last executing test programs:

5m22.611599545s ago: executing program 4 (id=616):
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
setreuid(0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
socket(0x2a, 0x2, 0x0)
set_mempolicy_home_node(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
mount$9p_fd(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x1008009, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=<r8=>r5], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

5m21.457239049s ago: executing program 4 (id=621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000180)='sched_switch\x00', &(0x7f00000001c0)='\x00', &(0x7f00000002c0)='GPL\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='GPL\x00']})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00ea600000006111380000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

5m20.123540822s ago: executing program 4 (id=624):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080b0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x142)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x400000200, 0x2})
r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x10780, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockname$unix(r3, &(0x7f00000002c0)=@abs, &(0x7f0000000000)=0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local'}}}]})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880)

5m18.817262646s ago: executing program 4 (id=628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/wireless\x00')
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0)
poll(&(0x7f0000000300)=[{r6, 0x20}, {r5, 0x2092}, {r1, 0xa0a1}, {r4, 0x5}, {r5, 0x18}], 0x5, 0x7)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000380)={r6, r4, 0x1a6})
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x73)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x58620148}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf", @ANYRES32=0x0, @ANYBLOB="ac00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040004000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="1c02028040000100dfd34bb98ab1bdcf6173685f737461747300000080000000000000000000000000000000050003000b000000080004000e000000080007000000000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000440004001000b6ff04000000000005030000000004000a03040000000b0001810100000001f0017f9fa800000008cb4d0400000002000606f40e0000070023c20b00000040000100240001007072696f7269747900000d000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYBLOB, @ANYRES32, @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000005000300030000000800", @ANYRES32, @ANYBLOB], 0x37c}, 0x1, 0x0, 0x0, 0x80}, 0x4881)
sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0xc001)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880)
close_range(r7, 0xffffffffffffffff, 0x0)

5m17.772477071s ago: executing program 4 (id=633):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = fsmount(r0, 0x1, 0x4)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000})
write(0xffffffffffffffff, &(0x7f0000000040)="1b00000018002551075c0165ff0ffc02802000030004000500e100", 0x1b)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
fchdir(r3)
mkdirat(r3, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)={0xa6, "4fd9ac487f276be2d54ab93ce1bed7961adf2af012310e3c79f27c2f26476ee3c7685190b43755273c89eb6bf32ffd5d7e2cd8702bf25398740369a694e84dd617affbb9483de01e32cd3a362d3d0c06d06730a18324d1bf868593dac0c1f8bbc90f06b01dad8f0caf311eb4df14e13a2ab5f880a496ab9d73013a36b7db547812a6edf4d38e83090f276bec1732c4e81e290d54eedc1c27a3aeb8b24669f13ba3813380813e"})

5m17.309625162s ago: executing program 4 (id=634):
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"})
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_io_uring_setup(0x897, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(r3, 0x47ba, 0x2aad, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, <r8=>r6})
ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x5)

5m1.8731246s ago: executing program 32 (id=634):
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"})
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_io_uring_setup(0x897, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(r3, 0x47ba, 0x2aad, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, <r8=>r6})
ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x5)

2m33.622888317s ago: executing program 1 (id=1283):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64)
shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 32)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 64)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) (async, rerun: 64)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESOCT=r1], 0x48) (async)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)

2m32.76132982s ago: executing program 1 (id=1285):
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000400), 0x4, 0x300)
read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_create(0x4, &(0x7f0000000200)={0x0, 0x13, 0x4, @thr={&(0x7f0000000040)="ce8f507f9d9abcb3966124686a46a9f1e8def0075cb91af0836a3043263ee21816244c929c456d5573a86d21756f5c67d23c3f8cf27961dc", &(0x7f00000000c0)="6e458d712371be5f08703b1fb51175317444efb26d6e01b12bba304a8786cc4e1d3d7cc614c901bcc30201c0bd696c0df219296631a4e7b588c2ae50febe986eba7db87922e10ddb5cdfe455456cceee6af859bd97371dc82e7c343d103c60b4ac43a65cb5a6c2e904a7a59bd0867f8c0f9eaf2e8cce3d38cd9f9188ec67dc22a667bec5dcdc89913e942c21f322a2bfe6a49f12f278e7b8ba5a6c24b86cfd5bcc80218d9eaa94cc4d0089eda10243a5019e2262bf8e3b1e87b7b8d4b1a8709e51f0c89e6ab1ad511091962b04cd9c704c524ca13b765f243581d8fa06777fd507075a36"}}, &(0x7f00000002c0))
clock_gettime(0x0, &(0x7f0000000300))
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
ustat(0x7fffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[], 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)

2m31.540042337s ago: executing program 1 (id=1291):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000, 0xfffffffffffffffe})

2m31.385315303s ago: executing program 1 (id=1293):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x6800c2)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000), 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {0xf0}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x5)
fchdir(r10)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000040)={0x11080})
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, r13, 0x215}, [@IFLA_MASTER={0x8, 0xa, r13}]}, 0x28}, 0x1, 0xba01}, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)

2m30.452161834s ago: executing program 1 (id=1295):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) (async, rerun: 64)
r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 32)
syz_open_dev$ndb(&(0x7f0000000880), 0x0, 0x801)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x5)

2m30.222506331s ago: executing program 1 (id=1297):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd422bd676d3863b7, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x1a, {[@main=@item_012={0x1, 0x0, 0xa, 'z'}, @local=@item_012={0x1, 0x2, 0x4, '\''}, @global=@item_012={0x2, 0x1, 0x1, "132d"}, @global=@item_012={0x2, 0x1, 0xa, "c83b"}, @main=@item_4={0x3, 0x0, 0x8, "fbc5acbf"}, @global=@item_012={0x2, 0x1, 0x8, "15c5"}, @local=@item_012={0x2, 0x2, 0x4, ',,'}, @global=@item_4={0x3, 0x1, 0xb, "95eac7c7"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x7, 0x55, {0x55, 0x0, "65918887b9b03f10c10a03c0bf9de5b12eb5d661c92c710b70e41837031d5f08e17c3bb8307a77c4dc98f3ccdc34f8b44311dc96fc7ec4e8cc9d8ebdc8b1cc4f4de4fd7fa82012542b96e73f001abbda00f269"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x0, 0x9, "2d6bda4c", "9d1e1643"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x4, 0x8, 0xa, 0x1, 0x81}}}, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400652370008c1d14c8cf6678956e33c0000f45ffc45b2b258103f2863e2960fbe1205000002007d5a2c9cac8662"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x800, 0x20, [0x0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000400)={0x40, 0xb, 0x2, "128e"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, '8B'}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000580)={0x40, 0x1c, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0x21, 0x1}})

2m15.164335464s ago: executing program 33 (id=1297):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd422bd676d3863b7, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x1a, {[@main=@item_012={0x1, 0x0, 0xa, 'z'}, @local=@item_012={0x1, 0x2, 0x4, '\''}, @global=@item_012={0x2, 0x1, 0x1, "132d"}, @global=@item_012={0x2, 0x1, 0xa, "c83b"}, @main=@item_4={0x3, 0x0, 0x8, "fbc5acbf"}, @global=@item_012={0x2, 0x1, 0x8, "15c5"}, @local=@item_012={0x2, 0x2, 0x4, ',,'}, @global=@item_4={0x3, 0x1, 0xb, "95eac7c7"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x7, 0x55, {0x55, 0x0, "65918887b9b03f10c10a03c0bf9de5b12eb5d661c92c710b70e41837031d5f08e17c3bb8307a77c4dc98f3ccdc34f8b44311dc96fc7ec4e8cc9d8ebdc8b1cc4f4de4fd7fa82012542b96e73f001abbda00f269"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x0, 0x9, "2d6bda4c", "9d1e1643"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x4, 0x8, 0xa, 0x1, 0x81}}}, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400652370008c1d14c8cf6678956e33c0000f45ffc45b2b258103f2863e2960fbe1205000002007d5a2c9cac8662"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x800, 0x20, [0x0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000400)={0x40, 0xb, 0x2, "128e"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, '8B'}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000580)={0x40, 0x1c, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0x21, 0x1}})

12.690404872s ago: executing program 6 (id=1787):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2803402, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0)

12.502974081s ago: executing program 6 (id=1790):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0xfffffffb)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x0, 0x100000000}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0)
lseek(r6, 0x1fd, 0x3)
io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000040, 0x0, 0x0) (fail_nth: 12)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000240)={0x1})
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)

10.372547764s ago: executing program 3 (id=1798):
syz_io_uring_setup(0x837, &(0x7f0000001e40)={0x0, 0xdeac, 0x8000, 0x1, 0x40003cc}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x20})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0)
inotify_init1(0x800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xced, 0x0, &(0x7f0000000180)=<r2=>0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdir(&(0x7f0000000080)='./file0\x00', 0x115)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x181100, 0x0)
ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000080)={0x0, 0xce2, 0x7c, 0x101, 0x8, 0x7, 0xffff0000})

9.949916146s ago: executing program 6 (id=1799):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18, 0x40045}], 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
pipe(&(0x7f0000000440))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000000801010001000000000000050000070600024088630000040004800900010073797a300000000005000300d0"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001a00010000000000000000001c00000014000800fc0200000000c9c9a320000000000000"], 0x28}}, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtfilter={0x0, 0x2c, 0xa08, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff1, 0x1}, {0x3, 0xb}, {0xffff, 0x10}}, [@TCA_RATE={0x0, 0x5, {0x7}}, @TCA_RATE={0x0, 0x5, {0x1, 0xff}}]}, 0x2c}}, 0x40)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x104}}}]}]}]}}]}, 0x50}}, 0x2008c010)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008"], 0x30}}, 0x8040)
socket$nl_generic(0x10, 0x3, 0x10)

9.877074544s ago: executing program 0 (id=1800):
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r2)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r4, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socket$pppl2tp(0x18, 0x1, 0x1)

8.768924459s ago: executing program 6 (id=1801):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="000e0400000027cd3d"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
accept4(r1, &(0x7f0000000200)=@caif=@rfm, 0x0, 0x80000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="10ff0000", @ANYRES32=0xee00, @ANYBLOB="0c4000800500010098000000"], 0x2c}], 0x1}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc)
execve(0x0, &(0x7f0000000780)={[&(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*ck\xbf\xc8\x8f\xd3U\xd1\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXhB\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\x04\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb8\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4', 0x0, &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)="6de1844db337d33f9cd1a0579fd9bb1dc3bf72d99172c98dca30221a51d58e9950c805e643309f74e633e528889633765cef761cadab3dcd4d0f0a1371faf67ac62cc13e2cddc3a62f04057f7bba59b008b945fe578324a54dc16df3cfd154bc1c9e4ecbe7d532ccc0668fee96509282c264", 0x72}, {&(0x7f00000000c0)}, {&(0x7f0000000480)="d6d8048f86138018a0ae132faa5714976c40a2607f73e77d1efda1926125d5c4854386575a1266f51d5584c723264d10c79b4828df8aed9ea236576b", 0x3c}], 0x3)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000001100))
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x1, 0x93d, 0x775, 0x40, 0x1b, "85d2a0f3df6dd40c82b7145001794d99d7c75a"})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x4d, 0x9, 0x3, 0xff, 0x3}, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f0c000107101200730200"]})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

8.431810161s ago: executing program 0 (id=1802):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x81000, 0x0)
ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x88003, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f00000019c0)=[{0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/168, 0xa8}], &(0x7f0000000340)=[0xfb08]}, {0x8, 0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/52, 0x34}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)=""/214, 0xd6}, {&(0x7f0000001840)=""/27, 0x1b}, {&(0x7f0000001880)=""/114, 0x72}], &(0x7f0000001980)=[0x2, 0x5, 0x3, 0xfffffffffffffffd, 0xbb, 0xbe]}], 0x2)
r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x6cf}, &(0x7f0000000300), &(0x7f00000002c0))
r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5884, 0x0, 0x3, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280))
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/14, 0xfffffffffffffe0b)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x47bc, 0xf6, 0x0, 0x0, 0x0)
r4 = eventfd2(0x7, 0x40000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)
r5 = getpid()
fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x0, r5})
close(r0)
r6 = io_uring_setup(0xc75, &(0x7f00000001c0)={0x0, 0xaa39, 0x80, 0x1, 0x3a4, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x50, r6, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1100000001000000050000000000000000000000edffffffffffffff"], 0x50)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r6, 0x1a, &(0x7f0000000180)={0x9}, 0x1)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab400, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000300))
ioctl$SNDCTL_SEQ_RESET(r9, 0x5100)
close_range(r7, r8, 0x2)

8.431124477s ago: executing program 5 (id=1803):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000780)="35eafbdf2a8cd928fe303a19d674d5807ab4392fab8d6bc399d1a41e038939333ef179d6d629fc6c408346619239b09bf8fe8c139c74e00d1d72871be13697cbe40d0ed499ddd492c6e19084a5cc31fa5c0ad861d09e84418e0c4fefd0117667abfd47d53525082ec7ee21722bd22603f6c4eebbb6b72bed038473a2cc92e4447251f3e5672e4cd1cdf1e54d813b9d4b94ecf68c77dfda87ec10e7e3d6bf9c779c2225eaa9609f2ff6c60f66695f9a9f6aeff2be5f16e4d0deb1156da933007f8e4b75d4fee44b4f7858c662448deb642b530f6c031151709c978bbe432d0650a76454b25abd", &(0x7f0000000880)="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"}}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write(r4, &(0x7f00000001c0)="ab1baf4a4765681cd71ed4c4749c3d9069d60deb78676bfab913", 0x1a)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00', r5}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x20, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0)
unshare(0x32030680)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6)
sendmsg$NET_DM_CMD_START(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r11, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)

7.513859155s ago: executing program 3 (id=1806):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000100), 0x0, 0x0, 0x3)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e", 0x19, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

7.407523968s ago: executing program 3 (id=1807):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
pipe2(&(0x7f00000003c0), 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007801800018014000240fe8000000000000000000000000000aa00000500020000000500"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f00000031c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000300)=ANY=[], 0x18}, 0x4008040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r7 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

6.685690596s ago: executing program 5 (id=1808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, 0x0, 0x40010)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.879720297s ago: executing program 3 (id=1810):
r0 = socket(0x26, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x933a, 0x1, 0xf7, 0x80000}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000180)=0x2, 0x4)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x1b)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe)
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff020701010009050102"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r7=>0x0)
syz_open_procfs(r7, 0x0)
mount(0x0, 0x0, &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh<y\xde\b\xaf\x1a\xf0\xd5M\xc8v\xf7\xab\x17\x19^\x167 !\x14\x05J\xd0>\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB')
close(0x3)

