[  356.896027][   T10] usb 5-1: cannot find UAC_HEADER
[  357.187889][ T5834] em28xx 6-1:0.132: Remote control support is not available for this card.
[  357.210096][   T10] snd-usb-audio 5-1:1.89: probe with driver snd-usb-audio failed with error -22
[  357.219287][    T9] em28xx 6-1:0.132: Closing input extension
[  357.244928][    T9] em28xx 6-1:0.132: Freeing device
[  357.259483][ T5910] em28xx 4-1:0.132: Closing input extension
[  357.296361][ T5910] em28xx 4-1:0.132: Freeing device
[  357.305564][   T10] usb 5-1: USB disconnect, device number 22
[  357.482830][ T6212] udevd[6212]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  357.914910][ T5910] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  358.065893][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  358.211124][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  358.496730][   T10] usb 5-1: Using ep0 maxpacket: 32
[  358.506635][    T9] usb 6-1: Using ep0 maxpacket: 16
[  358.525980][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  358.543455][   T10] usb 5-1: config 0 has no interface number 0
[  358.551953][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  358.570494][    T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  358.582055][    T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  358.601987][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  358.621461][    T9] usb 6-1: Product: syz
[  358.626051][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.634747][    T9] usb 6-1: Manufacturer: syz
[  358.645241][    T9] usb 6-1: SerialNumber: syz
[  358.657697][   T10] usb 5-1: Product: syz
[  358.664319][    T9] usb 6-1: config 0 descriptor??
[  358.679141][   T10] usb 5-1: Manufacturer: syz
[  359.073725][   T10] usb 5-1: SerialNumber: syz
[  359.087649][   T10] usb 5-1: config 0 descriptor??
[  359.322742][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  359.684004][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  359.775260][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  361.127103][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  361.158614][   T10] em28xx 5-1:0.132: board has no eeprom
[  361.316819][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  361.532571][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  361.540205][ T5889] em28xx 5-1:0.132: Registering V4L2 extension
[  361.578258][   T10] usb 5-1: USB disconnect, device number 23
[  361.595329][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  362.478285][   T43] usb 6-1: USB disconnect, device number 4
[  362.485558][ T5889] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  362.492715][ T5889] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  362.663351][ T5889] em28xx 5-1:0.132: No AC97 audio processor
[  363.361160][ T5889] usb 5-1: Decoder not found
[  363.365794][ T5889] em28xx 5-1:0.132: failed to create media graph
[  363.465576][ T5889] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  363.502341][   T30] audit: type=1400 audit(1753994900.451:499): avc:  denied  { watch } for  pid=9369 comm="syz.5.764" path="/14/bus" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  363.626147][ T9375] bond0: entered promiscuous mode
[  363.631876][ T9375] bond_slave_0: entered promiscuous mode
[  363.638792][ T9375] bond_slave_1: entered promiscuous mode
[  363.846707][ T5889] em28xx 5-1:0.132: Remote control support is not available for this card.
[  363.952226][ T9375] batadv0: entered promiscuous mode
[  363.960460][   T30] audit: type=1400 audit(1753994900.451:500): avc:  denied  { watch_sb watch_reads } for  pid=9369 comm="syz.5.764" path="/14/bus" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  363.989832][ T9375] 8021q: adding VLAN 0 to HW filter on device hsr1
[  364.101183][   T10] em28xx 5-1:0.132: Closing input extension
[  365.123217][   T30] audit: type=1400 audit(1753994900.491:501): avc:  denied  { bind } for  pid=9369 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  365.195243][   T30] audit: type=1400 audit(1753994900.491:502): avc:  denied  { name_bind } for  pid=9369 comm="syz.5.764" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  365.278620][   T30] audit: type=1400 audit(1753994900.501:503): avc:  denied  { node_bind } for  pid=9369 comm="syz.5.764" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  365.303046][   T30] audit: type=1400 audit(1753994900.501:504): avc:  denied  { block_suspend } for  pid=9372 comm="syz.3.765" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  365.352919][   T30] audit: type=1400 audit(1753994900.631:505): avc:  denied  { name_connect } for  pid=9369 comm="syz.5.764" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  366.193696][   T10] em28xx 5-1:0.132: Freeing device
[  366.492097][ T5939] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  366.680858][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  366.922415][   T30] audit: type=1400 audit(1753994903.741:506): avc:  denied  { bind } for  pid=9397 comm="syz.5.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  367.031337][   T30] audit: type=1400 audit(1753994903.741:507): avc:  denied  { setopt } for  pid=9397 comm="syz.5.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  367.058951][   T30] audit: type=1400 audit(1753994903.741:508): avc:  denied  { accept } for  pid=9397 comm="syz.5.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  367.090934][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  367.146974][ T9409] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.772'.
[  367.179437][ T5910] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  367.202473][ T5910] usb 4-1: config 0 has no interface number 0
[  367.336359][ T5910] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  367.389401][ T5910] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  367.417603][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.450778][ T5910] usb 4-1: Product: syz
[  367.461714][ T5910] usb 4-1: Manufacturer: syz
[  367.473492][ T5910] usb 4-1: SerialNumber: syz
[  367.494587][ T5910] usb 4-1: config 0 descriptor??
[  367.521270][ T5910] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  367.605645][ T5910] em28xx 4-1:0.132: Video interface 132 found:
[  367.618629][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  367.772128][ T9420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  367.828665][    T9] usb 5-1: Using ep0 maxpacket: 32
[  368.008861][ T5910] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  368.028987][    T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  368.073066][    T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  368.096243][ T5910] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  368.097572][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  368.396797][ T5910] em28xx 4-1:0.132: board has no eeprom
[  368.408010][    T9] usb 5-1: config 1 has no interface number 0
[  368.428113][    T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  368.462836][    T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  368.493447][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  368.512774][ T5910] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  368.528571][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.549905][ T5910] em28xx 4-1:0.132: analog set to bulk mode.
[  368.566059][   T43] em28xx 4-1:0.132: Registering V4L2 extension
[  368.571632][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  368.602706][ T5910] usb 4-1: USB disconnect, device number 24
[  368.780561][ T5910] em28xx 4-1:0.132: Disconnecting em28xx
[  370.418915][   T43] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  370.426236][   T43] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  370.464219][   T43] em28xx 4-1:0.132: No AC97 audio processor
[  370.479688][   T43] usb 4-1: Decoder not found
[  370.493411][   T43] em28xx 4-1:0.132: failed to create media graph
[  370.500229][   T43] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  370.540233][   T43] em28xx 4-1:0.132: Remote control support is not available for this card.
[  370.561148][ T5910] em28xx 4-1:0.132: Closing input extension
[  370.619176][ T5910] em28xx 4-1:0.132: Freeing device
[  371.808826][    T9] snd_usb_pod 5-1:1.1: set_interface failed
[  371.831537][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  371.857408][    T9] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  371.892530][    T9] usb 5-1: USB disconnect, device number 24
[  372.908872][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  372.908888][   T30] audit: type=1400 audit(1753994909.851:511): avc:  denied  { create } for  pid=9475 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  372.934244][    C0] vkms_vblank_simulate: vblank timer overrun
[  373.168668][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  373.372444][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.377062][ T9492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.601968][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  373.688578][ T5902] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  373.708794][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.731646][ T5902] usb 6-1: config 0 descriptor??
