last executing test programs:

13.068207148s ago: executing program 2 (id=923):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0x10a, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x98, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x1, 0x5, 0x8}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x2, 0x3, "3ba0407fd967"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x9}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x2, 0x6, 0x3, 0x9, 0x3, 0xa], 0x8}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "099d1d43e9ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8, "d2", 'm|'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x80, 0x6, "c9b6d130a2610f10"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0x4, "eae8f9"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x6, 0x5, {0x7, 0x25, 0x1, 0x3, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x27}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0xfb, "9778"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x40, "6e05"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x74, 0x8, "aceb34fb"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x38, 0x0, 0xfc, 0x5, {0x7, 0x25, 0x1, 0x81, 0x7, 0xa8b5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0xbf, 0x70, 0x20, 0x7}, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="050ff7f5ebf419000100000000ae25b1fd05d849921ff66de5c710f842"], 0x5, [{0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="2d03c13df9cec7e71338269820d444fae321ea1605b8c68c82a2961b62c010206b7959d0977cf4334a502b3836681b653329ed0941409f8f41c58539cf136d8f615f540ad3a73b4fb362b5f1de1eec2f063661fc00ec7a863adce539376dab2b93407a5bcd96cf9ccaef0df93df4435d31b14cb183d27882ec736066a541237e9c6efb088d1abd730d2695d2dc4d714d54b261de1750357cece0c2"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0xec, &(0x7f0000000340)=ANY=[@ANYBLOB="6130cb1ee54920c10c2f1694681901162e6b43f7b608676d140a1df43425e46d3d49c9ea1214b522f8cb795c3d2a1b8e75b5e5974f2b62d2f0f354caa89b518f7f523bc2939e9fa9c4ea4c06e31c15bd3b6009487e9bb94f9b1ecf8c1eb147f917fb985a6694e6c963bfd0586ec55e4a0c0c1f863d2ccad8c155e107558152d0ea9c1ca133c9a6d3b62c5a60593dbb55b61f9251ad76eed9f40bfb46b538ace73cfb9d9220c902591654ca56d70d1a426345fba526309d25d7f660511388354268ce69b04c7f2db01332b63cae142afe073090c7a2f56c224c09bc29eee6383780739b76851e8b9fccb7"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x860}}]})
mount$pvfs2(&(0x7f0000000280), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x200000, &(0x7f0000000640)={[{',#'}, {}, {'.?,%'}], [{@fsname}]})
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11.571799165s ago: executing program 1 (id=928):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/../file0\x00', 0x100, &(0x7f00000001c0)={0x0, 0xc, 0x20000}, 0x20)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="862c826fa89aac0e04de49491c0133eb8e456c02f8d4a32b99b1b8e993d02e75e21be6dd1483336df1876790a65f655494700a91ad3e81e7e7275d19c05fe9320bae39d2bf4274902f9337108a6fbee0f76b4ce5cb7c4e28814ce27f491f1db748e153aed7f0ba998461eb0e72837f0bc763df9ef3f108584554b18a380694531c838bf2f16a36ba7e56bf896f055e7d53268b3256255ac1aeb69935eeb28323cc0d5f551c32a1cfd3931ff46a05f223e6affb7f5bce5e63e77a15b51d250323d4f52fc1b574", @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES32=r2], 0x0)

9.414590016s ago: executing program 2 (id=934):
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x49015}, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0xd, 0x3, 0x0, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x7, 0x7ff}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x2f, 0x2, 0x40, 0x8, 0x21, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, 0x700, 0x0, 0xfffff3f6, 0x7}})
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$netlink(0x10, 0x3, 0x10)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x208000, 0x0)

8.522041705s ago: executing program 4 (id=937):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x1000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000480)={0x4200, 0x2, 0x1}, 0x18, 0x2)
landlock_restrict_self(0xffffffffffffffff, 0x0)
mkdirat(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000087cbb6690000f231005e0600b7e7de00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7cb080800070000007b8af8ff00000000bfa200000000000007020000f8ffffff0000000008000000b7040000000000008500000082000000950b000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20)
close(r8)
close(r7)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r9, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaff5effffffff0800450c00300000000000019078ac1e0001e000000103049078030000004500000000000000002f0000ac1414aae0000001"], 0x0)