5.3366387s ago: executing program 0 (id=1811):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
write(r4, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xffffffff}, 0x8)
close(r4)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}}]}, 0x30}}, 0x24040084)

5.037406046s ago: executing program 2 (id=1813):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000)

5.036863003s ago: executing program 0 (id=1814):
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r2)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r4, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socket$pppl2tp(0x18, 0x1, 0x1)

4.107843026s ago: executing program 6 (id=1815):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="0402275dfd590f892e51b385f8001001"], 0xa)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000f0a01"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

4.04374634s ago: executing program 0 (id=1816):
syz_io_uring_setup(0x837, &(0x7f0000001e40)={0x0, 0xdeac, 0x8000, 0x1, 0x40003cc}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x20})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0)
inotify_init1(0x800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xced, 0x0, &(0x7f0000000180)=<r2=>0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdir(&(0x7f0000000080)='./file0\x00', 0x115)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x181100, 0x0)
ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000080)={0x0, 0xce2, 0x7c, 0x101, 0x8, 0x7, 0xffff0000})

3.989430564s ago: executing program 2 (id=1817):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000100), 0x0, 0x0, 0x3)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e", 0x19, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

3.920758982s ago: executing program 2 (id=1818):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

3.860460701s ago: executing program 5 (id=1819):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xc000200a})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0x7}, 0x76e0})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20042)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
socket$inet(0x2, 0x2, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, <r6=>0x0, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r8, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0xf5, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x200000, 0x0, r7, 0x1fff}}, {0x3, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r10], 0x48}}, 0x0)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00')
write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0xfc5}}, 0x30)

3.313323841s ago: executing program 5 (id=1820):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x2082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000006000000040000000271223d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x40050)
socket$unix(0x1, 0x1, 0x0)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r8, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r8, 0x5418, &(0x7f00000000c0)=0xffffbdfe)
r9 = fcntl$dupfd(r1, 0x0, r1)
write$binfmt_script(r9, &(0x7f0000001b00), 0xfffffd9d)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080), &(0x7f0000000040))

2.623468472s ago: executing program 5 (id=1821):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x0, 0x105}, &(0x7f0000000400)=<r1=>0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r2, 0x0, 0x0, 0x0, 0x40010000})
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r3)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
socket$inet_udp(0x2, 0x2, 0x0)

2.610956441s ago: executing program 2 (id=1822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001b000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
recvfrom(r1, &(0x7f0000000180)=""/85, 0x55, 0x2000, &(0x7f0000000240)=@sco, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00'})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@llx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @alu={0x4, 0x0, 0xc, 0x6, 0x3, 0xdb6b54625ab2bdfb, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
tkill(r3, 0x3a)
r7 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

2.295810228s ago: executing program 3 (id=1823):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, 0xfffffffffffffffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

2.205497952s ago: executing program 0 (id=1824):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
iopl(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r3, 0x80044dff, 0x1000000000000)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x3f000000, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x4, 0x0, 0xffff1e26})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.924064059s ago: executing program 6 (id=1825):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000014, 0x31, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
lseek(r0, 0xfffffffffffff800, 0x3)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018640000030000000000000000000000d0c209000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000df52c0ff04000000dab9100008000000"], &(0x7f0000000540)='syzkaller\x00', 0x7fff, 0x51, &(0x7f0000000580)=""/81, 0xc1000, 0xc, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x4, 0x1, 0xe, 0x1}, {0x3, 0x2, 0xf, 0x1}, {0x4, 0x3, 0x9, 0x3}], 0x10, 0x1ea6}, 0x94)
keyctl$setperm(0x5, 0x0, 0x30925)
r7 = add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000019200)="916159469e1c5cb0977bd3cb88f01b4caece0fcbe473ba3a1ad6b6895081f68e2cd302defa944fbbe783c1e5a779326709ea7d411b1e38f2a73cdadca99afa48f01ddf4a209b0eb88db582bcde4e3c74690fd8c5448a1580e6e50ad8e7f6abdb0cfbedd3d828901d6dea45041afa96", 0x6f, 0x0)
getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)=<r8=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES8=r8, @ANYRES16=r7, @ANYRESOCT=r3, @ANYBLOB="ff590d79866e6aa74b88161510849f01a6ee7cd70a78e1b1a3284dfc8dc518a8e83a60df6fe18378bce12650ae9c8da6e826f93351550b1eaacedf7c67ae7e6c708ae8dfe381376c419c0706343d1665fb7d40e97af3003c00b6653fbe60c6962eeed4af06f28f9fcb9c390dc57456c3072c3e8313f0296ca9fd313bd48b72d24c534b5298ee4cb29029d78c5d01dcd9827df6e41992cc7c659b26d27de70910e3f716fbeb3739898b18bed6473900aa15f0f09ed03967121e0e6a200b722446c6f7727cb7a62454a98243680bcc7c1a0b97623bb7705d8090ddc90a99b50273b53686716aa8f14c4a38c513ba18f7321a852735cb58eda77d3bda7deb6b6ca4190de1f5b6d63e802f9d22688ac12ee9a9aed301be93e94af05b1bfb864d96cec63c488edb81cfc3ef441d752f6a9084ecd98662d8a127b200711377b391b6259dc8b0951ca7cc4a54e03d2756ca68dc32ca1eb8fc7813f8acb6f7dc112f161cd1dda7ef59f2aae96ff6df8d0bbc00"/382], 0x314}, 0x1, 0x0, 0x0, 0x8094}, 0x4044000)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x46, 0x0, &(0x7f0000000140))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x0, 0x43)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x13, &(0x7f0000000380)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)

1.227008216s ago: executing program 5 (id=1826):
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
exit(0x887)
socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket(0x23, 0x800, 0xf)
socket$kcm(0x1e, 0x4, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setrlimit(0xc, &(0x7f0000000100)={0xfff})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x851, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x83)
ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000180)={0x80, 0xff0000, "8bfaaa13dee596546baf8b603c9a215fff4e4c1225a64094", {0x800, 0x101}, 0x2})

1.101262662s ago: executing program 2 (id=1827):
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r2)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r4, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socket$pppl2tp(0x18, 0x1, 0x1)

130.433691ms ago: executing program 2 (id=1828):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000100), 0x0, 0x0, 0x3)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf265", 0x11, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