[  374.176270][ T5902] lenovo 0003:17EF:6047.0009: item fetching failed at offset 4/5
[  374.202491][ T5902] lenovo 0003:17EF:6047.0009: hid_parse failed
[  374.249630][ T5902] lenovo 0003:17EF:6047.0009: probe with driver lenovo failed with error -22
[  374.377180][ T5902] usb 6-1: USB disconnect, device number 5
[  376.439245][ T5939] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  376.757451][ T9517] syz.5.789: attempt to access beyond end of device
[  376.757451][ T9517] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0
[  376.770463][ T9517] hfsplus: unable to find HFS+ superblock
[  376.833053][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  376.857283][ T5939] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  376.998509][ T5939] usb 1-1: config 0 has no interface number 0
[  377.004650][ T5939] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  377.018958][ T5939] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  377.029142][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.037149][ T5939] usb 1-1: Product: syz
[  377.041347][ T5939] usb 1-1: Manufacturer: syz
[  377.045927][ T5939] usb 1-1: SerialNumber: syz
[  377.056515][ T5939] usb 1-1: config 0 descriptor??
[  377.081103][ T5939] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  377.369488][ T5939] em28xx 1-1:0.132: Video interface 132 found:
[  377.471014][ T5939] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  378.102640][   T30] audit: type=1400 audit(1753994914.691:512): avc:  denied  { name_bind } for  pid=9535 comm="syz.4.793" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  378.382469][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.391532][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.398073][ T5939] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  378.421129][ T5939] em28xx 1-1:0.132: board has no eeprom
[  378.429079][   T30] audit: type=1400 audit(1753994914.691:513): avc:  denied  { node_bind } for  pid=9535 comm="syz.4.793" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  378.450465][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.483759][ T5939] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  378.498669][   T30] audit: type=1400 audit(1753994914.711:514): avc:  denied  { read } for  pid=9535 comm="syz.4.793" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  378.522232][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.543335][ T5939] em28xx 1-1:0.132: analog set to bulk mode.
[  378.607321][   T10] em28xx 1-1:0.132: Registering V4L2 extension
[  378.626714][ T5939] usb 1-1: USB disconnect, device number 22
[  378.651865][ T5939] em28xx 1-1:0.132: Disconnecting em28xx
[  378.740694][   T30] audit: type=1400 audit(1753994914.711:515): avc:  denied  { open } for  pid=9535 comm="syz.4.793" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  379.048950][ T9556] netlink: 'syz.5.796': attribute type 4 has an invalid length.
[  379.056661][ T9556] netlink: 17 bytes leftover after parsing attributes in process `syz.5.796'.
[  379.315338][   T10] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  379.341249][   T10] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  379.928080][   T10] em28xx 1-1:0.132: No AC97 audio processor
[  380.091110][   T10] usb 1-1: Decoder not found
[  380.191472][   T10] em28xx 1-1:0.132: failed to create media graph
[  380.270596][   T10] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  380.377451][   T10] em28xx 1-1:0.132: Remote control support is not available for this card.
[  380.522689][ T9578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.705828][ T5939] em28xx 1-1:0.132: Closing input extension
[  380.767925][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  380.793704][ T5939] em28xx 1-1:0.132: Freeing device
[  380.947496][ T9582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.954798][ T9582] IPv6: NLM_F_CREATE should be set when creating new route
[  380.962265][ T9582] IPv6: NLM_F_CREATE should be set when creating new route
[  380.969583][ T9582] IPv6: NLM_F_CREATE should be set when creating new route
[  381.221344][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.248068][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  381.407418][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.435533][    T9] usb 5-1: config 0 descriptor??
[  381.881989][   T30] audit: type=1400 audit(1753994918.851:516): avc:  denied  { write } for  pid=9588 comm="syz.5.805" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  381.904571][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.023928][    T9] lenovo 0003:17EF:6047.000A: item fetching failed at offset 4/5
[  382.032907][    T9] lenovo 0003:17EF:6047.000A: hid_parse failed
[  382.040759][    T9] lenovo 0003:17EF:6047.000A: probe with driver lenovo failed with error -22
[  382.393274][   T30] audit: type=1400 audit(1753994919.121:517): avc:  denied  { nlmsg_write } for  pid=9588 comm="syz.5.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  382.458159][ T5939] usb 5-1: USB disconnect, device number 25
[  383.642360][ T9619] netlink: 'syz.3.809': attribute type 4 has an invalid length.
[  383.650109][ T9619] netlink: 17 bytes leftover after parsing attributes in process `syz.3.809'.
[  384.417119][ T9637] netlink: 1444 bytes leftover after parsing attributes in process `syz.0.811'.
[  385.049465][ T9649] FAULT_INJECTION: forcing a failure.
[  385.049465][ T9649] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  385.062727][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.4.814 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  385.062755][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  385.062764][ T9649] Call Trace:
[  385.062772][ T9649]  <TASK>
[  385.062777][ T9649]  dump_stack_lvl+0x16c/0x1f0
[  385.062800][ T9649]  should_fail_ex+0x512/0x640
[  385.062818][ T9649]  _copy_from_user+0x2e/0xd0
[  385.062836][ T9649]  io_submit_one+0xbb/0x1df0
[  385.062851][ T9649]  ? __lock_acquire+0xb8a/0x1c90
[  385.062871][ T9649]  ? __pfx_io_submit_one+0x10/0x10
[  385.062888][ T9649]  ? __might_fault+0xe3/0x190
[  385.062898][ T9649]  ? __might_fault+0x13b/0x190
[  385.062912][ T9649]  ? __x64_sys_io_submit+0x1a9/0x350
[  385.062924][ T9649]  __x64_sys_io_submit+0x1a9/0x350
[  385.062939][ T9649]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  385.062955][ T9649]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  385.062971][ T9649]  do_syscall_64+0xcd/0x4c0
[  385.062983][ T9649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.062995][ T9649] RIP: 0033:0x7f917778eb69
[  385.063004][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.063014][ T9649] RSP: 002b:00007f91786a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  385.063027][ T9649] RAX: ffffffffffffffda RBX: 00007f91779b6080 RCX: 00007f917778eb69
[  385.063034][ T9649] RDX: 0000200000001440 RSI: 2000000000000225 RDI: 00007f917867c000
[  385.063041][ T9649] RBP: 00007f91786a1090 R08: 0000000000000000 R09: 0000000000000000
[  385.063047][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.063053][ T9649] R13: 0000000000000000 R14: 00007f91779b6080 R15: 00007ffcb5589078
[  385.063066][ T9649]  </TASK>
[  385.242035][    C0] vkms_vblank_simulate: vblank timer overrun
[  386.366782][ T9664] capability: warning: `syz.1.818' uses deprecated v2 capabilities in a way that may be insecure
[  387.047830][ T9678] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.819'.
[  387.175554][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  387.205864][ T9683] netlink: 'syz.0.821': attribute type 4 has an invalid length.