8.487660296s ago: executing program 1 (id=938):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x34, 0x32, 0x20, 0x970bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x969}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000100001000000010000000000e0000002000000000000000000000000000000000000800000000000000400"/58, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00"/134], 0x154}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000008001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0xc000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x11)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

7.486040039s ago: executing program 4 (id=939):
sched_setscheduler(0x0, 0x1, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xf)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getcwd(0x0, 0xfffffffffffffe7d)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

7.028857423s ago: executing program 0 (id=940):
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe187ebd72a778528, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000180))

6.983012032s ago: executing program 4 (id=941):
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
fallocate(r2, 0x0, 0x0, 0x1000f4)
truncate(0x0, 0x95a)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000300), 0x0)

6.545511888s ago: executing program 0 (id=943):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002a000040"])
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x20001000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x6, 0x9}, 0x28)
syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
socket(0x28, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)

6.542949044s ago: executing program 2 (id=944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x800000)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = eventfd2(0x8, 0x80001)
poll(&(0x7f00000012c0)=[{r1, 0x20}, {r2, 0x80a1}, {r1, 0x4}], 0x3, 0x696a)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
timerfd_gettime(0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x200)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, r4, 0x2)

5.376782013s ago: executing program 4 (id=946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x40, {0xa, 0x40, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="000000ff000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

5.281033341s ago: executing program 2 (id=947):
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x49015}, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0xd, 0x3, 0x0, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x7, 0x7ff}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x2f, 0x2, 0x40, 0x8, 0x21, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, 0x700, 0x0, 0xfffff3f6, 0x7}})
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$netlink(0x10, 0x3, 0x10)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x208000, 0x0)

5.132943269s ago: executing program 4 (id=948):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
modify_ldt$read(0x0, &(0x7f0000000100)=""/202, 0xca)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
close(0xffffffffffffffff)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r6)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000000)="9dba4000ec0f01dd66b9020a00000f32653632c60f20d86635080000000f22d8bad10466b80010000066ef0f08f30f0f32a70fc72e0a00", 0x37}], 0x1, 0x24, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)

4.928504437s ago: executing program 3 (id=949):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x4c0, 0x0, 0x1f0, 0x0, 0x3d8, 0x3d8, 0x3d8, 0x4, 0x0, {[{{@arp={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x1, 0x3, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x7, 0xa, 0x7, 0x4, 0x3ff, 0x7, 'gre0\x00', 'wg2\x00', {0x116a6bc34d02a6ed}, {}, 0x0, 0x2}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00', {0x16c6f916}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, 0xff000000, 0xffffff00, 0x1, 0xe, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x479, 0x8000, 0x57b, 0xd, 0x82c, 0x2, 'veth0_to_team\x00', 'netpci0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x1e8, 0x0, {0x801}}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:console_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x510)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
syz_io_uring_setup(0x7faa, &(0x7f00000000c0)={0x0, 0x72b1, 0x10, 0x1, 0x3af}, &(0x7f0000000300), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x10000000)
sendmsg$key(r5, 0x0, 0x0)
r6 = syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802)
writev(r6, &(0x7f00000003c0), 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

4.834222362s ago: executing program 1 (id=950):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="9b0066646e6f39", @ANYRESHEX=r2, @ANYBLOB="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"])

4.710063887s ago: executing program 0 (id=951):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd70000000000001000000080001", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040c08000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10)

4.655931939s ago: executing program 1 (id=952):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6})
r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x9)
time(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_open_dev$usbmon(&(0x7f0000000000), 0x2df, 0x80)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x20, 0x1, 0x800020000000000, 0xfffffffffffffffd, 0x0, 0x6, 0x1000000fff, 0x49}, 0x0, &(0x7f00000002c0)={0x80000000000003ff, 0x7, 0xfffffffffffffffb, 0x9, 0xd918, 0xf, 0x7fffffffffffffff, 0x1}, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x54)
ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000040)=""/10)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001840)={0x34, &(0x7f0000001500)=ANY=[@ANYBLOB="e600"/13], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)

4.203507214s ago: executing program 0 (id=953):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040), 0x4)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10)