0s ago: executing program 3 (id=1829):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, 0x0, 0x40010)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  383.168345][T10602] RSP: 002b:00007ff5c0b05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  383.168361][T10602] RAX: ffffffffffffffda RBX: 00007ff5bfde5fa0 RCX: 00007ff5bfb8d9dc
[  383.168373][T10602] RDX: 000000000000000f RSI: 00007ff5c0b050a0 RDI: 0000000000000004
[  383.168383][T10602] RBP: 00007ff5c0b05090 R08: 0000000000000000 R09: 0000000000000000
[  383.168392][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.168401][T10602] R13: 00007ff5bfde6038 R14: 00007ff5bfde5fa0 R15: 00007ffc986a6828
[  383.168426][T10602]  </TASK>
[  383.348449][    C0] vkms_vblank_simulate: vblank timer overrun
[  383.488678][   T30] audit: type=1400 audit(1761647292.309:659): avc:  denied  { ioctl } for  pid=10591 comm="syz.3.1174" path="socket:[28386]" dev="sockfs" ino=28386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  383.514215][    C0] vkms_vblank_simulate: vblank timer overrun
[  384.768142][T10652] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  385.230725][ T5871] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  385.430899][ T5871] usb 3-1: device descriptor read/64, error -71
[  385.530674][ T5812] Bluetooth: hci5: command 0x0406 tx timeout
[  385.737677][ T5871] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  386.400680][ T5871] usb 3-1: device descriptor read/64, error -71
[  386.540352][ T5871] usb usb3-port1: attempt power cycle
[  386.632936][ T3560] syzkaller0: tun_net_xmit 76
[  386.664518][T10676] syzkaller0: create flow: hash 3576880958 index 1
[  386.671455][ T1187] syzkaller0: tun_net_xmit 76
[  386.671548][ T3560] syzkaller0: tun_net_xmit 48
[  386.760610][   T30] audit: type=1326 audit(1761647295.559:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  386.964434][   T30] audit: type=1326 audit(1761647295.569:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  386.989681][T10676] syzkaller0: delete flow: hash 3576880958 index 1
[  387.050894][ T5871] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  387.156558][ T5871] usb 3-1: device descriptor read/8, error -71
[  387.164676][   T30] audit: type=1326 audit(1761647295.569:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.189094][   T30] audit: type=1326 audit(1761647295.569:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.212484][    C0] vkms_vblank_simulate: vblank timer overrun
[  387.292799][   T30] audit: type=1326 audit(1761647295.569:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.316187][    C0] vkms_vblank_simulate: vblank timer overrun
[  387.335515][   T30] audit: type=1326 audit(1761647295.569:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.377274][   T30] audit: type=1326 audit(1761647295.569:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.410705][ T5871] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  387.430867][   T30] audit: type=1326 audit(1761647295.569:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.460487][ T5871] usb 3-1: device descriptor read/8, error -71
[  387.481416][   T30] audit: type=1326 audit(1761647295.569:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.582958][ T5871] usb usb3-port1: unable to enumerate USB device
[  387.590818][   T30] audit: type=1326 audit(1761647295.659:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673c38efc9 code=0x7ffc0000
[  387.614200][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.769521][T10698] x_tables: ip6_tables: mh match: only valid for protocol 135
[  389.260610][ T1187] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  389.481452][ T1187] usb 6-1: Using ep0 maxpacket: 32
[  389.488132][ T1187] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  389.496350][ T1187] usb 6-1: config 0 has no interface number 0
[  389.504303][ T1187] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  389.513980][ T1187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.523230][ T1187] usb 6-1: Product: syz
[  389.527441][ T1187] usb 6-1: Manufacturer: syz
[  389.533520][ T1187] usb 6-1: SerialNumber: syz
[  389.552277][ T1187] usb 6-1: config 0 descriptor??
[  389.566493][ T1187] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  389.658781][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'.
[  389.685965][T10711] netlink: 'syz.2.1195': attribute type 5 has an invalid length.
[  389.694450][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1195'.
[  389.882710][ T1187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  389.913059][ T1187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  390.103284][T10686] netlink: 'syz.1.1188': attribute type 12 has an invalid length.
[  390.126650][T10711] geneve2: entered promiscuous mode
[  390.145543][T10711] geneve2: entered allmulticast mode
[  390.158233][ T1313] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  390.167574][ T1313] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  390.179041][ T1313] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  390.188917][ T1313] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  390.329104][ T5927] IPVS: starting estimator thread 0...
[  390.384172][T10710] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  390.420687][T10717] IPVS: using max 75 ests per chain, 180000 per kthread
[  390.485112][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.496787][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.630650][ T5927] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  390.738330][T10726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10726 comm=syz.2.1200
[  390.780707][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  390.788931][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  390.802777][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.811147][ T5927] usb 2-1: Product: syz
[  390.815351][ T5927] usb 2-1: Manufacturer: syz
[  390.819981][ T5927] usb 2-1: SerialNumber: syz
[  390.830283][ T5927] usb 2-1: config 0 descriptor??
[  391.047886][ T5927] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  391.613222][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  392.517017][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  392.517036][   T30] audit: type=1400 audit(1761647301.319:675): avc:  denied  { map } for  pid=10745 comm="syz.3.1207" path="socket:[28628]" dev="sockfs" ino=28628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  392.578151][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  392.590834][ T5864] usb 6-1: USB disconnect, device number 16
[  392.598611][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  392.728416][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  392.746051][ T5927] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  392.768903][ T5864] quatech2 6-1:0.51: device disconnected
[  392.813695][ T5927] usb 2-1: USB disconnect, device number 36
[  394.143258][T10756] tun0: tun_chr_ioctl cmd 1074025675
[  394.148560][T10756] tun0: persist enabled
[  394.163879][T10756] tun0: tun_chr_ioctl cmd 1074025675
[  394.169172][T10756] tun0: persist disabled
[  394.366914][T10771] tipc: Started in network mode
[  394.373332][T10771] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  394.393478][T10771] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  396.050362][T10810] sch_tbf: burst 1821 is lower than device lo mtu (65550) !
[  396.098748][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'.
[  396.107948][ T5814] Bluetooth: hci4: command 0x0406 tx timeout
[  396.516141][T10827] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001
[  396.520505][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  396.588954][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.605833][   T30] audit: type=1400 audit(1761647305.339:676): avc:  denied  { listen } for  pid=10824 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  396.625958][ T5857] kernel read not supported for file /dsp (pid: 5857 comm: kworker/1:3)
[  396.686139][   T30] audit: type=1400 audit(1761647305.339:677): avc:  denied  { accept } for  pid=10824 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  398.171177][T10849] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1236'.
[  398.460262][T10857] random: crng reseeded on system resumption
[  399.213536][T10868] random: crng reseeded on system resumption
[  399.469635][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  399.482058][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  399.653669][T10883] netlink: 'syz.0.1244': attribute type 8 has an invalid length.
[  400.290617][ T5857] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  400.469100][ T5857] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  400.478619][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.610646][ T5857] usb 2-1: Product: syz
[  400.623059][ T5857] usb 2-1: Manufacturer: syz
[  400.651557][ T5857] usb 2-1: SerialNumber: syz
[  400.669281][ T3560] Bluetooth: hci1: Frame reassembly failed (-84)
[  400.726069][ T5857] usb 2-1: config 0 descriptor??
[  400.936871][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.952655][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.988766][ T5857] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  401.641306][ T6189] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 30 seconds
[  402.294484][ T5864] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  402.528692][T10915] x_tables: ip6_tables: mh match: only valid for protocol 135
[  402.550738][ T5857] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  402.575203][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.606513][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  402.606896][ T5857] usb 2-1: USB disconnect, device number 37
[  402.637526][ T5864] usb 3-1: config 1 has no interface number 0
[  402.652691][ T5864] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  402.770172][ T5814] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  402.845742][T10918] fuse: Unknown parameter 'fd0x0000000000000003'
[  402.974218][ T5864] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  403.163256][ T5864] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  403.229113][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  403.266123][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  403.277891][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  403.287901][T10923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  403.295948][T10923] UDF-fs: Scanning with blocksize 512 failed
[  403.319219][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  403.330191][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  403.339896][T10923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  403.347621][T10923] UDF-fs: Scanning with blocksize 1024 failed
[  403.357323][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  403.367742][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  403.377917][T10923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  403.385986][T10923] UDF-fs: Scanning with blocksize 2048 failed
[  403.396876][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  403.407322][T10923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  403.416990][T10923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  403.424715][T10923] UDF-fs: Scanning with blocksize 4096 failed
[  403.430948][T10923] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  403.447110][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.552102][ T5864] usb 3-1: Product: syz
[  403.610117][T10927] random: crng reseeded on system resumption
[  403.746052][ T5864] usb 3-1: Manufacturer: syz
[  403.939019][ T5864] usb 3-1: SerialNumber: syz
[  403.963294][T10908] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  404.177553][T10945] netlink: 'syz.5.1259': attribute type 4 has an invalid length.
[  404.185451][T10945] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1259'.
[  405.035305][T10950] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  405.344689][T10948] x_tables: ip6_tables: mh match: only valid for protocol 135
[  405.505824][ T5857] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  405.576429][ T5864] cdc_ncm 3-1:1.1: bind() failure
[  405.584357][ T5864] usb 3-1: USB disconnect, device number 46
[  405.711196][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  405.721036][ T5857] usb 4-1: too many configurations: 244, using maximum allowed: 8
[  405.755359][ T5857] usb 4-1: unable to read config index 0 descriptor/start: -61
[  405.763143][ T5857] usb 4-1: can't read configurations, error -61
[  405.902836][ T5857] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  406.023378][   T30] audit: type=1400 audit(1761647314.769:678): avc:  denied  { ioctl } for  pid=10956 comm="syz.1.1266" path="socket:[29985]" dev="sockfs" ino=29985 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  406.081431][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  406.123241][ T5857] usb 4-1: too many configurations: 244, using maximum allowed: 8
[  406.144906][ T5857] usb 4-1: unable to read config index 0 descriptor/start: -61
[  406.153023][ T5857] usb 4-1: can't read configurations, error -61
[  406.162662][ T5857] usb usb4-port1: attempt power cycle
[  406.162714][ T5864] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  406.382244][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'.
[  406.535223][T10970] x_tables: ip6_tables: mh match: only valid for protocol 135
[  406.602273][ T5857] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  406.633537][ T5864] usb 6-1: Using ep0 maxpacket: 8
[  406.642436][ T5864] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  406.644134][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  406.666721][ T5864] usb 6-1: config 179 has no interface number 0
[  406.680784][ T5864] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  406.701462][ T5857] usb 4-1: too many configurations: 244, using maximum allowed: 8
[  406.714566][ T5864] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  406.715715][ T5857] usb 4-1: unable to read config index 0 descriptor/start: -61
[  406.754631][ T5857] usb 4-1: can't read configurations, error -61
[  406.804347][T10977] random: crng reseeded on system resumption
[  406.941602][ T5857] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  407.076514][ T5864] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  407.112282][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  407.117875][ T5857] usb 4-1: too many configurations: 244, using maximum allowed: 8
[  407.127114][ T5857] usb 4-1: unable to read config index 0 descriptor/start: -61
[  407.138477][ T5857] usb 4-1: can't read configurations, error -61
[  407.149392][ T5857] usb usb4-port1: unable to enumerate USB device
[  407.240389][ T5864] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  407.278711][ T5864] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  407.308930][ T5864] usb 6-1: config 179 interface 65 has no altsetting 0
[  407.332400][ T5864] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  407.350780][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.399299][ T5864] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19
[  407.491795][ T5169] input input19: unable to receive magic message: -110
[  407.562409][ T5169] input input19: unable to receive magic message: -32
[  407.645501][ T6877] input input19: unable to receive magic message: -32
[  407.676792][ T5169] input input19: unable to receive magic message: -32
[  407.690315][ T5169] input input19: unable to receive magic message: -32
[  407.708216][ T5169] input input19: unable to receive magic message: -32
[  407.720477][ T5169] input input19: unable to receive magic message: -32
[  407.814562][ T5864] usb 6-1: USB disconnect, device number 17
[  407.820517][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  408.612449][   T30] audit: type=1400 audit(1761647317.439:679): avc:  denied  { ioctl } for  pid=11004 comm="syz.0.1280" path="socket:[30808]" dev="sockfs" ino=30808 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  409.100615][ T5884] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  409.320890][ T5884] usb 6-1: Using ep0 maxpacket: 8
[  409.332258][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  409.444521][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.473206][ T5884] usb 6-1: Product: syz
[  409.477553][ T5884] usb 6-1: Manufacturer: syz
[  409.491813][ T5884] usb 6-1: SerialNumber: syz
[  409.511400][ T5884] usb 6-1: config 0 descriptor??
[  409.849449][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  410.227396][T11047] random: crng reseeded on system resumption
[  410.520833][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  410.566746][ T5884] usb 6-1: USB disconnect, device number 18
[  411.089935][ T5864] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  411.232061][T11069] bridge0: entered allmulticast mode
[  411.250638][   T30] audit: type=1400 audit(1761647320.049:680): avc:  denied  { read open } for  pid=11061 comm="syz.1.1293" path="/" dev="configfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  411.711141][   T30] audit: type=1400 audit(1761647320.049:681): avc:  denied  { ioctl } for  pid=11061 comm="syz.1.1293" path="/" dev="configfs" ino=1148 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  411.749584][ T5864] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  411.864654][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.901616][ T5864] usb 3-1: Product: syz
[  411.916218][ T5864] usb 3-1: Manufacturer: syz
[  411.925401][ T5864] usb 3-1: SerialNumber: syz
[  411.931209][   T30] audit: type=1400 audit(1761647320.069:682): avc:  denied  { setopt } for  pid=11061 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  411.959809][ T5864] usb 3-1: config 0 descriptor??
[  411.972958][ T5864] gspca_main: sunplus-2.14.0 probing 055f:c230
[  412.320311][   T30] audit: type=1326 audit(1761647321.139:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.415866][   T30] audit: type=1326 audit(1761647321.139:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.441363][   T30] audit: type=1326 audit(1761647321.139:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.464878][ T5884] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  412.465434][   T30] audit: type=1326 audit(1761647321.139:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.580694][ T5857] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  412.584435][ T5871] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  412.599085][T11097] 9pnet_fd: Insufficient options for proto=fd
[  412.606514][   T30] audit: type=1326 audit(1761647321.139:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.641146][ T5884] usb 6-1: device descriptor read/64, error -71
[  412.649152][   T30] audit: type=1326 audit(1761647321.139:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.676609][   T30] audit: type=1326 audit(1761647321.139:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92538efc9 code=0x7ffc0000