[  387.213627][ T9683] netlink: 17 bytes leftover after parsing attributes in process `syz.0.821'.
[  387.678307][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  387.760966][ T5910] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  387.773353][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.840769][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400
[  387.848877][ T5910] pvrusb2: **********
[  387.849256][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  387.852939][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  387.864655][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  387.903341][ T5910] pvrusb2: Important functionality might not be entirely working.
[  387.921024][   T30] audit: type=1400 audit(1753994924.881:518): avc:  denied  { create } for  pid=9685 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  387.940934][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  387.970985][ T5910] pvrusb2: **********
[  388.017825][ T9686] syzkaller0: entered promiscuous mode
[  388.023555][ T9686] syzkaller0: entered allmulticast mode
[  388.039251][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  388.050129][ T2336] pvrusb2: Invalid write control endpoint
[  388.056253][   T30] audit: type=1400 audit(1753994924.881:519): avc:  denied  { setopt } for  pid=9685 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  388.078573][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  388.104383][ T5939] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  388.267228][ T9659] tipc: Can't bind to reserved service type 2
[  388.273861][   T30] audit: type=1400 audit(1753994925.011:520): avc:  denied  { setopt } for  pid=9672 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  388.296899][ T5939] usb 5-1: Using ep0 maxpacket: 32
[  388.311254][   T30] audit: type=1400 audit(1753994925.121:521): avc:  denied  { bind } for  pid=9658 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  388.330992][ T5939] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  388.342654][ T5939] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  388.355880][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  388.378533][   T30] audit: type=1400 audit(1753994925.231:522): avc:  denied  { write } for  pid=9685 comm="syz.5.822" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  388.401020][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.409451][ T5939] usb 5-1: config 1 has no interface number 0
[  388.420718][ T5939] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  388.429734][ T2336] pvrusb2: Invalid write control endpoint
[  388.436284][ T5939] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  388.451190][ T5939] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  388.461804][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  388.601762][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.614982][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  388.632700][ T5910] usb 2-1: USB disconnect, device number 20
[  388.641637][ T5939] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  389.228106][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  389.254609][ T2336] pvrusb2: Device being rendered inoperable
[  389.392290][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  389.435123][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  389.467383][   T30] audit: type=1400 audit(1753994926.431:523): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  389.504073][ T2336] pvrusb2: Attached sub-driver cx25840
[  389.515927][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  389.541217][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  389.836946][   T30] audit: type=1400 audit(1753994926.751:524): avc:  denied  { create } for  pid=9710 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  389.911591][   T30] audit: type=1804 audit(1753994926.871:525): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.828" name="/newroot/165/file0" dev="tmpfs" ino=935 res=1 errno=0
[  390.033749][   T30] audit: type=1400 audit(1753994926.971:526): avc:  denied  { ioctl } for  pid=9710 comm="syz.3.828" path="/dev/video5" dev="devtmpfs" ino=937 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  390.073518][   T30] audit: type=1400 audit(1753994926.981:527): avc:  denied  { listen } for  pid=9710 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  390.710277][ T5939] snd_usb_pod 5-1:1.1: set_interface failed
[  390.730319][ T5939] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  390.747686][ T5939] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  390.769432][ T5939] usb 5-1: USB disconnect, device number 26
[  392.850905][ T9746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.713844][ T9755] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.838'.
[  394.924273][ T5902] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  395.303159][ T5902] usb 4-1: Using ep0 maxpacket: 32
[  395.394786][ T5902] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  395.403258][ T5902] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  395.468513][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  395.487724][ T5902] usb 4-1: config 1 has no interface number 0
[  395.611302][ T5902] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  395.690069][ T5902] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  395.743919][ T5902] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  395.754768][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.781663][ T5902] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  395.844976][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'.
[  395.866430][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'.
[  396.780679][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  396.848931][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.846'.
[  397.437974][ T5902] snd_usb_pod 4-1:1.1: set_interface failed
[  397.452865][ T5902] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  397.510827][ T5902] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  397.699701][ T9811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  397.877645][ T5902] usb 4-1: USB disconnect, device number 25
[  400.414180][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'.
[  400.439882][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'.
[  400.889479][ T9855] netlink: 1472 bytes leftover after parsing attributes in process `syz.3.857'.
[  401.929306][ T9870] netlink: 'syz.0.863': attribute type 4 has an invalid length.
[  402.017799][ T9870] netlink: 17 bytes leftover after parsing attributes in process `syz.0.863'.
[  403.993310][ T9886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  405.219320][ T9896] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.868'.
[  405.553073][ T9904] netlink: 'syz.5.870': attribute type 4 has an invalid length.
[  405.560923][ T9904] netlink: 17 bytes leftover after parsing attributes in process `syz.5.870'.
[  407.054078][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'.
[  407.063053][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.070703][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.094039][ T5939] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  407.129642][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.137089][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.389253][ T5939] usb 4-1: Using ep0 maxpacket: 32
[  407.850346][ T9911] batadv0 (unregistering): left promiscuous mode
[  409.781251][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.879'.
[  409.824175][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'.
[  409.859528][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.879'.
[  409.875289][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.879'.
[  409.898534][ T5939] usb 4-1: device descriptor read/all, error -71
[  410.048545][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  410.226701][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.253030][ T9948] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.884'.
[  410.302407][   T43] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  410.312322][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.329151][ T9949] netlink: 'syz.3.883': attribute type 4 has an invalid length.
[  410.336898][ T9949] netlink: 17 bytes leftover after parsing attributes in process `syz.3.883'.
[  411.964310][   T43] usb 2-1: config 0 descriptor??
[  412.118573][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  412.475908][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'.
[  413.099459][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  414.052824][   T43] usb 2-1: USB disconnect, device number 21
[  414.583005][ T5902] usb 6-1: device descriptor read/all, error -71
[  417.474570][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'.
[  417.857127][ T5939] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  418.169508][ T5939] usb 6-1: Using ep0 maxpacket: 16
[  418.178662][ T5939] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  418.188812][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  418.197304][ T5939] usb 6-1: Product: syz
[  418.202225][ T5939] usb 6-1: Manufacturer: syz
[  418.206836][ T5939] usb 6-1: SerialNumber: syz
[  418.218840][ T5939] usb 6-1: config 0 descriptor??
[  418.228513][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  418.958557][    T9] usb 4-1: Using ep0 maxpacket: 32
[  421.263911][    T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  421.405740][    T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  421.416214][ T5939] usb 6-1: USB disconnect, device number 8
[  421.469878][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  421.554369][    T9] usb 4-1: config 1 has no interface number 0
[  421.614442][    T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  421.648304][    T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  421.665319][    T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  421.751946][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.765699][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  422.359227][T10046] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.908'.
[  422.510615][    T9] snd_usb_pod 4-1:1.1: set_interface failed
[  422.616357][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  422.644361][    T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  422.828532][ T5910] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  422.971724][    T9] usb 4-1: USB disconnect, device number 28
[  423.066793][T10059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  423.272452][ T5910] usb 1-1: Using ep0 maxpacket: 32
[  423.466574][ T5910] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  423.474978][ T5910] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  423.483647][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  423.498479][ T5910] usb 1-1: config 1 has no interface number 0
[  423.504658][ T5910] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  423.945829][ T5910] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  423.961497][ T5910] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  424.017734][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.162093][ T5910] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  426.010454][T10089] netlink: 1492 bytes leftover after parsing attributes in process `syz.1.919'.