[  412.754194][ T5857] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  412.791775][ T5857] usb 4-1: config 0 has no interface number 0
[  412.792840][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.819761][ T5871] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  412.852463][ T5857] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  412.862795][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.870673][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.881321][ T5884] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  412.930638][ T5857] usb 4-1: Product: syz
[  412.939085][ T5857] usb 4-1: Manufacturer: syz
[  412.950142][ T5857] usb 4-1: SerialNumber: syz
[  412.960285][ T5857] usb 4-1: config 0 descriptor??
[  412.985671][ T5871] usb 2-1: config 0 descriptor??
[  413.067535][ T5884] usb 6-1: device descriptor read/64, error -71
[  413.195643][ T5884] usb usb6-port1: attempt power cycle
[  413.231275][ T5857] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  413.256689][ T5857] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  413.340762][ T5864] gspca_sunplus: reg_r err -110
[  413.345689][ T5864] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  413.416099][T11094] usb 4-1: dvb_usb_ec168: I2C read not implemented
[  413.570717][ T5884] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  414.442269][ T5857] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  414.465592][ T5884] usb 6-1: device descriptor read/8, error -71
[  414.482339][ T5864] usb 3-1: USB disconnect, device number 47
[  414.498723][ T5857] usb 4-1: media controller created
[  414.557610][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  414.720719][ T5884] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  414.743818][ T5884] usb 6-1: device descriptor read/8, error -71
[  414.862916][ T5884] usb usb6-port1: unable to enumerate USB device
[  414.943406][ T5871] hid-picolcd 0003:04D8:C002.0010: unbalanced collection at end of report description
[  414.953571][ T5871] hid-picolcd 0003:04D8:C002.0010: device report parse failed
[  414.967936][ T5871] hid-picolcd 0003:04D8:C002.0010: probe with driver hid-picolcd failed with error -22
[  415.270396][ T5857] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  415.403989][ T5857] usb 4-1: USB disconnect, device number 35
[  415.476317][T11143] random: crng reseeded on system resumption
[  417.200743][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'.
[  417.363237][T11190] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1311'.
[  418.093858][   T30] kauditd_printk_skb: 72 callbacks suppressed
[  418.093873][   T30] audit: type=1800 audit(1761647326.919:762): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1315" name="bus" dev="overlay" ino=1496 res=0 errno=0
[  418.355353][   T30] audit: type=1400 audit(1761647327.179:763): avc:  denied  { map } for  pid=11204 comm="syz.3.1318" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  418.410261][T11207] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1318'.
[  418.428226][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1318'.
[  418.700636][   T30] audit: type=1400 audit(1761647327.179:764): avc:  denied  { execute } for  pid=11204 comm="syz.3.1318" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  418.811968][T11214] netlink: 'syz.3.1320': attribute type 21 has an invalid length.
[  419.110651][   T30] audit: type=1400 audit(1761647327.649:765): avc:  denied  { getopt } for  pid=11210 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  419.110801][T11214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1320'.
[  419.564610][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'.
[  419.573672][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'.
[  420.002399][ T5857] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  420.875159][   T30] audit: type=1804 audit(1761647329.689:766): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1323" name="/newroot/295/file0" dev="tmpfs" ino=1643 res=1 errno=0
[  421.154030][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short
[  421.171262][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -71
[  421.190673][ T5857] usb 3-1: can't read configurations, error -71
[  421.486556][T11237] f2fs: Unknown parameter 'discardªª'
[  422.854558][T11259] tmpfs: Bad value for 'mpol'
[  423.058868][T11261] 9pnet_virtio: no channels available for device syz
[  423.120669][T11261] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1335'.
[  424.120754][ T5864] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  424.282213][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  424.393254][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.459635][ T5864] usb 3-1: config 0 descriptor??
[  424.507777][ T5864] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  425.474359][T11286] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  426.361567][ T5864] usb 3-1: USB disconnect, device number 50
[  426.902195][T11300] netlink: 'syz.3.1345': attribute type 21 has an invalid length.
[  426.910090][T11300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1345'.
[  426.919462][T11300] netlink: 'syz.3.1345': attribute type 5 has an invalid length.
[  426.927228][T11300] netlink: 'syz.3.1345': attribute type 6 has an invalid length.
[  426.935006][T11300] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1345'.
[  427.103688][ T5884] IPVS: starting estimator thread 0...
[  427.222319][T11299] IPVS: using max 42 ests per chain, 100800 per kthread
[  427.286624][   T30] audit: type=1400 audit(1761647336.109:767): avc:  denied  { connect } for  pid=11303 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  427.332360][   T30] audit: type=1400 audit(1761647336.129:768): avc:  denied  { read } for  pid=11303 comm="syz.5.1347" path="socket:[30636]" dev="sockfs" ino=30636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  427.588345][T11310] tmpfs: Bad value for 'mpol'
[  427.866215][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  427.888663][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  427.897463][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  427.905447][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  427.913769][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  427.948757][   T30] audit: type=1400 audit(1761647336.769:769): avc:  denied  { setattr } for  pid=11316 comm="syz.3.1351" name="[io_uring]" dev="anon_inodefs" ino=30664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  428.315957][T11312] chnl_net:caif_netlink_parms(): no params data found
[  428.391239][  T889] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  428.610221][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1357'.
[  428.681983][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1357'.
[  428.782558][  T889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.795952][  T889] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  428.825280][  T889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.856327][  T889] usb 3-1: config 0 descriptor??
[  428.883464][  T889] ttusbir 3-1:0.0: cannot find expected altsetting
[  428.937300][T11312] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.994691][T11312] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.010356][T11312] bridge_slave_0: entered allmulticast mode
[  429.021717][T11312] bridge_slave_0: entered promiscuous mode
[  429.083647][T11312] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.170984][T11312] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.194662][T11312] bridge_slave_1: entered allmulticast mode
[  429.723937][T11312] bridge_slave_1: entered promiscuous mode
[  430.010636][ T5814] Bluetooth: hci1: command tx timeout
[  430.178269][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.192790][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.325740][T11312] team0: Port device team_slave_0 added
[  430.446505][T11358] fuse: Bad value for 'fd'
[  430.530306][T11358] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1360'.
[  430.869454][T11362] 9pnet_fd: Insufficient options for proto=fd
[  430.946541][T11312] team0: Port device team_slave_1 added
[  431.162738][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.169710][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.227187][ T5864] usb 3-1: USB disconnect, device number 51
[  431.236836][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.346394][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.377943][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.403872][    C0] vkms_vblank_simulate: vblank timer overrun
[  431.479518][   T30] audit: type=1400 audit(1761647340.279:770): avc:  denied  { map } for  pid=11367 comm="syz.5.1363" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.487108][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.502545][    C0] vkms_vblank_simulate: vblank timer overrun
[  431.836700][T11373] vivid-000: =================  START STATUS  =================
[  431.909630][T11379] tmpfs: Bad value for 'mpol'
[  431.960720][ T5864] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  431.962975][T11373] vivid-000: Enable Output Cropping: true grabbed
[  432.054373][T11373] vivid-000: Enable Output Composing: true grabbed
[  432.055515][T11381] xt_cgroup: xt_cgroup: no path or classid specified
[  432.100289][ T6189] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 60 seconds
[  432.108950][ T5814] Bluetooth: hci1: command tx timeout
[  432.113420][T11373] vivid-000: Enable Output Scaler: true grabbed
[  432.140618][ T5864] usb 3-1: device descriptor read/64, error -71
[  432.215954][T11373] vivid-000: Tx RGB Quantization Range: Automatic grabbed
[  432.238868][T11373] vivid-000: Transmit Mode: HDMI grabbed
[  432.244747][T11373] vivid-000: Hotplug Present: 0x00000000
[  432.246958][T11312] hsr_slave_0: entered promiscuous mode
[  432.250405][T11373] vivid-000: RxSense Present: 0x00000000
[  432.261737][T11373] vivid-000: EDID Present: 0x00000000
[  432.267175][T11373] vivid-000: ==================  END STATUS  ==================
[  432.275721][T11312] hsr_slave_1: entered promiscuous mode
[  432.288800][T11312] debugfs: 'hsr0' already exists in 'hsr'
[  432.294694][T11312] Cannot create hsr debugfs directory
[  432.391585][   T30] audit: type=1400 audit(1761647341.219:771): avc:  denied  { execute } for  pid=11380 comm="syz.0.1367" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  432.415665][ T5864] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  432.637281][ T5864] usb 3-1: device descriptor read/64, error -71
[  432.923978][ T5864] usb usb3-port1: attempt power cycle
[  433.012130][T11395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1371'.
[  433.026418][T11395] unsupported nlmsg_type 40
[  433.277694][T11312] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  433.290793][ T5864] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  433.311113][ T5864] usb 3-1: device descriptor read/8, error -71
[  433.345037][T11312] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  433.378879][T11312] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  433.412370][T11312] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  433.550619][ T5864] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  433.572825][ T5864] usb 3-1: device descriptor read/8, error -71
[  433.681322][ T5864] usb usb3-port1: unable to enumerate USB device
[  433.979454][T11312] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.993844][T11312] 8021q: adding VLAN 0 to HW filter on device team0
[  434.004172][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.011327][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.028933][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.036158][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.171814][ T5814] Bluetooth: hci1: command tx timeout
[  434.357541][T11312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.980671][    T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  434.990348][T11312] veth0_vlan: entered promiscuous mode
[  435.023009][T11312] veth1_vlan: entered promiscuous mode
[  435.098343][T11312] veth0_macvtap: entered promiscuous mode
[  435.123716][T11312] veth1_macvtap: entered promiscuous mode
[  435.141052][    T9] usb 6-1: Using ep0 maxpacket: 8
[  435.166052][    T9] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  435.172779][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.175460][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.194097][    T9] usb 6-1: Product: syz
[  435.199017][    T9] usb 6-1: Manufacturer: syz
[  435.201030][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.210969][    T9] usb 6-1: SerialNumber: syz
[  435.250703][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.262723][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.275897][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.280595][ T5884] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  435.300968][ T7546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.451594][ T5884] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  435.466310][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.472778][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.487316][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.500956][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.516168][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.518108][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.535820][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.548130][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.564821][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.580342][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.582239][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.600032][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.619403][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.621713][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.637998][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.650014][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.665991][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.667482][   T30] audit: type=1400 audit(1761647344.489:772): avc:  denied  { mounton } for  pid=11312 comm="syz-executor" path="/root/syzkaller.LAUv33/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  435.705084][    C0] vkms_vblank_simulate: vblank timer overrun
[  435.713391][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.728425][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.759019][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.770202][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.783326][   T30] audit: type=1400 audit(1761647344.549:773): avc:  denied  { mount } for  pid=11312 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  435.806690][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.826711][    T9] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  435.831876][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.851178][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.864264][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.880255][ T5884] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[  435.881505][    T9] mxuport 6-1:254.0: probe with driver mxuport failed with error -5
[  435.890863][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  435.910265][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33
[  435.927350][ T5884] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  435.938110][    T9] usb 6-1: USB disconnect, device number 23
[  435.956752][ T5884] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255
[  435.967704][ T5884] usb 4-1: Product: syz
[  435.972481][ T5884] usb 4-1: Manufacturer: syz
[  435.977366][ T5884] usb 4-1: SerialNumber: syz
[  436.007024][ T5884] usb 4-1: config 0 descriptor??
[  436.023017][   T30] audit: type=1400 audit(1761647344.849:774): avc:  denied  { read } for  pid=11435 comm="syz.6.1346" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  436.048666][   T30] audit: type=1400 audit(1761647344.849:775): avc:  denied  { open } for  pid=11435 comm="syz.6.1346" path="/0/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  436.077018][ T5884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  436.252476][ T5814] Bluetooth: hci1: command tx timeout
[  436.295427][ T5884] usb 4-1: USB disconnect, device number 36
[  437.534732][   T30] audit: type=1400 audit(1761647346.349:776): avc:  denied  { read } for  pid=11451 comm="syz.3.1384" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  437.567908][T11462] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1388'.
[  437.825960][T11464] 9pnet_fd: Insufficient options for proto=fd
[  437.849387][ T5884] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  438.013047][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short
[  438.031436][ T5884] usb 7-1: not running at top speed; connect to a high speed hub
[  438.079100][ T5884] usb 7-1: config 4 has an invalid interface number: 239 but max is 0
[  438.131043][ T5884] usb 7-1: config 4 has no interface number 0
[  438.156516][ T5884] usb 7-1: config 4 interface 239 has no altsetting 0
[  438.228656][ T5884] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9
[  438.251203][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.282585][ T5884] usb 7-1: Product: syz
[  438.289454][ T5884] usb 7-1: Manufacturer: syz
[  438.336753][ T5884] usb 7-1: SerialNumber: syz
[  439.024082][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'.
[  439.059492][T11474] vlan2: entered allmulticast mode
[  439.064924][T11474] hsr0: entered allmulticast mode
[  439.070004][T11474] hsr_slave_0: entered allmulticast mode
[  439.075806][T11474] hsr_slave_1: entered allmulticast mode
[  439.090946][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'.
[  439.266646][ T5884] snd-usb-audio 7-1:4.239: probe with driver snd-usb-audio failed with error -71
[  439.334632][ T5884] usb 7-1: USB disconnect, device number 2
[  439.407342][   T30] audit: type=1400 audit(1761647348.229:777): avc:  denied  { map } for  pid=11478 comm="syz.5.1392" path="socket:[32834]" dev="sockfs" ino=32834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  439.436064][   T30] audit: type=1400 audit(1761647348.229:778): avc:  denied  { accept } for  pid=11478 comm="syz.5.1392" path="socket:[32834]" dev="sockfs" ino=32834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  439.642719][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  439.665479][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  439.789484][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  439.800129][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  441.610779][ T5884] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  442.503245][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  442.517268][ T5884] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  442.532091][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.678980][T11517] 9pnet_fd: Insufficient options for proto=fd
[  442.708049][ T5884] usb 4-1: config 0 descriptor??
[  442.716651][ T5884] gspca_main: sonixj-2.14.0 probing 0471:0327
[  442.737680][T11520] 9pnet_fd: Insufficient options for proto=fd
[  442.993397][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'.
[  443.002499][T11525] netlink: 'syz.2.1401': attribute type 5 has an invalid length.
[  443.026129][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1401'.
[  444.382073][ T5884] gspca_sonixj: reg_w1 err -110
[  444.760768][ T5884] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  444.905846][T11539] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0
[  444.990662][   T30] audit: type=1400 audit(1761647353.809:779): avc:  denied  { connect } for  pid=11538 comm="syz.6.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  445.011017][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1407'.
[  445.343088][   T30] audit: type=1400 audit(1761647354.169:780): avc:  denied  { unmount } for  pid=11312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  445.431689][ T5857] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  445.672298][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  445.684515][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  445.714223][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  446.009095][ T5857] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  446.034072][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.073422][ T5857] usb 3-1: Product: syz
[  446.087038][ T5857] usb 3-1: Manufacturer: syz
[  446.100092][ T5857] usb 3-1: SerialNumber: syz
[  446.118632][ T5857] usb 3-1: config 0 descriptor??
[  446.134935][T11547] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  446.319313][T11573] x_tables: ip6_tables: mh match: only valid for protocol 135
[  446.365675][ T5857] powermate: unknown product id 0240
[  446.381270][ T5857] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  446.401914][ T5857] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  446.552067][    C1] powermate: config urb returned -71
[  446.557555][    C1] powermate: config urb returned -71
[  446.562962][    C1] powermate: config urb returned -71
[  446.568369][    C1] powermate: config urb returned -71
[  446.610955][ T5857] usb 3-1: USB disconnect, device number 56
[  446.616965][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  446.651863][T11576] 9pnet_fd: Insufficient options for proto=fd
[  446.844483][ T5927] usb 4-1: USB disconnect, device number 37
[  448.266743][T11591] netlink: 'syz.5.1419': attribute type 1 has an invalid length.
[  448.274597][T11591] netlink: 'syz.5.1419': attribute type 4 has an invalid length.
[  448.282393][T11591] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1419'.
[  448.643946][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1416'.
[  448.663892][T11579] block device autoloading is deprecated and will be removed.
[  450.140594][T11615] fuse: Unknown parameter 'r!otmode'
[  450.576531][T11604] x_tables: ip6_tables: mh match: only valid for protocol 135
[  450.991956][   T30] audit: type=1400 audit(1761647359.719:781): avc:  denied  { read } for  pid=11618 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  451.045291][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1432'.
[  451.373370][  T889] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  451.560713][  T889] usb 4-1: Using ep0 maxpacket: 16
[  451.570093][  T889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 57681, setting to 1024
[  451.610333][  T889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  451.623596][  T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.635117][  T889] usb 4-1: Product: syz
[  451.639302][  T889] usb 4-1: Manufacturer: syz
[  451.644370][  T889] usb 4-1: SerialNumber: syz
[  451.659864][  T889] usb 4-1: config 0 descriptor??
[  451.669128][  T889] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  451.707184][  T889] em28xx 4-1:0.0: DVB interface 0 found: isoc
[  451.891942][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  452.060660][    T9] usb 7-1: Using ep0 maxpacket: 8
[  452.071614][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  452.080403][    T9] usb 7-1: config 4 interface 0 has no altsetting 0
[  452.095088][    T9] usb 7-1: string descriptor 0 read error: -22
[  452.108469][    T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  452.125715][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.191046][    T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  452.200682][ T5871] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  452.219767][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  452.247232][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  452.265434][    T9] usb 7-1: media controller created
[  452.361212][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  452.396142][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  452.420963][ T5871] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[  452.432276][ T5871] usb 6-1: config 0 has no interface number 0
[  452.438945][ T5871] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  452.524373][ T5871] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  452.559045][ T5871] usb 6-1: config 0 interface 48 has no altsetting 0
[  452.596329][ T5871] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  452.609649][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.623846][ T5871] usb 6-1: config 0 descriptor??
[  452.754078][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1432'.
[  452.816039][  T889] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  452.853075][ T5871] usb 6-1: string descriptor 0 read error: -71
[  452.905661][  T889] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  452.924303][ T5871] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  452.967415][  T889] em28xx 4-1:0.0: board has no eeprom
[  452.994739][T11634] hsr_slave_1 (unregistering): left promiscuous mode
[  453.006978][ T5871] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  453.007296][   T30] audit: type=1400 audit(1761647361.829:782): avc:  denied  { firmware_load } for  pid=5871 comm="kworker/0:5" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  453.018321][ T5871] dib0700: firmware download failed at 7 with -22
[  453.058504][ T5871] usb 6-1: USB disconnect, device number 24
[  453.060715][  T889] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  453.074970][  T889] em28xx 4-1:0.0: dvb set to isoc mode.
[  453.082937][ T5927] em28xx 4-1:0.0: Binding DVB extension
[  453.136389][ T5927] em28xx 4-1:0.0: Registering input extension
[  453.160128][ T5927] usb 7-1: USB disconnect, device number 3
[  453.440968][    T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  453.731184][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'.
[  453.745870][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'.
[  453.985539][  T889] usb 4-1: USB disconnect, device number 38
[  454.000329][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  454.016571][    T9] usb 3-1: unable to read config index 0 descriptor/start: -71
[  454.036479][    T9] usb 3-1: can't read configurations, error -71
[  454.049790][  T889] em28xx 4-1:0.0: Disconnecting em28xx
[  454.065903][  T889] em28xx 4-1:0.0: Closing input extension
[  454.166068][  T889] em28xx 4-1:0.0: Freeing device
[  454.460607][ T5871] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  454.489757][T11671] netlink: 'syz.5.1441': attribute type 21 has an invalid length.
[  454.498045][T11671] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1441'.
[  454.507640][T11671] netlink: 'syz.5.1441': attribute type 4 has an invalid length.
[  454.515794][T11671] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1441'.
[  454.539805][T11671] batadv1: entered promiscuous mode
[  454.548689][T11671] 8021q: adding VLAN 0 to HW filter on device batadv1
[  454.626905][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'.
[  454.703711][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'.
[  454.730948][  T889] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  454.952205][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'.
[  454.999038][ T5871] usb 7-1: unable to get BOS descriptor or descriptor too short
[  455.012273][ T5871] usb 7-1: unable to read config index 0 descriptor/start: -71
[  455.024882][ T5871] usb 7-1: can't read configurations, error -71
[  455.080726][  T889] usb 4-1: Using ep0 maxpacket: 32
[  455.087254][  T889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.223248][  T889] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  455.232441][  T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.249813][  T889] usb 4-1: config 0 descriptor??
[  455.370680][    T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  455.397836][   T30] audit: type=1326 audit(1761647364.219:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.482746][   T30] audit: type=1326 audit(1761647364.219:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.518615][   T30] audit: type=1326 audit(1761647364.219:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.545376][    T9] usb 3-1: Using ep0 maxpacket: 16
[  455.567424][   T30] audit: type=1326 audit(1761647364.219:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.617515][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.637763][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  455.656695][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.667979][   T30] audit: type=1326 audit(1761647364.219:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.713478][  T889] elo 0003:04E7:0009.0011: unknown main item tag 0x1
[  455.720242][  T889] elo 0003:04E7:0009.0011: item fetching failed at offset 4/5
[  455.726169][    T9] usb 3-1: config 0 descriptor??
[  455.733158][  T889] elo 0003:04E7:0009.0011: parse failed
[  455.753138][  T889] elo 0003:04E7:0009.0011: probe with driver elo failed with error -22
[  455.758089][   T30] audit: type=1326 audit(1761647364.219:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.814223][T11690] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1449'.
[  455.825667][T11690] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  455.834061][   T30] audit: type=1326 audit(1761647364.219:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.871413][T11690] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1449'.
[  455.886153][   T30] audit: type=1326 audit(1761647364.219:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bfb8efc9 code=0x7ffc0000
[  455.917046][ T5918] usb 4-1: USB disconnect, device number 39
[  455.960746][ T5871] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  455.998657][T11680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.007827][T11680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.118974][ T5871] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  456.128284][ T5864] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  456.140956][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.151684][ T5871] usb 7-1: config 0 descriptor??
[  456.162319][ T5871] gspca_main: cpia1-2.14.0 probing 0813:0001
[  456.247655][T11695] 9pnet_fd: Insufficient options for proto=fd
[  456.307167][T11696] netlink: 2040 bytes leftover after parsing attributes in process `syz.2.1445'.
[  456.322658][ T5864] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.344469][ T5864] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  456.366369][    T9] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  456.385369][ T5864] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  456.398195][ T5864] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  456.415763][ T5864] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.425788][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.435144][ T5864] usb 6-1: Product: syz
[  456.577298][ T5864] usb 6-1: Manufacturer: syz
[  456.586092][ T5864] usb 6-1: SerialNumber: syz
[  456.936392][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.950340][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.018475][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=11704 comm=syz.3.1453
[  457.050916][T11704] raw_sendmsg: syz.3.1453 forgot to set AF_INET. Fix it!
[  457.154349][T11704] binder: 11703:11704 ioctl c0306201 2000000000c0 returned -11
[  457.210959][ T5871] gspca_cpia1: usb_control_msg 05, error -110
[  457.232956][ T5871] gspca_cpia1: usb_control_msg 01, error -32
[  457.258928][ T5871] gspca_cpia1: usb_control_msg 01, error -32
[  457.281351][ T5871] gspca_cpia1: usb_control_msg 01, error -32
[  457.307798][ T5871] gspca_cpia1: usb_control_msg 01, error -32
[  457.323885][ T5871] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  457.697852][T11690] batman_adv: batadv0: Adding interface: gretap1
[  457.705991][T11690] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.743751][T11690] batman_adv: batadv0: Interface activated: gretap1
[  458.002602][ T5871] usb 3-1: USB disconnect, device number 59
[  458.111925][ T5918] usb 7-1: USB disconnect, device number 5
[  458.529916][T11721] netlink: 'syz.2.1457': attribute type 3 has an invalid length.
[  459.010812][T11722] random: crng reseeded on system resumption
[  459.332189][ T5864] cdc_ncm 6-1:1.0: bind() failure
[  459.350688][ T5864] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  459.359661][ T5864] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  459.396487][ T5864] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  459.703640][ T5864] usb 6-1: USB disconnect, device number 25
[  459.721028][T11727] 9pnet_fd: Insufficient options for proto=fd
[  459.746160][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  459.746172][   T30] audit: type=1400 audit(1761647368.539:823): avc:  denied  { write } for  pid=11724 comm="syz.2.1458" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  460.033083][   T30] audit: type=1400 audit(1761647368.849:824): avc:  denied  { create } for  pid=11728 comm="syz.6.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  460.040009][T11734] can: request_module (can-proto-0) failed.
[  460.753999][   T30] audit: type=1400 audit(1761647369.559:825): avc:  denied  { read } for  pid=11746 comm="syz.2.1463" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  461.360133][T11750] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  461.367870][T11750] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  461.380059][T11750] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  461.386086][T11750] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  461.393295][T11750] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  461.399259][T11750] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  461.406073][T11750] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  461.412128][T11750] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  461.419969][T11750] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  461.426488][T11750] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  461.437456][T11750] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  461.443498][T11750] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  461.452940][T11750] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  461.532322][   T30] audit: type=1400 audit(1761647370.339:826): avc:  denied  { listen } for  pid=11758 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  461.618268][T11753] 9pnet_fd: Insufficient options for proto=fd
[  462.177047][T11741] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 90 seconds
[  462.409437][T11776] SELinux: failed to load policy
[  463.300713][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  463.500789][ T5812] Bluetooth: hci4: command 0x0406 tx timeout
[  463.506971][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  463.513492][ T5812] Bluetooth: hci5: command 0x0406 tx timeout
[  463.519628][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  463.525789][ T5812] Bluetooth: hci2: command 0x0406 tx timeout
[  464.655777][T11802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.927339][T11802] batadv_slave_0: entered promiscuous mode
[  465.392115][ T5812] Bluetooth: hci0: command 0x0406 tx timeout
[  465.623091][ T5812] Bluetooth: hci2: command 0x0406 tx timeout
[  465.623103][ T5809] Bluetooth: hci3: command 0x0406 tx timeout
[  465.629153][ T5814] Bluetooth: hci5: command 0x0406 tx timeout
[  465.635271][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout
[  465.641178][ T5818] Bluetooth: hci4: command 0x0406 tx timeout
[  467.640670][T11849] __nla_validate_parse: 1 callbacks suppressed
[  467.640691][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1482'.
[  467.691110][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  467.878471][T11854] 9pnet_fd: Insufficient options for proto=fd
[  468.570856][   T30] audit: type=1400 audit(1761647377.369:827): avc:  denied  { watch watch_reads } for  pid=11862 comm="syz.6.1490" path="/22/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  468.644838][ T5814] Bluetooth: hci1: unexpected event for opcode 0x0419
[  469.316399][T11876] bridge_slave_0: left allmulticast mode
[  469.675756][T11876] bridge_slave_0: left promiscuous mode
[  469.799177][T11876] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.857014][T11876] bridge_slave_1: left allmulticast mode
[  469.910621][T11876] bridge_slave_1: left promiscuous mode
[  469.916411][T11876] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.944255][T11876] bond0: (slave bond_slave_0): Releasing backup interface
[  470.171067][T11876] bond0: (slave bond_slave_1): Releasing backup interface
[  470.234865][T11876] team0: Port device team_slave_0 removed
[  470.672891][T11876] team0: Port device team_slave_1 removed
[  470.695881][T11876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.937461][T11876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.957732][T11876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.968990][T11876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.992484][T11891] vlan0: entered promiscuous mode
[  471.251325][   T30] audit: type=1400 audit(1761647380.039:828): avc:  denied  { read } for  pid=11879 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  471.603430][T11903] x_tables: ip6_tables: mh match: only valid for protocol 135
[  471.959204][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[  471.999582][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[  472.803193][T11914] delete_channel: no stack
[  473.197033][T11937] ref_ctr increment failed for inode: 0x2cd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888079989580
[  473.460604][ T5918] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  473.612817][ T5918] usb 3-1: not running at top speed; connect to a high speed hub
[  473.621713][ T5918] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  473.632853][ T5918] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1088, setting to 64