[  426.524594][ T5910] snd_usb_pod 1-1:1.1: set_interface failed
[  426.575314][ T5910] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  426.649970][ T5910] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  426.703929][ T5910] usb 1-1: USB disconnect, device number 23
[  426.826228][T10099] syz.5.921: attempt to access beyond end of device
[  426.826228][T10099] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0
[  426.839763][T10099] hfsplus: unable to find HFS+ superblock
[  427.483524][T10108] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.923'.
[  427.978508][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  428.139027][    T9] usb 4-1: Using ep0 maxpacket: 32
[  428.147154][    T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  428.156022][    T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  428.678262][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  428.707181][    T9] usb 4-1: config 1 has no interface number 0
[  428.754288][    T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  428.874924][    T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  429.087940][    T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  429.596013][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.828542][ T5889] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  429.845703][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  430.699092][ T5889] usb 2-1: Using ep0 maxpacket: 16
[  430.707456][ T5889] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  430.717532][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  430.729636][ T5889] usb 2-1: Product: syz
[  430.733830][ T5889] usb 2-1: Manufacturer: syz
[  430.738698][ T5889] usb 2-1: SerialNumber: syz
[  430.749206][ T5889] usb 2-1: config 0 descriptor??
[  431.633285][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  431.691809][    T9] snd_usb_pod 4-1:1.1: set_interface failed
[  433.032531][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  433.864166][    T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  433.919280][    T9] usb 4-1: USB disconnect, device number 29
[  434.290788][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  434.290803][   T30] audit: type=1400 audit(1753994971.261:530): avc:  denied  { watch_reads } for  pid=10162 comm="syz.5.939" path="/54" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  434.322996][   T30] audit: type=1400 audit(1753994971.291:531): avc:  denied  { setopt } for  pid=10162 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  434.343805][    T9] usb 2-1: USB disconnect, device number 22
[  434.369251][T10166] netlink: 1496 bytes leftover after parsing attributes in process `syz.3.937'.
[  437.953281][T10208] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  437.967526][   T30] audit: type=1400 audit(1753994974.931:532): avc:  denied  { setopt } for  pid=10200 comm="syz.1.947" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  438.610822][T10216] pim6reg1: entered promiscuous mode
[  438.616188][T10216] pim6reg1: entered allmulticast mode
[  438.716623][   T30] audit: type=1400 audit(1753994975.661:533): avc:  denied  { mount } for  pid=10213 comm="syz.3.952" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  439.052101][   T30] audit: type=1400 audit(1753994975.671:534): avc:  denied  { create } for  pid=10213 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  439.141917][T10223] netlink: 'syz.4.953': attribute type 64 has an invalid length.
[  439.150082][T10223] netlink: 'syz.4.953': attribute type 4 has an invalid length.
[  439.157894][T10223] netlink: 152 bytes leftover after parsing attributes in process `syz.4.953'.
[  439.916717][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  439.924725][   T30] audit: type=1400 audit(1753994976.161:535): avc:  denied  { create } for  pid=10218 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  439.945331][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.126491][   T30] audit: type=1400 audit(1753994976.981:536): avc:  denied  { getopt } for  pid=10226 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  440.388495][ T5910] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  440.842095][T10235] syz.4.957: attempt to access beyond end of device
[  440.842095][T10235] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0
[  440.868594][T10235] hfsplus: unable to find HFS+ superblock
[  441.048599][ T5910] usb 2-1: Using ep0 maxpacket: 32
[  441.056957][ T5910] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  441.067951][ T5910] usb 2-1: config 0 has no interface number 0
[  441.088609][ T5910] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  441.266490][ T5910] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  441.285549][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.324374][ T5910] usb 2-1: Product: syz
[  441.349802][ T5910] usb 2-1: Manufacturer: syz
[  441.432561][ T5910] usb 2-1: SerialNumber: syz
[  441.536067][ T5910] usb 2-1: config 0 descriptor??
[  441.644999][ T5910] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  441.658727][ T5910] em28xx 2-1:0.132: Video interface 132 found:
[  441.957248][ T5910] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  442.218725][ T5910] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  442.276625][ T5910] em28xx 2-1:0.132: board has no eeprom
[  442.452792][ T5910] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  442.461996][ T5910] em28xx 2-1:0.132: analog set to bulk mode.
[  442.468011][ T5972] em28xx 2-1:0.132: Registering V4L2 extension
[  442.497548][ T5910] usb 2-1: USB disconnect, device number 23
[  442.559727][ T5972] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  442.573405][ T5972] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  442.714353][ T5910] em28xx 2-1:0.132: Disconnecting em28xx
[  445.300110][ T5972] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  445.334313][ T5972] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  445.354042][ T5972] em28xx 2-1:0.132: No AC97 audio processor
[  445.406980][ T5972] usb 2-1: Decoder not found
[  445.443807][ T5972] em28xx 2-1:0.132: failed to create media graph
[  445.494844][ T5972] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  445.582823][T10282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.602951][ T5972] em28xx 2-1:0.132: Remote control support is not available for this card.
[  445.702724][ T5910] em28xx 2-1:0.132: Closing input extension
[  445.759722][ T5910] em28xx 2-1:0.132: Freeing device
[  449.425811][   T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  450.518490][   T43] usb 6-1: Using ep0 maxpacket: 32
[  450.530283][   T43] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  450.553109][   T43] usb 6-1: config 0 has no interface number 0
[  450.612727][   T43] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  450.854172][   T43] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  450.895164][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.014798][   T43] usb 6-1: Product: syz
[  451.021968][   T43] usb 6-1: Manufacturer: syz
[  451.138515][   T43] usb 6-1: SerialNumber: syz
[  451.148325][   T43] usb 6-1: config 0 descriptor??
[  451.156875][   T43] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  451.169140][   T43] em28xx 6-1:0.132: Video interface 132 found:
[  451.747238][   T43] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  451.826334][   T43] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  451.848258][   T43] em28xx 6-1:0.132: board has no eeprom
[  451.920405][   T43] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  452.073846][   T43] em28xx 6-1:0.132: analog set to bulk mode.
[  452.090162][ T5972] em28xx 6-1:0.132: Registering V4L2 extension
[  452.102336][   T43] usb 6-1: USB disconnect, device number 9
[  452.109363][   T43] em28xx 6-1:0.132: Disconnecting em28xx
[  452.185966][T10366] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  452.516556][ T5972] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  452.528559][ T5972] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  452.535704][ T5972] em28xx 6-1:0.132: No AC97 audio processor
[  452.544565][ T5972] usb 6-1: Decoder not found
[  452.549521][ T5972] em28xx 6-1:0.132: failed to create media graph
[  452.555929][ T5972] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  452.564388][ T5972] em28xx 6-1:0.132: Remote control support is not available for this card.