[  473.644002][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0
[  473.652535][ T5918] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40
[  473.661780][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.669761][ T5918] usb 3-1: Product: syz
[  473.674043][ T5918] usb 3-1: Manufacturer: syz
[  473.678642][ T5918] usb 3-1: SerialNumber: syz
[  473.685751][T11941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  473.695276][T11941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  473.912122][ T5918] usbhid 3-1:1.0: can't add hid device: -71
[  473.918204][ T5918] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  473.929466][ T5918] usb 3-1: USB disconnect, device number 60
[  474.130674][  T889] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  474.380732][  T889] usb 4-1: Using ep0 maxpacket: 32
[  474.387426][  T889] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  474.395862][  T889] usb 4-1: config 0 has no interface number 0
[  474.402162][  T889] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  474.414270][  T889] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  474.465352][  T889] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  474.480956][  T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.489459][  T889] usb 4-1: Product: syz
[  474.494973][  T889] usb 4-1: Manufacturer: syz
[  474.500237][  T889] usb 4-1: SerialNumber: syz
[  474.507769][  T889] usb 4-1: config 0 descriptor??
[  474.944700][T11962] overlayfs: missing 'lowerdir'
[  475.087229][  T889] radio-si470x 4-1:0.35: this is not a si470x device.
[  475.126272][  T889] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  477.391925][  T889] usb 4-1: USB disconnect, device number 40
[  479.717894][T12002] FAULT_INJECTION: forcing a failure.
[  479.717894][T12002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.803057][T12002] CPU: 0 UID: 0 PID: 12002 Comm: syz.6.1528 Not tainted syzkaller #0 PREEMPT(full) 
[  479.803087][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  479.803098][T12002] Call Trace:
[  479.803105][T12002]  <TASK>
[  479.803112][T12002]  dump_stack_lvl+0x16c/0x1f0
[  479.803144][T12002]  should_fail_ex+0x512/0x640
[  479.803169][T12002]  _copy_from_user+0x2e/0xd0
[  479.803193][T12002]  kstrtouint_from_user+0xd6/0x1d0
[  479.803218][T12002]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  479.803246][T12002]  ? tipc_nl_node_reset_link_stats+0x320/0x790
[  479.803274][T12002]  ? mark_held_locks+0x49/0x80
[  479.803301][T12002]  ? irqentry_exit+0x3b/0x90
[  479.803325][T12002]  ? lockdep_hardirqs_on+0x7c/0x110
[  479.803352][T12002]  proc_fail_nth_write+0x83/0x220
[  479.803373][T12002]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  479.803392][T12002]  ? preempt_schedule_thunk+0x16/0x30
[  479.803419][T12002]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  479.803437][T12002]  vfs_write+0x2a0/0x11d0
[  479.803458][T12002]  ? __pfx___mutex_lock+0x10/0x10
[  479.803475][T12002]  ? __pfx_vfs_write+0x10/0x10
[  479.803498][T12002]  ? __fget_files+0x20e/0x3c0
[  479.803523][T12002]  ksys_write+0x12a/0x250
[  479.803537][T12002]  ? __pfx_ksys_write+0x10/0x10
[  479.803556][T12002]  do_syscall_64+0xcd/0xfa0
[  479.803578][T12002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.803591][T12002] RIP: 0033:0x7f596eb8da7f
[  479.803603][T12002] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  479.803615][T12002] RSP: 002b:00007f596fa74030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  479.803629][T12002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f596eb8da7f
[  479.803638][T12002] RDX: 0000000000000001 RSI: 00007f596fa740a0 RDI: 0000000000000004
[  479.803645][T12002] RBP: 00007f596fa74090 R08: 0000000000000000 R09: 0000000000000000
[  479.803653][T12002] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000001
[  479.803660][T12002] R13: 00007f596ede6038 R14: 00007f596ede5fa0 R15: 00007ffe679ebd68
[  479.803679][T12002]  </TASK>
[  482.247337][T12046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1536'.
[  482.478000][   T30] audit: type=1800 audit(1761647391.299:829): pid=12060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1539" name="bus" dev="overlay" ino=761 res=0 errno=0
[  482.613947][T12067] macsec1: entered allmulticast mode
[  482.619577][T12067] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  483.250701][T12092] delete_channel: no stack
[  484.678890][ T5871] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  484.752861][   T30] audit: type=1400 audit(1761647393.579:830): avc:  denied  { execute } for  pid=12097 comm="syz.6.1545" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  484.960115][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  485.016409][ T5871] usb 6-1: config 0 has an invalid interface number: 154 but max is 0
[  485.044719][ T5871] usb 6-1: config 0 has no interface number 0
[  485.090796][ T5871] usb 6-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04
[  485.115073][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.369130][ T5871] usb 6-1: Product: syz
[  485.410570][ T5871] usb 6-1: Manufacturer: syz
[  485.481057][ T5871] usb 6-1: SerialNumber: syz
[  486.516230][ T5871] usb 6-1: config 0 descriptor??
[  487.327302][ T5871] asix 6-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  487.381201][ T5871] asix 6-1:0.154: probe with driver asix failed with error -61
[  488.342236][    T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  488.392726][   T30] audit: type=1400 audit(1761647397.219:831): avc:  denied  { bind } for  pid=12157 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  488.621143][    T9] usb 3-1: Using ep0 maxpacket: 16
[  488.629217][    T9] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  488.641582][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.665768][    T9] usb 3-1: config 0 has no interface number 0
[  488.673870][    T9] usb 3-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30
[  488.692511][    T9] usb 3-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  488.706737][    T9] usb 3-1: config 0 interface 32 has no altsetting 0
[  488.732232][    T9] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  488.736848][  T889] usb 6-1: USB disconnect, device number 26
[  488.748078][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.766689][    T9] usb 3-1: Product: syz
[  488.784872][    T9] usb 3-1: Manufacturer: syz
[  488.796609][    T9] usb 3-1: SerialNumber: syz
[  488.823182][    T9] usb 3-1: config 0 descriptor??
[  489.154857][T12175] netlink: 'syz.3.1561': attribute type 13 has an invalid length.
[  489.175657][  T889] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  489.363112][  T889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.385768][  T889] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  489.402277][  T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.426048][  T889] usb 6-1: config 0 descriptor??
[  489.449332][  T889] ttusbir 6-1:0.0: cannot find expected altsetting
[  489.479118][T12177] tipc: Started in network mode
[  489.484639][T12177] tipc: Node identity 0e093e26876e, cluster identity 4711
[  489.493396][T12177] tipc: Enabled bearer <eth:virt_wifi0>, priority 10
[  489.503155][T12178] tipc: Enabled bearer <ib:wg1>, priority 0
[  489.672845][T12183] 9pnet_fd: Insufficient options for proto=fd
[  490.613711][  T889] tipc: Node number set to 2305244710
[  490.887883][    T9] hub 3-1:0.32: bad descriptor, ignoring hub
[  490.906677][    T9] hub 3-1:0.32: probe with driver hub failed with error -5
[  490.992040][    T9] usb 3-1: USB disconnect, device number 61
[  491.120622][  T889] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  491.510726][  T889] usb 7-1: Using ep0 maxpacket: 8
[  491.517894][  T889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  491.526535][  T889] usb 7-1: too many configurations: 35, using maximum allowed: 8
[  491.563997][  T889] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  491.607780][  T889] usb 7-1: can't read configurations, error -22
[  492.141672][ T5884] usb 6-1: USB disconnect, device number 27
[  492.150782][  T889] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  492.252225][T11741] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 120 seconds
[  492.340570][  T889] usb 7-1: Using ep0 maxpacket: 8
[  492.348474][  T889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  492.372460][  T889] usb 7-1: too many configurations: 35, using maximum allowed: 8
[  492.382348][  T889] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  492.405332][  T889] usb 7-1: can't read configurations, error -22
[  492.415995][  T889] usb usb7-port1: attempt power cycle
[  492.486576][T12211] 8021q: adding VLAN 0 to HW filter on device bond1
[  492.547987][T12211] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  492.557538][T12211] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  492.770762][  T889] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  492.773935][T12224] netlink: 'syz.2.1571': attribute type 1 has an invalid length.
[  492.786335][T12224] netlink: 'syz.2.1571': attribute type 4 has an invalid length.
[  492.794105][T12224] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1571'.
[  492.843911][  T889] usb 7-1: Using ep0 maxpacket: 8
[  492.876816][  T889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  492.887325][  T889] usb 7-1: too many configurations: 35, using maximum allowed: 8
[  492.920955][  T889] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  492.951273][  T889] usb 7-1: can't read configurations, error -22
[  493.121099][  T889] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  493.150604][    T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  493.165547][  T889] usb 7-1: Using ep0 maxpacket: 8
[  493.183563][  T889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  493.191768][  T889] usb 7-1: too many configurations: 35, using maximum allowed: 8
[  493.205219][  T889] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  493.214448][  T889] usb 7-1: can't read configurations, error -22
[  493.221483][  T889] usb usb7-port1: unable to enumerate USB device
[  493.241623][T12223] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  493.311120][    T9] usb 4-1: Using ep0 maxpacket: 16
[  493.326364][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.341032][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.362738][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  493.380623][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.397971][    T9] usb 4-1: Product: syz
[  493.408100][    T9] usb 4-1: Manufacturer: syz
[  493.418209][    T9] usb 4-1: SerialNumber: syz
[  493.618092][   T30] audit: type=1400 audit(1761647402.419:832): avc:  denied  { watch } for  pid=12226 comm="syz.5.1575" path="/139/file0" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  493.889873][   T30] audit: type=1400 audit(1761647402.429:833): avc:  denied  { watch_sb } for  pid=12226 comm="syz.5.1575" path="/139/file0" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  493.898941][    T9] usb 4-1: 0:2 : does not exist
[  493.956105][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  494.344482][    T9] usb 4-1: USB disconnect, device number 41
[  494.384206][ T6874] udevd[6874]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  494.553392][ T5814] Bluetooth: hci5: unexpected event for opcode 0x0803
[  495.176148][T12251] FAULT_INJECTION: forcing a failure.
[  495.176148][T12251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  495.189560][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.5.1583 Not tainted syzkaller #0 PREEMPT(full) 
[  495.189585][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  495.189594][T12251] Call Trace:
[  495.189600][T12251]  <TASK>
[  495.189606][T12251]  dump_stack_lvl+0x16c/0x1f0
[  495.189642][T12251]  should_fail_ex+0x512/0x640
[  495.189666][T12251]  _copy_from_iter+0x29f/0x1720
[  495.189691][T12251]  ? __alloc_skb+0x200/0x380
[  495.189712][T12251]  ? __pfx__copy_from_iter+0x10/0x10
[  495.189730][T12251]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  495.189758][T12251]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  495.189796][T12251]  netlink_sendmsg+0x820/0xdd0
[  495.189826][T12251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.189857][T12251]  ____sys_sendmsg+0xa98/0xc70
[  495.189883][T12251]  ? copy_msghdr_from_user+0x10a/0x160
[  495.189904][T12251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  495.189942][T12251]  ___sys_sendmsg+0x134/0x1d0
[  495.189965][T12251]  ? __pfx____sys_sendmsg+0x10/0x10
[  495.189984][T12251]  ? __lock_acquire+0x622/0x1c90
[  495.190041][T12251]  __sys_sendmsg+0x16d/0x220
[  495.190063][T12251]  ? __pfx___sys_sendmsg+0x10/0x10
[  495.190095][T12251]  ? fput+0x9b/0xd0
[  495.190120][T12251]  do_syscall_64+0xcd/0xfa0
[  495.190147][T12251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.190164][T12251] RIP: 0033:0x7ff5bfb8efc9
[  495.190178][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.190193][T12251] RSP: 002b:00007ff5c0b05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  495.190210][T12251] RAX: ffffffffffffffda RBX: 00007ff5bfde5fa0 RCX: 00007ff5bfb8efc9
[  495.190220][T12251] RDX: 0000000004008000 RSI: 00002000000003c0 RDI: 0000000000000004
[  495.190229][T12251] RBP: 00007ff5c0b05090 R08: 0000000000000000 R09: 0000000000000000
[  495.190238][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.190247][T12251] R13: 00007ff5bfde6038 R14: 00007ff5bfde5fa0 R15: 00007ffc986a6828
[  495.190271][T12251]  </TASK>
[  495.521522][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  495.646625][T12256] vivid-000: disconnect
[  495.656845][T12255] vivid-000: reconnect
[  495.681048][    T9] usb 4-1: Using ep0 maxpacket: 32
[  495.687859][    T9] usb 4-1: config 0 has an invalid interface number: 183 but max is 0
[  495.696199][    T9] usb 4-1: config 0 has no interface number 0
[  495.704254][    T9] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=24.c5
[  495.713927][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.722440][    T9] usb 4-1: Product: syz
[  495.726814][    T9] usb 4-1: Manufacturer: syz
[  495.731525][    T9] usb 4-1: SerialNumber: syz
[  495.738973][    T9] usb 4-1: config 0 descriptor??
[  495.744055][ T5864] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  495.901025][ T5864] usb 6-1: Using ep0 maxpacket: 8
[  495.908222][ T5864] usb 6-1: unable to get BOS descriptor or descriptor too short
[  495.917032][ T5864] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[  495.925746][ T5864] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[  495.934790][ T5864] usb 6-1: config 17 has no interface number 0
[  495.941292][ T5864] usb 6-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81
[  495.953013][ T5864] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.964087][ T5864] usb 6-1: config 17 interface 8 has no altsetting 0
[  495.971290][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.982104][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.993124][ T5864] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  496.005079][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.014620][    T9] em28xx 4-1:0.183: New device syz syz @ 480 Mbps (eb1a:e303, interface 183, class 183)
[  496.028698][ T5864] usb 6-1: Product: syz
[  496.033687][    T9] em28xx 4-1:0.183: Video interface 183 found: bulk
[  496.040337][ T5864] usb 6-1: Manufacturer: syz
[  496.045424][ T5864] usb 6-1: SerialNumber: syz
[  496.127691][    T9] em28xx 4-1:0.183: unknown em28xx chip ID (0)
[  496.242726][   T30] audit: type=1400 audit(1761647405.069:834): avc:  denied  { write } for  pid=12260 comm="syz.2.1587" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  496.385377][ T5864] usb 6-1: selecting invalid altsetting 0
[  496.391439][ T5864] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc
[  496.400270][ T5864] usb 6-1: selecting invalid altsetting 0
[  496.486218][    T9] em28xx 4-1:0.183: reading from i2c device at 0xa0 failed (error=-5)
[  496.512924][    T9] em28xx 4-1:0.183: board has no eeprom
[  496.533854][ T5864] usb 6-1: USB disconnect, device number 28
[  496.576937][ T6877] udevd[6877]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  496.598916][    T9] em28xx 4-1:0.183: Identified as Kaiomy TVnPC U2 (card=63)
[  496.617317][    T9] em28xx 4-1:0.183: analog set to bulk mode.
[  496.639765][ T5918] em28xx 4-1:0.183: Registering V4L2 extension
[  496.658144][    T9] usb 4-1: USB disconnect, device number 42
[  496.697457][    T9] em28xx 4-1:0.183: Disconnecting em28xx
[  496.861954][ T5918] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  497.418052][ T5918] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  497.481638][ T5918] DVB: Unable to find symbol xc2028_attach()
[  497.488216][ T5918] tuner: 1-0061: Tuner has no way to set tv freq
[  497.498820][ T5918] em28xx 4-1:0.183: Config register raw data: 0xffffffed
[  497.510323][ T5918] em28xx 4-1:0.183: AC97 chip type couldn't be determined
[  497.527542][ T5918] em28xx 4-1:0.183: No AC97 audio processor
[  497.534531][ T5918] tuner: 1-0061: Tuner has no way to set tv freq
[  497.556865][ T5918] videodev: could not get a free minor
[  497.562413][ T5918] em28xx 4-1:0.183: can't register radio device
[  497.569118][ T5918] em28xx 4-1:0.183: V4L2 device video103 deregistered
[  497.607573][ T5918] em28xx 4-1:0.183: Registering input extension
[  497.625702][    T9] em28xx 4-1:0.183: Closing input extension
[  497.783856][T12290] overlayfs: failed to resolve './file1': -2
[  498.505542][    T9] em28xx 4-1:0.183: Freeing device
[  498.525655][T12281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12281 comm=syz.5.1591
[  498.542559][T12281] netlink: 'syz.5.1591': attribute type 21 has an invalid length.
[  498.575074][ T5814] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  498.590029][ T5814] Bluetooth: hci5: Injecting HCI hardware error event
[  498.598455][T12281] IPv6: NLM_F_CREATE should be specified when creating new route
[  498.611703][ T5814] Bluetooth: hci5: hardware error 0x00
[  498.621748][T12281] IPv6: Can't replace route, no match found
[  499.826882][T12308] x_tables: ip6_tables: mh match: only valid for protocol 135
[  500.658615][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  501.234327][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.240667][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.372474][ T5814] Bluetooth: hci1: unknown advertising packet type: 0x31
[  501.372561][ T5814] Bluetooth: hci1: Malformed LE Event: 0x02
[  501.405261][T12331] program syz.6.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  501.597528][T12343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1608'.
[  501.663292][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.689672][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.337398][   T30] audit: type=1400 audit(1761647418.153:835): avc:  denied  { setopt } for  pid=12357 comm="syz.6.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  502.577829][ T5927] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  502.780598][T12368] x_tables: ip6_tables: mh match: only valid for protocol 135