[  452.575573][   T43] em28xx 6-1:0.132: Closing input extension
[  452.588291][   T43] em28xx 6-1:0.132: Freeing device
[  453.335173][T10379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.739304][T10383] afs: Unknown parameter 'dyn00000000000000000005'
[  453.747844][   T30] audit: type=1400 audit(1753994990.711:537): avc:  denied  { remount } for  pid=10382 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  457.416104][   T30] audit: type=1400 audit(1753994994.381:538): avc:  denied  { create } for  pid=10424 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  457.690186][T10433] tc_dump_action: action bad kind
[  457.788807][   T30] audit: type=1400 audit(1753994994.661:539): avc:  denied  { setopt } for  pid=10424 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  457.871336][ T5972] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  458.232447][ T5972] usb 4-1: Using ep0 maxpacket: 32
[  458.293957][ T5972] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  458.308653][ T5972] usb 4-1: config 0 has no interface number 0
[  458.314781][ T5972] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  458.357699][ T5972] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  458.366971][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.446716][ T5972] usb 4-1: Product: syz
[  458.472182][ T5972] usb 4-1: Manufacturer: syz
[  458.476820][ T5972] usb 4-1: SerialNumber: syz
[  458.511780][ T5972] usb 4-1: config 0 descriptor??
[  458.529968][ T5972] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  458.768600][T10448] netlink: 1500 bytes leftover after parsing attributes in process `syz.1.1012'.
[  458.799018][ T5972] em28xx 4-1:0.132: Video interface 132 found:
[  458.939618][ T5972] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  459.013179][ T5972] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  459.033354][ T5972] em28xx 4-1:0.132: board has no eeprom
[  459.197281][ T5972] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  459.232487][ T5972] em28xx 4-1:0.132: analog set to bulk mode.
[  459.257479][ T5910] em28xx 4-1:0.132: Registering V4L2 extension
[  459.267547][ T5972] usb 4-1: USB disconnect, device number 30
[  459.275338][ T5972] em28xx 4-1:0.132: Disconnecting em28xx
[  459.496717][ T5910] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  459.509237][ T5910] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  459.579139][ T5910] em28xx 4-1:0.132: No AC97 audio processor
[  459.621043][ T5910] usb 4-1: Decoder not found
[  459.634934][ T5910] em28xx 4-1:0.132: failed to create media graph
[  459.804624][ T5910] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  459.813207][ T5910] em28xx 4-1:0.132: Remote control support is not available for this card.
[  459.912300][ T5972] em28xx 4-1:0.132: Closing input extension
[  459.925360][ T5972] em28xx 4-1:0.132: Freeing device
[  459.941185][T10465] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  460.546132][T10465] CIFS: Unable to determine destination address
[  460.715851][ T5828] udevd[5828]: setting mode of /dev/bus/usb/004/030 to 020664 failed: No such file or directory
[  460.853164][ T5828] udevd[5828]: setting owner of /dev/bus/usb/004/030 to uid=0, gid=0 failed: No such file or directory
[  461.485571][   T30] audit: type=1400 audit(1753994998.451:540): avc:  denied  { setopt } for  pid=10476 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  461.486161][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'.
[  461.663497][   T30] audit: type=1400 audit(1753994998.631:541): avc:  denied  { bind } for  pid=10476 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  462.622779][   T30] audit: type=1400 audit(1753994999.591:542): avc:  denied  { write } for  pid=10476 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  464.028504][   T30] audit: type=1400 audit(1753995000.981:543): avc:  denied  { read write } for  pid=10495 comm="syz.3.1025" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  464.091708][   T30] audit: type=1400 audit(1753995000.981:544): avc:  denied  { open } for  pid=10495 comm="syz.3.1025" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  464.165892][   T30] audit: type=1400 audit(1753995000.981:545): avc:  denied  { ioctl } for  pid=10495 comm="syz.3.1025" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  464.801700][T10516] netlink: 1500 bytes leftover after parsing attributes in process `syz.1.1027'.
[  465.124636][   T30] audit: type=1400 audit(1753995002.091:546): avc:  denied  { create } for  pid=10519 comm="syz.5.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  465.233794][   T30] audit: type=1400 audit(1753995002.091:547): avc:  denied  { connect } for  pid=10519 comm="syz.5.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  465.346281][   T30] audit: type=1400 audit(1753995002.281:548): avc:  denied  { write } for  pid=10519 comm="syz.5.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  465.449356][T10518] lo speed is unknown, defaulting to 1000
[  466.173280][T10518] wg1 speed is unknown, defaulting to 1000
[  466.991382][T10536] syz.0.1035: attempt to access beyond end of device
[  466.991382][T10536] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  467.004653][T10536] hfsplus: unable to find HFS+ superblock
[  469.789375][T10555] syz.1.1039: attempt to access beyond end of device
[  469.789375][T10555] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0
[  469.873869][T10555] hfsplus: unable to find HFS+ superblock
[  471.806033][T10576] syz.0.1042: attempt to access beyond end of device
[  471.806033][T10576] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  471.819321][T10576] hfsplus: unable to find HFS+ superblock
[  473.096008][   T30] audit: type=1400 audit(1753995010.061:549): avc:  denied  { connect } for  pid=10583 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  473.250928][   T30] audit: type=1400 audit(1753995010.091:550): avc:  denied  { write } for  pid=10583 comm="syz.4.1045" path="socket:[26156]" dev="sockfs" ino=26156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  473.988725][   T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  474.151153][T10600] netlink: 1500 bytes leftover after parsing attributes in process `syz.1.1047'.
[  474.170675][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.190844][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.253595][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  474.334598][   T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  474.358499][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.298246][   T43] usb 6-1: config 0 descriptor??
[  476.786174][   T30] audit: type=1400 audit(1753995013.741:551): avc:  denied  { append } for  pid=10586 comm="syz.5.1046" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  477.453308][   T43] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xe
[  477.507710][   T43] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 11/15
[  477.551243][   T43] plantronics 0003:047F:FFFF.000B: parse failed
[  477.557613][   T43] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22
[  477.878747][   T43] usb 6-1: USB disconnect, device number 10
[  478.127350][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'.
[  478.726884][   T30] audit: type=1400 audit(1753995015.691:552): avc:  denied  { ioctl } for  pid=10627 comm="syz.4.1057" path="socket:[27322]" dev="sockfs" ino=27322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  478.752194][T10636] veth1_to_bond: entered allmulticast mode
[  479.162174][   T30] audit: type=1400 audit(1753995016.111:553): avc:  denied  { connect } for  pid=10627 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  479.306400][T10636] veth1_to_bond: entered promiscuous mode
[  480.621798][   T30] audit: type=1400 audit(1753995017.591:554): avc:  denied  { getopt } for  pid=10627 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  480.727702][T10627] veth1_to_bond: left promiscuous mode
[  480.735488][T10627] veth1_to_bond: left allmulticast mode
[  480.828462][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  481.118607][   T10] usb 6-1: Using ep0 maxpacket: 32
[  481.140270][   T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  481.167955][T10678] netlink: 1420 bytes leftover after parsing attributes in process `syz.0.1067'.
[  481.591097][   T10] usb 6-1: config 0 has no interface number 0
[  481.600504][   T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  481.612641][   T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  481.621981][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.633559][   T10] usb 6-1: Product: syz
[  481.656691][   T10] usb 6-1: Manufacturer: syz
[  481.694490][T10680] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1069'.
[  481.857254][   T10] usb 6-1: SerialNumber: syz
[  481.935616][   T10] usb 6-1: config 0 descriptor??
[  482.001997][   T10] usb 6-1: can't set config #0, error -71
[  482.022269][   T10] usb 6-1: USB disconnect, device number 11
[  482.430345][   T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  483.218447][   T43] usb 4-1: Using ep0 maxpacket: 32
[  483.295419][   T43] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  483.296778][   T30] audit: type=1326 audit(1753995020.261:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  483.458250][   T30] audit: type=1326 audit(1753995020.261:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  483.994330][   T43] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  484.007615][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  484.017591][   T43] usb 4-1: config 1 has no interface number 0
[  484.029421][   T30] audit: type=1326 audit(1753995020.331:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.055106][   T30] audit: type=1326 audit(1753995020.341:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.084848][   T30] audit: type=1326 audit(1753995020.341:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.098467][   T43] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  484.194113][   T43] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  484.227490][   T30] audit: type=1326 audit(1753995020.341:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.261316][T10709] FAULT_INJECTION: forcing a failure.
[  484.261316][T10709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.299535][   T30] audit: type=1326 audit(1753995020.341:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.318481][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.4.1077 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  484.318508][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  484.318518][T10709] Call Trace:
[  484.318523][T10709]  <TASK>
[  484.318529][T10709]  dump_stack_lvl+0x16c/0x1f0
[  484.318558][T10709]  should_fail_ex+0x512/0x640
[  484.318583][T10709]  _copy_from_user+0x2e/0xd0
[  484.318607][T10709]  __sys_bpf+0x21d/0x4de0
[  484.318631][T10709]  ? __pfx___sys_bpf+0x10/0x10
[  484.318651][T10709]  ? ksys_write+0x190/0x250
[  484.318669][T10709]  ? __mutex_unlock_slowpath+0x163/0x800
[  484.318698][T10709]  ? fput+0x70/0xf0
[  484.318716][T10709]  ? ksys_write+0x1ac/0x250
[  484.318730][T10709]  ? __pfx_ksys_write+0x10/0x10
[  484.318748][T10709]  __x64_sys_bpf+0x78/0xc0
[  484.318768][T10709]  ? lockdep_hardirqs_on+0x7c/0x110
[  484.318791][T10709]  do_syscall_64+0xcd/0x4c0
[  484.318808][T10709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.318824][T10709] RIP: 0033:0x7f917778eb69
[  484.318837][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.318852][T10709] RSP: 002b:00007f91786c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  484.318868][T10709] RAX: ffffffffffffffda RBX: 00007f91779b5fa0 RCX: 00007f917778eb69
[  484.318878][T10709] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  484.318887][T10709] RBP: 00007f91786c2090 R08: 0000000000000000 R09: 0000000000000000
[  484.318897][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.318906][T10709] R13: 0000000000000000 R14: 00007f91779b5fa0 R15: 00007ffcb5589078
[  484.318927][T10709]  </TASK>
[  484.508828][   T30] audit: type=1326 audit(1753995020.341:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.532933][   T30] audit: type=1326 audit(1753995020.341:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.575358][   T43] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  484.818055][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.893662][   T30] audit: type=1326 audit(1753995020.341:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  484.966369][T10713] fuse: Bad value for 'user_id'
[  484.974974][T10713] fuse: Bad value for 'user_id'
[  484.984757][   T30] audit: type=1326 audit(1753995020.341:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  485.008594][   T43] usb 4-1: can't set config #1, error -71
[  485.032727][   T43] usb 4-1: USB disconnect, device number 31
[  485.429457][   T30] audit: type=1326 audit(1753995020.341:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.0.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f4458eb69 code=0x7ffc0000
[  485.473684][T10721] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1080'.
[  486.158608][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  486.378456][   T10] usb 5-1: Using ep0 maxpacket: 32
[  486.398326][   T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  486.416842][   T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  486.460480][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  486.489804][   T10] usb 5-1: config 1 has no interface number 0
[  486.516324][   T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  486.533451][T10740] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  486.548041][   T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  486.559893][T10732] netlink: 1420 bytes leftover after parsing attributes in process `syz.1.1085'.
[  486.585691][   T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  486.605667][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.079872][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  488.128455][   T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  488.198483][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  488.278788][   T43] usb 2-1: Using ep0 maxpacket: 16
[  488.316559][   T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  488.337896][   T43] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  488.971560][   T43] usb 2-1: Product: syz
[  488.976252][   T43] usb 2-1: Manufacturer: syz
[  488.993339][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.016285][   T43] usb 2-1: SerialNumber: syz
[  489.026407][   T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  489.193924][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.323417][   T43] usb 2-1: config 0 descriptor??
[  489.372606][   T24] usb 6-1: config 0 descriptor??
[  489.789429][   T10] snd_usb_pod 5-1:1.1: set_interface failed
[  489.795536][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  489.955056][   T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  489.966951][   T10] usb 5-1: USB disconnect, device number 27
[  489.978672][   T24] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  490.154752][   T24] lenovo 0003:17EF:6047.000C: Failed to switch F7/9/11 mode: -71
[  490.184291][   T24] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71
[  490.211223][   T24] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71
[  490.220147][   T24] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71
[  490.234033][   T24] usb 6-1: USB disconnect, device number 12
[  490.553279][T10780] netlink: 'syz.4.1093': attribute type 4 has an invalid length.
[  490.561319][   T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  490.580686][T10780] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1093'.
[  490.726689][   T43] usb 4-1: Using ep0 maxpacket: 32
[  490.740657][   T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  490.749750][   T43] usb 4-1: config 0 has no interface number 0
[  490.755997][   T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  490.778072][   T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  490.804655][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.814792][   T43] usb 4-1: Product: syz
[  490.819514][   T43] usb 4-1: Manufacturer: syz
[  490.824239][   T43] usb 4-1: SerialNumber: syz
[  490.958311][   T43] usb 4-1: config 0 descriptor??
[  490.967768][   T10] usb 2-1: USB disconnect, device number 24
[  491.565144][   T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  491.578793][   T43] em28xx 4-1:0.132: Video interface 132 found:
[  491.640766][   T43] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  491.808476][   T43] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  491.838200][   T43] em28xx 4-1:0.132: board has no eeprom
[  491.908420][   T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  491.917306][   T43] em28xx 4-1:0.132: analog set to bulk mode.
[  491.928499][ T5902] em28xx 4-1:0.132: Registering V4L2 extension
[  491.949599][   T43] usb 4-1: USB disconnect, device number 32
[  492.179316][T10800] netlink: 1420 bytes leftover after parsing attributes in process `syz.1.1098'.