[  502.806278][T12369] netlink: 11236 bytes leftover after parsing attributes in process `syz.3.1616'.
[  502.815800][ T5927] usb 7-1: Using ep0 maxpacket: 16
[  502.874439][ T5927] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  502.883874][ T5927] usb 7-1: config 0 has no interface number 0
[  502.914549][ T5927] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  502.923867][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.960978][ T5918] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  502.974143][ T5927] usb 7-1: Product: syz
[  502.989501][ T5927] usb 7-1: Manufacturer: syz
[  503.014491][ T5927] usb 7-1: SerialNumber: syz
[  503.040277][ T5927] usb 7-1: config 0 descriptor??
[  503.098199][ T5927] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  503.107010][ T5927] uvcvideo 7-1:0.105: No valid video chain found.
[  503.144391][ T5918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  503.153621][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.165622][ T5918] usb 3-1: config 0 descriptor??
[  503.274091][    T9] usb 7-1: USB disconnect, device number 10
[  503.685707][ T5918] ath6kl: Unsupported hardware version: 0x0
[  503.705416][ T5918] ath6kl: Failed to init ath6kl core: -22
[  503.718517][ T5918] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22
[  504.220059][ T5918] usb 3-1: USB disconnect, device number 62
[  504.580641][    T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  504.775991][ T5884] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  504.832041][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  504.977204][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  505.026836][    T9] usb 7-1: config 4 has an invalid interface number: 239 but max is 0
[  505.042055][ T5884] usb 6-1: Using ep0 maxpacket: 32
[  505.043729][    T9] usb 7-1: config 4 has no interface number 0
[  505.051858][ T5884] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  505.074667][ T5884] usb 6-1: config 0 has no interface number 0
[  505.121082][    T9] usb 7-1: config 4 interface 239 has no altsetting 0
[  505.191162][    T9] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9
[  505.200630][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.208789][ T5884] usb 6-1: config 0 interface 196 has no altsetting 0
[  505.209080][    T9] usb 7-1: Product: syz
[  505.222262][    T9] usb 7-1: Manufacturer: syz
[  505.226975][    T9] usb 7-1: SerialNumber: syz
[  505.272824][ T5884] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  505.282333][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.290339][ T5884] usb 6-1: Product: syz
[  505.317006][ T5884] usb 6-1: Manufacturer: syz
[  505.323631][ T5884] usb 6-1: SerialNumber: syz
[  505.333421][ T5884] usb 6-1: config 0 descriptor??
[  505.517503][T12414] x_tables: ip6_tables: mh match: only valid for protocol 135
[  505.599405][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'.
[  505.608918][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'.
[  505.628576][    T9] snd-usb-audio 7-1:4.239: probe with driver snd-usb-audio failed with error -71
[  505.647161][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.680749][    T9] usb 7-1: USB disconnect, device number 11
[  505.681002][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.782315][T12397] netlink: 'syz.5.1622': attribute type 1 has an invalid length.
[  505.812870][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  505.822608][T12417] netlink: 'syz.3.1628': attribute type 18 has an invalid length.
[  505.895244][T12397] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1622'.
[  505.895764][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  505.917338][ T5884] ipheth 6-1:0.196: Unable to find endpoints
[  505.936222][ T5884] usb 6-1: USB disconnect, device number 29
[  508.071185][T12444] libceph: resolve '4.' (ret=-3): failed
[  508.088718][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1636'.
[  508.262300][   T30] audit: type=1400 audit(1761647424.083:836): avc:  denied  { ioctl } for  pid=12442 comm="syz.2.1637" path="/361/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  509.500840][ T5918] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  509.530559][   T30] audit: type=1400 audit(1761647425.343:837): avc:  denied  { setopt } for  pid=12460 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  509.576224][T12462] syz_tun: entered allmulticast mode
[  509.660257][T12459] netlink: 'syz.3.1641': attribute type 1 has an invalid length.
[  509.672356][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short
[  509.677810][T12459] netlink: 'syz.3.1641': attribute type 2 has an invalid length.
[  509.691134][ T5918] usb 3-1: not running at top speed; connect to a high speed hub
[  509.691979][ T5918] usb 3-1: config 4 has an invalid interface number: 239 but max is 0
[  509.692000][ T5918] usb 3-1: config 4 has no interface number 0
[  509.692025][ T5918] usb 3-1: config 4 interface 239 has no altsetting 0
[  509.693901][ T5918] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9
[  509.693922][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.693940][ T5918] usb 3-1: Product: syz
[  509.693953][ T5918] usb 3-1: Manufacturer: syz
[  509.693968][ T5918] usb 3-1: SerialNumber: syz
[  509.782749][T12460] syz_tun: left allmulticast mode
[  509.970861][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'.
[  509.980278][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'.
[  510.006937][ T5918] snd-usb-audio 3-1:4.239: probe with driver snd-usb-audio failed with error -71
[  510.026182][ T5918] usb 3-1: USB disconnect, device number 63
[  510.103752][T12465] loop6: detected capacity change from 0 to 7
[  510.125771][T12465] Dev loop6: unable to read RDB block 7
[  510.183864][T12465]  loop6: AHDI p1 p2
[  510.187803][T12465] loop6: partition table partially beyond EOD, truncated
[  510.410857][T12471] random: crng reseeded on system resumption
[  510.452209][   T30] audit: type=1400 audit(1761647426.273:838): avc:  denied  { connect } for  pid=12470 comm="syz.6.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  511.965358][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1653'.
[  513.075559][T12510] overlayfs: failed to resolve './file1': -2
[  515.467513][   T30] audit: type=1800 audit(1761647431.003:839): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1657" name="bus" dev="overlay" ino=1851 res=0 errno=0
[  516.012691][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'.
[  516.088204][T12539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  516.104231][    T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  516.240607][ T5864] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  516.260635][    T9] usb 7-1: Invalid ep0 maxpacket: 16
[  516.332061][T12547] bond1: active interface up!
[  516.390786][    T9] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  516.400236][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.419029][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.431124][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  516.444313][ T5864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  516.444339][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.451118][ T5864] usb 3-1: config 0 descriptor??
[  516.737079][T12553] netlink: 'syz.5.1667': attribute type 1 has an invalid length.
[  516.744890][T12553] netlink: 'syz.5.1667': attribute type 4 has an invalid length.
[  516.752720][T12553] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1667'.
[  516.766194][    T9] usb 7-1: Invalid ep0 maxpacket: 16
[  516.771970][    T9] usb usb7-port1: attempt power cycle
[  517.355310][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.372177][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.482766][ T5864] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  517.503069][ T5864] usb 3-1: USB disconnect, device number 64
[  517.521465][    T9] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  517.551529][    T9] usb 7-1: Invalid ep0 maxpacket: 16
[  517.599081][T12565] fido_id[12565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  517.702595][    T9] usb 7-1: new low-speed USB device number 15 using dummy_hcd
[  517.733692][    T9] usb 7-1: Invalid ep0 maxpacket: 16
[  517.740080][    T9] usb usb7-port1: unable to enumerate USB device
[  519.151867][T12579] binder: BINDER_SET_CONTEXT_MGR already set
[  519.159639][T12579] binder: 12578:12579 ioctl 4018620d 200000000040 returned -16
[  519.242628][T12584] tipc: Enabled bearer <udp:syz2>, priority 10
[  521.490862][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'.
[  521.943245][T12617] overlayfs: missing 'lowerdir'
[  522.400776][T11741] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 150 seconds
[  522.601152][T12626] openvswitch: netlink: IP tunnel dst address not specified
[  522.618904][T12628] loop2: detected capacity change from 0 to 7
[  522.643241][T12628] Dev loop2: unable to read RDB block 7
[  522.667437][T12628]  loop2: unable to read partition table
[  522.683711][T12628] loop2: partition table beyond EOD, truncated
[  522.706958][T12628] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  522.761006][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  522.787789][   T30] audit: type=1400 audit(1761647438.583:840): avc:  denied  { map } for  pid=12627 comm="syz.6.1687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  522.865301][   T30] audit: type=1400 audit(1761647438.583:841): avc:  denied  { execute } for  pid=12627 comm="syz.6.1687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  522.892820][ T5927] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  522.980010][T12630] overlay: ./file0 is not a directory
[  522.993504][T12639] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  523.088912][ T5927] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 63520, setting to 64
[  523.092052][    T9] usb 3-1: config 0 has an invalid interface number: 129 but max is 0
[  523.100433][ T5927] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  523.110599][    T9] usb 3-1: config 0 has no interface number 0
[  523.122576][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0
[  523.135848][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  523.140390][    T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a9.42
[  523.145372][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.166956][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.244815][ T5927] usb 4-1: config 0 descriptor??
[  523.247073][    T9] usb 3-1: Product: syz
[  523.303311][    T9] usb 3-1: Manufacturer: syz
[  523.358367][    T9] usb 3-1: SerialNumber: syz
[  523.358657][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27
[  523.412896][    T9] usb 3-1: config 0 descriptor??
[  523.431556][    T9] usb 3-1: MBOX3: Invalid descriptor size=18.
[  523.777412][T12624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  523.844003][T12624] block device autoloading is deprecated and will be removed.
[  523.858744][ T5169] bcm5974 4-1:0.0: could not read from device
[  523.882970][    T9] usb 3-1: USB disconnect, device number 65
[  523.892544][T12646] random: crng reseeded on system resumption
[  523.898765][ T5927] usb 4-1: USB disconnect, device number 43
[  523.906282][ T5169] bcm5974 4-1:0.0: could not read from device
[  524.024332][ T6874] bcm5974 4-1:0.0: could not read from device
[  524.040886][ T5169] bcm5974 4-1:0.0: could not read from device
[  524.087087][ T6874] bcm5974 4-1:0.0: could not read from device
[  524.149186][ T6874] udevd[6874]: Error opening device "/dev/input/event4": Input/output error
[  524.159411][ T6874] udevd[6874]: Unable to EVIOCGABS device "/dev/input/event4"
[  524.167978][ T6874] udevd[6874]: Unable to EVIOCGABS device "/dev/input/event4"
[  524.181426][ T6874] udevd[6874]: Unable to EVIOCGABS device "/dev/input/event4"
[  524.196341][ T6874] udevd[6874]: Unable to EVIOCGABS device "/dev/input/event4"
[  524.203525][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1694'.
[  524.908831][T12665] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1696'.
[  525.425582][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1700'.
[  528.097670][   T30] audit: type=1400 audit(1761647443.913:842): avc:  denied  { map } for  pid=12699 comm="syz.0.1706" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  528.186372][T12701] debugfs: 'ttyS3' already exists in 'caif_serial'
[  528.256577][   T30] audit: type=1400 audit(1761647443.953:843): avc:  denied  { execute } for  pid=12699 comm="syz.0.1706" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  529.622452][T12726] trusted_key: encrypted_key: insufficient parameters specified
[  529.819170][   T30] audit: type=1400 audit(1761647445.513:844): avc:  denied  { create } for  pid=12722 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  529.995219][   T30] audit: type=1400 audit(1761647445.813:845): avc:  denied  { ioctl } for  pid=12733 comm="syz.5.1711" path="socket:[37978]" dev="sockfs" ino=37978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  530.615855][   T30] audit: type=1400 audit(1761647446.423:846): avc:  denied  { associate } for  pid=12746 comm="syz.2.1717" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  530.956437][T12766] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  530.982669][    C0] vkms_vblank_simulate: vblank timer overrun
[  531.000714][T12766] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  531.096519][T12766] syz.3.1720 (12766): /proc/12760/oom_adj is deprecated, please use /proc/12760/oom_score_adj instead.
[  531.632834][T12776] tc_dump_action: action bad kind
[  531.998010][   T30] audit: type=1400 audit(1761647447.813:847): avc:  denied  { mounton } for  pid=12773 comm="syz.3.1723" path="/proc/709/ns" dev="proc" ino=38038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  532.541513][   T30] audit: type=1400 audit(1761647448.353:848): avc:  denied  { setopt } for  pid=12780 comm="syz.6.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  532.770593][ T5864] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  532.853989][ T5814] Bluetooth: hci4: Malformed Event: 0x02
[  533.000620][ T5864] usb 7-1: Using ep0 maxpacket: 16
[  533.036571][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.053486][ T5864] usb 7-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  533.067623][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.097396][ T5864] usb 7-1: config 0 descriptor??
[  533.305334][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.348263][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.434047][ T5864] usbhid 7-1:0.0: can't add hid device: -71
[  533.440225][ T5864] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  533.609808][ T5864] usb 7-1: USB disconnect, device number 16
[  535.496905][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'.
[  537.230618][ T5864] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  537.422158][ T5864] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  537.440608][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.440608][ T5927] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  537.442571][ T5864] usb 7-1: config 0 descriptor??
[  537.504213][ T5864] cp210x 7-1:0.0: cp210x converter detected
[  537.602337][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short
[  537.620325][ T5927] usb 4-1: not running at top speed; connect to a high speed hub
[  537.665460][ T5927] usb 4-1: config 4 has an invalid interface number: 239 but max is 0
[  537.685098][ T5927] usb 4-1: config 4 has no interface number 0
[  537.713356][ T5927] usb 4-1: config 4 interface 239 has no altsetting 0
[  537.754280][ T5927] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9
[  537.773863][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.790314][ T5927] usb 4-1: Product: syz
[  537.825219][ T5927] usb 4-1: Manufacturer: syz
[  537.829860][ T5927] usb 4-1: SerialNumber: syz
[  537.946940][ T5864] usb 7-1: cp210x converter now attached to ttyUSB0
[  538.155970][ T5864] usb 7-1: USB disconnect, device number 17
[  538.181110][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  538.201297][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  538.784015][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  538.800808][T12859] overlayfs: missing 'lowerdir'
[  538.835295][ T5927] snd-usb-audio 4-1:4.239: probe with driver snd-usb-audio failed with error -71
[  538.846397][ T5927] usb 4-1: USB disconnect, device number 44
[  538.977552][ T5864] cp210x 7-1:0.0: device disconnected
[  539.013903][   T30] audit: type=1326 audit(1761647454.833:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.042564][   T30] audit: type=1326 audit(1761647454.833:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.067993][   T30] audit: type=1326 audit(1761647454.833:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.091308][    C0] vkms_vblank_simulate: vblank timer overrun
[  539.103904][   T30] audit: type=1326 audit(1761647454.833:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.127317][    C0] vkms_vblank_simulate: vblank timer overrun
[  539.150197][   T30] audit: type=1326 audit(1761647454.833:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.173658][    C0] vkms_vblank_simulate: vblank timer overrun
[  539.295415][   T30] audit: type=1326 audit(1761647454.833:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.332676][   T30] audit: type=1326 audit(1761647454.833:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.407252][   T30] audit: type=1326 audit(1761647454.833:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.515743][   T30] audit: type=1326 audit(1761647454.833:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.539016][    C0] vkms_vblank_simulate: vblank timer overrun
[  539.584113][   T30] audit: type=1326 audit(1761647454.833:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a0d8efc9 code=0x7ffc0000
[  539.607534][    C0] vkms_vblank_simulate: vblank timer overrun
[  540.433905][  T889] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  540.690712][  T889] usb 4-1: Using ep0 maxpacket: 32
[  540.722830][  T889] usb 4-1: config 250 has an invalid interface number: 8 but max is 0
[  540.732082][  T889] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  540.745973][  T889] usb 4-1: config 250 has no interface number 0
[  540.755026][  T889] usb 4-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[  540.764892][  T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.780724][ T5927] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  542.492245][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  542.518043][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  542.594372][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  542.630346][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  542.781662][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  542.798704][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  542.809836][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  543.416359][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.430183][ T5927] usb 3-1: config 0 descriptor??
[  543.442079][ T5927] usb 3-1: can't set config #0, error -71
[  543.449852][ T5927] usb 3-1: USB disconnect, device number 66
[  543.605128][  T889] usb 4-1: string descriptor 0 read error: -71
[  543.635757][  T889] uvcvideo 4-1:250.8: probe with driver uvcvideo failed with error -22
[  543.679516][T12928] tunl0: Caught tx_queue_len zero misconfig
[  543.756784][  T889] usb 4-1: USB disconnect, device number 45
[  543.981589][ T5927] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  544.274210][ T5927] usb 3-1: Using ep0 maxpacket: 32
[  544.988331][ T5927] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  544.997572][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.005590][ T5927] usb 3-1: Product: syz
[  545.009908][ T5927] usb 3-1: Manufacturer: syz
[  545.014833][ T5927] usb 3-1: SerialNumber: syz
[  545.026798][ T5927] usb 3-1: config 0 descriptor??
[  545.035082][ T5927] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  545.915058][T12957] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1772'.
[  546.744938][ T5927] gspca_stk1135: reg_w 0x5 err -110
[  546.754249][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.761054][ T5927] gspca_stk1135: Sensor write failed
[  546.767053][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.773545][ T5927] gspca_stk1135: Sensor write failed
[  546.779103][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.803519][ T5927] gspca_stk1135: Sensor read failed
[  546.816515][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.823467][ T5927] gspca_stk1135: Sensor read failed
[  546.828809][ T5927] gspca_stk1135: Detected sensor type unknown (0x0)
[  546.836311][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.842919][ T5927] gspca_stk1135: Sensor read failed
[  546.848550][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.856533][ T5927] gspca_stk1135: Sensor read failed
[  546.862436][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.868861][ T5927] gspca_stk1135: Sensor write failed
[  546.875782][ T5927] gspca_stk1135: serial bus timeout: status=0x00
[  546.882510][ T5927] gspca_stk1135: Sensor write failed
[  546.888442][ T5927] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110
[  547.690915][ T5927] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  547.900786][    T9] usb 3-1: USB disconnect, device number 67
[  548.191898][ T5927] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  548.220564][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.246075][ T5927] usb 4-1: Product: syz
[  548.257795][ T5927] usb 4-1: Manufacturer: syz
[  548.268650][ T5927] usb 4-1: SerialNumber: syz
[  548.973372][T13008] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1779'.
[  549.630341][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  549.661382][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  549.726509][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  549.739241][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  549.739256][   T30] audit: type=1400 audit(1761647465.563:871): avc:  denied  { remount } for  pid=13013 comm="syz.6.1787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  549.801219][ T5927] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  549.848009][ T5927] usb 4-1: USB disconnect, device number 46
[  550.054604][   T30] audit: type=1400 audit(1761647465.843:872): avc:  denied  { ioctl } for  pid=13028 comm="syz.6.1790" path="socket:[38430]" dev="sockfs" ino=38430 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  550.481732][    T9] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  550.704026][    T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  550.718565][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  550.745653][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  550.781161][    T9] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  550.820903][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.841425][    T9] usb 7-1: config 0 descriptor??
[  550.871293][T13029] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  551.384849][    T9] wacom 0003:056A:00B3.0014: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  551.413874][    T9] wacom 0003:056A:00B3.0014: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.6-1/input0
[  551.471685][    T9] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B3.0014/input/input28
[  551.627993][    T9] usb 7-1: USB disconnect, device number 18
[  551.686056][T13059] fido_id[13059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  552.474311][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1799'.
[  552.517916][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1799'.
[  553.293825][ T6189] block nbd1: Possible stuck request ffff888026997000: control (read@0,4096B). Runtime 180 seconds
[  554.111026][ T5857] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  554.790644][ T5857] usb 7-1: Using ep0 maxpacket: 32
[  554.797137][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.808169][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.828172][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  554.847102][ T5927] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  554.854853][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.867850][ T5857] usb 7-1: config 0 descriptor??
[  554.938363][ T5857] hub 7-1:0.0: USB hub found
[  555.033134][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short
[  555.054452][ T5927] usb 3-1: not running at top speed; connect to a high speed hub
[  555.064222][ T5927] usb 3-1: config 4 has an invalid interface number: 239 but max is 0
[  555.073734][ T5927] usb 3-1: config 4 has no interface number 0
[  555.083983][ T5927] usb 3-1: config 4 interface 239 has no altsetting 0
[  555.097016][ T5927] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9
[  555.110307][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.130516][ T5857] hub 7-1:0.0: 1 port detected
[  555.141151][ T5927] usb 3-1: Product: syz
[  555.147015][ T5927] usb 3-1: Manufacturer: syz
[  555.153457][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1807'.
[  555.167968][ T5927] usb 3-1: SerialNumber: syz
[  555.459889][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  555.469308][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  555.516354][ T5927] snd-usb-audio 3-1:4.239: probe with driver snd-usb-audio failed with error -71
[  555.560111][ T5927] usb 3-1: USB disconnect, device number 68
[  555.746512][ T5857] hub 7-1:0.0: activate --> -90
[  556.488676][   T30] audit: type=1400 audit(1761647472.153:873): avc:  denied  { accept } for  pid=13087 comm="syz.6.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  556.926058][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.934590][ T5864] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  556.974522][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.990163][T13115] input: syz0 as /devices/virtual/input/input31
[  557.140772][ T5864] usb 4-1: Using ep0 maxpacket: 16
[  557.154985][ T5864] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  557.174638][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  557.180607][   T30] audit: type=1400 audit(1761647472.963:874): avc:  denied  { name_connect } for  pid=13122 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  557.208071][ T5864] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  557.222399][ T5857] hub 7-1:0.0: hub_ext_port_status failed (err = -32)
[  557.239872][ T5864] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  557.252005][ T5927] usb 7-1: USB disconnect, device number 19
[  557.285158][   T30] audit: type=1400 audit(1761647472.983:875): avc:  denied  { write } for  pid=13122 comm="syz.0.1811" path="socket:[38603]" dev="sockfs" ino=38603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  557.305494][ T5864] usb 4-1: config 1 interface 0 has no altsetting 0
[  557.342531][T13128] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1813'.
[  557.354056][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  557.363478][   T30] audit: type=1400 audit(1761647472.993:876): avc:  denied  { setopt } for  pid=13122 comm="syz.0.1811" lport=37565 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  557.373796][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.455831][T13131] overlayfs: missing 'lowerdir'
[  557.487832][T13128] bond0: (slave dummy0): Releasing backup interface
[  557.638859][ T5864] usb 4-1: Product: syz
[  557.647965][ T5864] usb 4-1: Manufacturer: syz
[  557.652799][ T5864] usb 4-1: SerialNumber: syz
[  558.554919][ T5864] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  558.664959][ T5814] Bluetooth: hci1: Malformed Event: 0x02
[  558.893841][   T30] audit: type=1400 audit(1761647474.713:877): avc:  denied  { read write } for  pid=13117 comm="syz.3.1810" name="lp0" dev="devtmpfs" ino=4231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  558.927679][   T30] audit: type=1400 audit(1761647474.713:878): avc:  denied  { open } for  pid=13117 comm="syz.3.1810" path="/dev/usb/lp0" dev="devtmpfs" ino=4231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  558.973959][T13150] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1819'.
[  558.993369][ T5864] usb 4-1: USB disconnect, device number 47
[  559.056662][ T5864] usblp0: removed
[  560.881110][   T30] audit: type=1400 audit(1761647476.533:879): avc:  denied  { write } for  pid=13171 comm="syz.6.1825" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  560.904131][    C0] vkms_vblank_simulate: vblank timer overrun
[  561.395298][T13178] overlayfs: missing 'lowerdir'
[  562.662489][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  562.668922][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  667.660452][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  667.667428][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6874/1:b..l
[  667.675896][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=53617, q=142 ncpus=2)
[  667.683602][    C0] task:udevd           state:R  running task     stack:24952 pid:6874  tgid:6874  ppid:5184   task_flags:0x400140 flags:0x00080001
[  667.697735][    C0] Call Trace:
[  667.701019][    C0]  <TASK>
[  667.703945][    C0]  __schedule+0x1190/0x5de0
[  667.708465][    C0]  ? __pfx___schedule+0x10/0x10
[  667.713318][    C0]  ? __lock_acquire+0xb8a/0x1c90
[  667.718266][    C0]  preempt_schedule_irq+0x51/0x90
[  667.723286][    C0]  irqentry_exit+0x36/0x90
[  667.727706][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  667.733677][    C0] RIP: 0010:step_into+0xe1b/0x21a0
[  667.738802][    C0] Code: 48 8b 75 08 4c 89 e7 e8 a3 df 5c ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 cf 01 81 ff 58 4d 85 e4 0f 85 00 04 00 00 <e8> 50 06 81 ff 4d 8d 7d 08 4c 89 f8 48 c1 e8 03 42 0f b6 0c 30 4c
[  667.758398][    C0] RSP: 0018:ffffc900036a78f0 EFLAGS: 00000293
[  667.764458][    C0] RAX: 0000000000000000 RBX: ffffc900036a7c20 RCX: ffffffff823c0758
[  667.772416][    C0] RDX: ffff888034a42480 RSI: ffffffff823c0767 RDI: 0000000000000007
[  667.780378][    C0] RBP: ffffc900036a79f0 R08: 0000000000000007 R09: 0000000000000000
[  667.788334][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  667.796309][    C0] R13: ffff8880311271a0 R14: dffffc0000000000 R15: 0000000000000200
[  667.804276][    C0]  ? step_into+0x1038/0x21a0
[  667.808860][    C0]  ? step_into+0x1047/0x21a0
[  667.813453][    C0]  ? __pfx_step_into+0x10/0x10
[  667.818216][    C0]  ? lookup_fast+0x156/0x610
[  667.822807][    C0]  walk_component+0xfc/0x5b0
[  667.827395][    C0]  link_path_walk+0x627/0xe20
[  667.832077][    C0]  path_openat+0x1b0/0x2cb0
[  667.836577][    C0]  ? __pfx_path_openat+0x10/0x10
[  667.841507][    C0]  ? __lock_acquire+0xb8a/0x1c90
[  667.846447][    C0]  do_filp_open+0x20b/0x470
[  667.850942][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  667.855974][    C0]  ? alloc_fd+0x471/0x7d0
[  667.860301][    C0]  do_sys_openat2+0x11b/0x1d0
[  667.864971][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  667.870172][    C0]  __x64_sys_openat+0x174/0x210
[  667.875015][    C0]  ? __pfx___x64_sys_openat+0x10/0x10
[  667.880391][    C0]  do_syscall_64+0xcd/0xfa0
[  667.884892][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.890771][    C0] RIP: 0033:0x7f895ab15c3a
[  667.895171][    C0] RSP: 002b:00007ffe9d7985b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  667.903585][    C0] RAX: ffffffffffffffda RBX: 00007ffe9d7985f0 RCX: 00007f895ab15c3a
[  667.911563][    C0] RDX: 0000000000090800 RSI: 00007ffe9d7989f0 RDI: 00000000ffffff9c
[  667.919533][    C0] RBP: 0000000000000007 R08: 0000561111773860 R09: 0000000000000000
[  667.927488][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000561111520800
[  667.935448][    C0] R13: 00007ffe9d7991f0 R14: 00007ffe9d798df0 R15: 00007ffe9d7989f0
[  667.943422][    C0]  </TASK>
[  667.946431][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10525 jiffies! g53617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  667.958753][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=33792
[  667.966625][    C0] rcu: rcu_preempt kthread starved for 10526 jiffies! g53617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  667.977979][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  667.987930][    C0] rcu: RCU grace-period kthread stack dump:
[  667.993821][    C0] task:rcu_preempt     state:I stack:28024 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  668.005731][    C0] Call Trace:
[  668.008999][    C0]  <TASK>
[  668.011921][    C0]  __schedule+0x1190/0x5de0
[  668.016437][    C0]  ? __lock_acquire+0x622/0x1c90
[  668.021377][    C0]  ? __pfx___schedule+0x10/0x10
[  668.026226][    C0]  ? find_held_lock+0x2b/0x80
[  668.030908][    C0]  ? schedule+0x2d7/0x3a0
[  668.035268][    C0]  schedule+0xe7/0x3a0
[  668.039348][    C0]  schedule_timeout+0x123/0x290
[  668.044199][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  668.049562][    C0]  ? __pfx_process_timeout+0x10/0x10
[  668.054863][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  668.060663][    C0]  ? prepare_to_swait_event+0xf5/0x480
[  668.066123][    C0]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  668.070879][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  668.076151][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  668.081344][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  668.086266][    C0]  ? rcu_gp_cleanup+0x7c1/0xd90
[  668.091112][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  668.096915][    C0]  rcu_gp_kthread+0x26d/0x380
[  668.101580][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  668.106763][    C0]  ? rcu_is_watching+0x12/0xc0
[  668.111520][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  668.116712][    C0]  ? __kthread_parkme+0x19e/0x250
[  668.121734][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  668.126938][    C0]  kthread+0x3c5/0x780
[  668.130996][    C0]  ? __pfx_kthread+0x10/0x10
[  668.135574][    C0]  ? rcu_is_watching+0x12/0xc0
[  668.140327][    C0]  ? __pfx_kthread+0x10/0x10
[  668.144908][    C0]  ret_from_fork+0x675/0x7d0
[  668.149484][    C0]  ? __pfx_kthread+0x10/0x10
[  668.154063][    C0]  ret_from_fork_asm+0x1a/0x30
[  668.158835][    C0]  </TASK>
[  668.161842][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  668.168147][    C0] Sending NMI from CPU 0 to CPUs 1:
[  668.173339][    C1] NMI backtrace for cpu 1
[  668.173350][    C1] CPU: 1 UID: 0 PID: 1296 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  668.173367][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  668.173375][    C1] RIP: 0010:kasan_check_range+0x159/0x1b0
[  668.173394][    C1] Code: 2c 48 89 c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff 48 85 d2 74 18 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 0a <80> 38 00 74 f2 e9 75 ff ff ff 5b b8 01 00 00 00 5d 41 5c c3 cc cc
[  668.173406][    C1] RSP: 0018:ffffc90004c0f928 EFLAGS: 00000086
[  668.173418][    C1] RAX: fffffbfff2103eda RBX: fffffbfff2103edb RCX: ffffffff81c50c3f
[  668.173427][    C1] RDX: fffffbfff2103edb RSI: 0000000000000008 RDI: ffffffff9081f6d0
[  668.173436][    C1] RBP: fffffbfff2103eda R08: 0000000000000000 R09: fffffbfff2103eda
[  668.173444][    C1] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: ffffffff9add7348
[  668.173452][    C1] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003
[  668.173460][    C1] FS:  0000000000000000(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000
[  668.173474][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  668.173482][    C1] CR2: 00002000000fe030 CR3: 000000007d0de000 CR4: 00000000003526f0
[  668.173490][    C1] DR0: 0000000000001880 DR1: 0000000000000000 DR2: 0000000000000000
[  668.173497][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  668.173505][    C1] Call Trace:
[  668.173511][    C1]  <TASK>
[  668.173516][    C1]  trace_irq_enable.constprop.0+0x2f/0x120
[  668.173535][    C1]  trace_hardirqs_on+0x26/0x40
[  668.173551][    C1]  _raw_spin_unlock_irqrestore+0x52/0x80
[  668.173568][    C1]  uart_write+0x4c1/0xb30
[  668.173590][    C1]  handle_tx+0x204/0x630
[  668.173612][    C1]  dev_hard_start_xmit+0x97/0x740
[  668.173630][    C1]  __dev_queue_xmit+0xa46/0x4490
[  668.173645][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  668.173662][    C1]  ? finish_task_switch.isra.0+0x221/0xc10
[  668.173679][    C1]  ? rcu_is_watching+0x12/0xc0
[  668.173695][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  668.173707][    C1]  ? __schedule+0x11a3/0x5de0
[  668.173725][    C1]  ? __lock_acquire+0xb8a/0x1c90
[  668.173744][    C1]  ? __lock_acquire+0xb8a/0x1c90
[  668.173765][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  668.173779][    C1]  ? find_held_lock+0x2b/0x80
[  668.173794][    C1]  ? skb_dequeue+0x126/0x180
[  668.173805][    C1]  ? find_held_lock+0x2b/0x80
[  668.173821][    C1]  ? rcu_is_watching+0x12/0xc0
[  668.173837][    C1]  tx+0xcc/0x190
[  668.173852][    C1]  ? __pfx_tx+0x10/0x10
[  668.173863][    C1]  kthread+0x1e4/0x3e0
[  668.173882][    C1]  ? find_held_lock+0x2b/0x80
[  668.173896][    C1]  ? __pfx_kthread+0x10/0x10
[  668.173921][    C1]  ? __pfx_default_wake_function+0x10/0x10
[  668.173938][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  668.173956][    C1]  ? __kthread_parkme+0x19e/0x250
[  668.173973][    C1]  ? __pfx_kthread+0x10/0x10
[  668.173991][    C1]  kthread+0x3c5/0x780
[  668.174003][    C1]  ? __pfx_kthread+0x10/0x10
[  668.174016][    C1]  ? rcu_is_watching+0x12/0xc0
[  668.174032][    C1]  ? __pfx_kthread+0x10/0x10
[  668.174045][    C1]  ret_from_fork+0x675/0x7d0
[  668.174060][    C1]  ? __pfx_kthread+0x10/0x10
[  668.174073][    C1]  ret_from_fork_asm+0x1a/0x30
[  668.174097][    C1]  </TASK>