[  492.192896][ T5902] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  492.210133][   T43] em28xx 4-1:0.132: Disconnecting em28xx
[  492.950485][ T5902] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  492.967736][ T5902] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  493.231730][ T5902] em28xx 4-1:0.132: No AC97 audio processor
[  493.430197][ T5902] usb 4-1: Decoder not found
[  493.434831][ T5902] em28xx 4-1:0.132: failed to create media graph
[  493.475967][ T5902] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  493.503493][T10816] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present
[  493.516945][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  493.516978][   T30] audit: type=1400 audit(1753995030.461:597): avc:  denied  { watch_sb } for  pid=10810 comm="syz.0.1103" path="/231" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  493.925960][ T5902] em28xx 4-1:0.132: Remote control support is not available for this card.
[  493.935148][   T43] em28xx 4-1:0.132: Closing input extension
[  493.992228][T10820] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1104'.
[  494.077941][   T43] ==================================================================
[  494.086010][   T43] BUG: KASAN: slab-use-after-free in media_device_unregister+0x598/0x5c0
[  494.094404][   T43] Read of size 8 at addr ffff88806b2c0210 by task kworker/1:1/43
[  494.102099][   T43] 
[  494.104398][   T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  494.104413][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  494.104421][   T43] Workqueue: usb_hub_wq hub_event
[  494.104437][   T43] Call Trace:
[  494.104443][   T43]  <TASK>
[  494.104449][   T43]  dump_stack_lvl+0x116/0x1f0
[  494.104468][   T43]  print_report+0xcd/0x630
[  494.104481][   T43]  ? __virt_addr_valid+0x81/0x610
[  494.104496][   T43]  ? __phys_addr+0xe8/0x180
[  494.104511][   T43]  ? media_device_unregister+0x598/0x5c0
[  494.104521][   T43]  kasan_report+0xe0/0x110
[  494.104533][   T43]  ? media_device_unregister+0x598/0x5c0
[  494.104545][   T43]  media_device_unregister+0x598/0x5c0
[  494.104559][   T43]  em28xx_release_resources+0xb2/0x2d0
[  494.104575][   T43]  em28xx_usb_disconnect+0x1de/0x610
[  494.104592][   T43]  usb_unbind_interface+0x1da/0x9e0
[  494.104609][   T43]  ? kernfs_remove_by_name_ns+0xbe/0x110
[  494.104625][   T43]  ? __pfx_usb_unbind_interface+0x10/0x10
[  494.104641][   T43]  device_remove+0x125/0x170
[  494.104653][   T43]  device_release_driver_internal+0x44b/0x620
[  494.104669][   T43]  bus_remove_device+0x22f/0x420
[  494.104681][   T43]  device_del+0x396/0x9f0
[  494.104693][   T43]  ? __pfx_device_del+0x10/0x10
[  494.104705][   T43]  ? kobject_put+0x210/0x5a0
[  494.104716][   T43]  usb_disable_device+0x355/0x7d0
[  494.104731][   T43]  usb_disconnect+0x2e1/0x9c0
[  494.104746][   T43]  hub_event+0x1c81/0x4fe0
[  494.104763][   T43]  ? __lock_acquire+0xb8a/0x1c90
[  494.104780][   T43]  ? __pfx_hub_event+0x10/0x10
[  494.104793][   T43]  ? devm_arch_io_reserve_memtype_wc+0xc0/0x140
[  494.104813][   T43]  ? rcu_is_watching+0x12/0xc0
[  494.104826][   T43]  process_one_work+0x9cf/0x1b70
[  494.104844][   T43]  ? __pfx_hub_event+0x10/0x10
[  494.104857][   T43]  ? __pfx_process_one_work+0x10/0x10
[  494.104870][   T43]  ? assign_work+0x1a0/0x250
[  494.104880][   T43]  worker_thread+0x6c8/0xf10
[  494.104893][   T43]  ? __pfx_worker_thread+0x10/0x10
[  494.104904][   T43]  kthread+0x3c5/0x780
[  494.104914][   T43]  ? __pfx_kthread+0x10/0x10
[  494.104924][   T43]  ? rcu_is_watching+0x12/0xc0
[  494.104937][   T43]  ? __pfx_kthread+0x10/0x10
[  494.104947][   T43]  ret_from_fork+0x5d4/0x6f0
[  494.104958][   T43]  ? __pfx_kthread+0x10/0x10
[  494.104968][   T43]  ret_from_fork_asm+0x1a/0x30
[  494.104984][   T43]  </TASK>
[  494.104988][   T43] 
[  494.334033][   T43] Allocated by task 5902:
[  494.338330][   T43]  kasan_save_stack+0x33/0x60
[  494.342999][   T43]  kasan_save_track+0x14/0x30
[  494.347644][   T43]  __kasan_kmalloc+0xaa/0xb0
[  494.352201][   T43]  em28xx_v4l2_init+0x114/0x4080
[  494.357121][   T43]  em28xx_init_extension+0x13a/0x200
[  494.362377][   T43]  request_module_async+0x61/0x70
[  494.367371][   T43]  process_one_work+0x9cf/0x1b70
[  494.368512][ T5889] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  494.372284][   T43]  worker_thread+0x6c8/0xf10
[  494.372307][   T43]  kthread+0x3c5/0x780
[  494.372322][   T43]  ret_from_fork+0x5d4/0x6f0
[  494.372336][   T43]  ret_from_fork_asm+0x1a/0x30
[  494.372356][   T43] 
[  494.372362][   T43] Freed by task 5902:
[  494.372371][   T43]  kasan_save_stack+0x33/0x60
[  494.372387][   T43]  kasan_save_track+0x14/0x30
[  494.372401][   T43]  kasan_save_free_info+0x3b/0x60
[  494.372424][   T43]  __kasan_slab_free+0x51/0x70
[  494.372443][   T43]  kfree+0x2b4/0x4d0
[  494.372468][   T43]  em28xx_v4l2_init+0x22b5/0x4080
[  494.372484][   T43]  em28xx_init_extension+0x13a/0x200
[  494.372505][   T43]  request_module_async+0x61/0x70
[  494.372528][   T43]  process_one_work+0x9cf/0x1b70
[  494.372544][   T43]  worker_thread+0x6c8/0xf10
[  494.372559][   T43]  kthread+0x3c5/0x780
[  494.372573][   T43]  ret_from_fork+0x5d4/0x6f0
[  494.372586][   T43]  ret_from_fork_asm+0x1a/0x30
[  494.372606][   T43] 
[  494.372611][   T43] The buggy address belongs to the object at ffff88806b2c0000
[  494.372611][   T43]  which belongs to the cache kmalloc-8k of size 8192
[  494.372626][   T43] The buggy address is located 528 bytes inside of
[  494.372626][   T43]  freed 8192-byte region [ffff88806b2c0000, ffff88806b2c2000)
[  494.372644][   T43] 
[  494.372649][   T43] The buggy address belongs to the physical page:
[  494.372656][   T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b2c0
[  494.372673][   T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  494.372687][   T43] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  494.372704][   T43] page_type: f5(slab)
[  494.372721][   T43] raw: 00fff00000000040 ffff88801b842280 0000000000000000 0000000000000001
[  494.372737][   T43] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  494.372763][   T43] head: 00fff00000000040 ffff88801b842280 0000000000000000 0000000000000001
[  494.372780][   T43] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  494.372798][   T43] head: 00fff00000000003 ffffea0001acb001 00000000ffffffff 00000000ffffffff
[  494.372816][   T43] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  494.372828][   T43] page dumped because: kasan: bad access detected
[  494.372837][   T43] page_owner tracks the page as allocated
[  494.372843][   T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10321, tgid 10316 (syz.4.977), ts 449763272755, free_ts 449745462547
[  494.372873][   T43]  post_alloc_hook+0x1c0/0x230
[  494.372887][   T43]  get_page_from_freelist+0x1321/0x3890
[  494.372903][   T43]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  494.372919][   T43]  alloc_pages_mpol+0x1fb/0x550
[  494.372936][   T43]  new_slab+0x247/0x330
[  494.372957][   T43]  ___slab_alloc+0xd1e/0x1780
[  494.372978][   T43]  __slab_alloc.constprop.0+0x56/0xb0
[  494.373002][   T43]  __kmalloc_cache_noprof+0xfb/0x3e0
[  494.373027][   T43]  tomoyo_init_log+0xc8a/0x2140
[  494.373044][   T43]  tomoyo_supervisor+0x302/0x13b0
[  494.373064][   T43]  tomoyo_env_perm+0x191/0x200
[  494.373086][   T43]  tomoyo_find_next_domain+0xec2/0x20b0
[  494.373109][   T43]  tomoyo_bprm_check_security+0x12e/0x1d0
[  494.373132][   T43]  security_bprm_check+0x1b9/0x1e0
[  494.373156][   T43]  bprm_execve+0x810/0x1650
[  494.373182][   T43]  do_execveat_common.isra.0+0x4a5/0x610
[  494.373198][   T43] page last free pid 10321 tgid 10316 stack trace:
[  494.373208][   T43]  __free_frozen_pages+0x7fe/0x1180
[  494.373232][   T43]  bpf_check+0x909/0xc600
[  494.373249][   T43]  bpf_prog_load+0xe41/0x2490
[  494.373269][   T43]  __sys_bpf+0x4a3f/0x4de0
[  494.373290][   T43]  __x64_sys_bpf+0x78/0xc0
[  494.373310][   T43]  do_syscall_64+0xcd/0x4c0
[  494.734124][   T43]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.739992][   T43] 
[  494.742285][   T43] Memory state around the buggy address:
[  494.747879][   T43]  ffff88806b2c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.755917][   T43]  ffff88806b2c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.763957][   T43] >ffff88806b2c0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.771984][   T43]                          ^
[  494.776549][   T43]  ffff88806b2c0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.784578][   T43]  ffff88806b2c0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.792605][   T43] ==================================================================
[  494.903602][   T30] audit: type=1400 audit(1753995031.861:598): avc:  denied  { read } for  pid=5178 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  494.929141][   T30] audit: type=1400 audit(1753995031.861:599): avc:  denied  { search } for  pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.952517][   T30] audit: type=1400 audit(1753995031.861:600): avc:  denied  { search } for  pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.238535][   T30] audit: type=1400 audit(1753995031.861:601): avc:  denied  { add_name } for  pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.276104][   T30] audit: type=1400 audit(1753995031.861:602): avc:  denied  { create } for  pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  495.297568][   T43] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  495.304775][   T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  495.316295][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.326336][   T43] Workqueue: usb_hub_wq hub_event
[  495.331346][   T43] Call Trace:
[  495.334597][   T43]  <TASK>
[  495.337502][   T43]  dump_stack_lvl+0x3d/0x1f0
[  495.342080][   T43]  vpanic+0x6a3/0x780
[  495.346064][   T43]  ? __pfx_vpanic+0x10/0x10
[  495.350557][   T43]  ? __pfx_vprintk_emit+0x10/0x10
[  495.355582][   T43]  ? media_device_unregister+0x598/0x5c0
[  495.361223][   T43]  panic+0xca/0xd0
[  495.364960][   T43]  ? __pfx_panic+0x10/0x10
[  495.369373][   T43]  ? media_device_unregister+0x598/0x5c0
[  495.374988][   T43]  ? preempt_schedule_common+0x44/0xc0
[  495.380447][   T43]  ? preempt_schedule_thunk+0x16/0x30
[  495.385826][   T43]  check_panic_on_warn+0xab/0xb0
[  495.390766][   T43]  end_report+0x107/0x170
[  495.395093][   T43]  kasan_report+0xee/0x110
[  495.399504][   T43]  ? media_device_unregister+0x598/0x5c0
[  495.405138][   T43]  media_device_unregister+0x598/0x5c0
[  495.410601][   T43]  em28xx_release_resources+0xb2/0x2d0
[  495.416072][   T43]  em28xx_usb_disconnect+0x1de/0x610
[  495.421352][   T43]  usb_unbind_interface+0x1da/0x9e0
[  495.426552][   T43]  ? kernfs_remove_by_name_ns+0xbe/0x110
[  495.432184][   T43]  ? __pfx_usb_unbind_interface+0x10/0x10
[  495.437902][   T43]  device_remove+0x125/0x170
[  495.442495][   T43]  device_release_driver_internal+0x44b/0x620
[  495.448657][   T43]  bus_remove_device+0x22f/0x420
[  495.453585][   T43]  device_del+0x396/0x9f0
[  495.457912][   T43]  ? __pfx_device_del+0x10/0x10
[  495.462762][   T43]  ? kobject_put+0x210/0x5a0
[  495.467350][   T43]  usb_disable_device+0x355/0x7d0
[  495.472381][   T43]  usb_disconnect+0x2e1/0x9c0
[  495.477074][   T43]  hub_event+0x1c81/0x4fe0
[  495.481496][   T43]  ? __lock_acquire+0xb8a/0x1c90
[  495.486435][   T43]  ? __pfx_hub_event+0x10/0x10
[  495.491207][   T43]  ? devm_arch_io_reserve_memtype_wc+0xc0/0x140
[  495.497477][   T43]  ? rcu_is_watching+0x12/0xc0
[  495.502253][   T43]  process_one_work+0x9cf/0x1b70
[  495.507214][   T43]  ? __pfx_hub_event+0x10/0x10
[  495.512002][   T43]  ? __pfx_process_one_work+0x10/0x10
[  495.517401][   T43]  ? assign_work+0x1a0/0x250
[  495.521988][   T43]  worker_thread+0x6c8/0xf10
[  495.526582][   T43]  ? __pfx_worker_thread+0x10/0x10
[  495.531682][   T43]  kthread+0x3c5/0x780
[  495.535747][   T43]  ? __pfx_kthread+0x10/0x10
[  495.540332][   T43]  ? rcu_is_watching+0x12/0xc0
[  495.545088][   T43]  ? __pfx_kthread+0x10/0x10
[  495.549671][   T43]  ret_from_fork+0x5d4/0x6f0
[  495.554250][   T43]  ? __pfx_kthread+0x10/0x10
[  495.558832][   T43]  ret_from_fork_asm+0x1a/0x30
[  495.563600][   T43]  </TASK>
[  495.566831][   T43] Kernel Offset: disabled
[  495.571151][   T43] Rebooting in 86400 seconds..