3.946428555s ago: executing program 3 (id=954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x8000})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x5c, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="000069aaabb786ff0ca8031c3125743c00000e0000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d3d0eb4df679ba79ea02e2f996541c1adbf672135b0259f958477b4168f425156f3ed3c61bca276e347a0e63ba0838b801e95295b532ab9a5812e6647e28f3459a4ce2d495c5567ee344185c2ae90c49f85b4e44ee64d6ff47e3d11447505377145799d68e64f17fd4f71a6ddee9e99a9eb96a7160c136686a0d1c61a9fa473893e6e6dda9f805b5b5be3fb8853f4ee1f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r8 = userfaultfd(0x80801) (rerun: 32)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (async)
socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
socket$unix(0x1, 0x1, 0x0) (rerun: 64)

3.21777202s ago: executing program 3 (id=955):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_THP_DISABLE(0x42, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f00000001c0)={[], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket(0x1e, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
chdir(&(0x7f00000003c0)='./bus\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.214401282s ago: executing program 0 (id=956):
socket$kcm(0x21, 0x2, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x1, 0x8, 0x100, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x2, 0x1, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x58, 0x0, 0x0, 0x1, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x9], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0xffffffff, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd572, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0xfffffffc, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x4, 0x0, 0xfd32, 0x6, 0xffffffff, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae6, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0xfffff]}, 0x45c)
socket$inet(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0)
writev(r2, &(0x7f0000000140), 0x0)
r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x20, 0x2, 0x2, {0x2, 0x21}}, 0x0, &(0x7f0000000400), 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_emit_ethernet(0x68, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0)

2.084825368s ago: executing program 3 (id=957):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x244001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000010)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000004c0))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001dc0)={{0x1}, 0x0, &(0x7f0000001d80)='%pi6   \x00'}, 0x20)
syz_open_dev$vcsn(&(0x7f0000001e00), 0x100000001, 0x200000)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}}, 0x0)

2.061446223s ago: executing program 2 (id=958):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000a3c000000120a0102000000000000000002000000090002007300000900010073797a3000000000080003408cb44d36f6bf0000000a140000001100010000f9ffffff0000000000000a00"/93], 0x64}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x80, 0x4)

1.257046484s ago: executing program 0 (id=959):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000005da271ac000000000000000085000000bc0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="c1dfb080cd21d308098e00000000", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000f150677f483d3115ac10dae15a15ad00000a38000000060a0b040000000000000000020000000c00064000000000000000030900010073797a30000000000900020073797a320000007454a303001100010000000000000000000000000a1f8890df67"], 0x60}, 0x1, 0x0, 0x0, 0x10004811}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x253) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x8001) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
r7 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r7, 0x0, 0x7, 0x0, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r9, 0x0, 0x0, 0x200000000})
socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

909.846971ms ago: executing program 3 (id=960):
sched_setscheduler(0x0, 0x1, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getcwd(0x0, 0xfffffffffffffe7d)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

715.637452ms ago: executing program 4 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a320000000070000000050a010300000000000000000200000008000b40000000020900010073797a300000000008000a40000000030b00070066696c74657200000c0002400000000000000001280008800c000140000000000000079f0c00014000000000000000810c0002400000000000000002a0000000120a01010000000000000000010000068c0004801c0003800800014000000005080001400000000308000140000000020500020006000000060001400e940000050002001100000005000200880000004c0003800000044000000003000005400000000800000740000000010000044000000001503000000c0a01020000000000000000010000090000020073797a30000000000900020073797a30000000000900020073797a31000000000800044000000002dc170380ec01008080000b802c000180090001007866726d000000001c000280080001400000000c0800024000000006080002400000000050000180080001006475700044000280080001400000000f080001400000000c080002400000001508000140000000020800014000000012080002400000000a080002400000000a0800014000000008300007800a0001006c696d697400000020000280080003400000a89908000540000000010c00024000000000000000070c000540000000000001000104010b80100001800b0001007470726f787900002c0001800c0001007061796c6f6164001c000280080002400000000208000140000000160800074000000002140001800e000100636f6e6e6c696d6974000000100001800b0001007470726f78790000580001800800010064757000030002800800014000000004080002400000000d080002400000000208000240000000080800024000000004080001400000000b080001400000001608000140000000170800014000000009100001800a0001006d61746368000000100001800b00010074617267657400000c000180080001006c6f67000c0001800700010072740000100001800b00010072656a6563740000280001802400028008000340000000030900020073797a32000000000900020073797a3200000000b40000800900090073797a3200000000a4000b802c0001800a00010071756575650000001c0002800800044000000009080004400000000306000340000000005800018008000100666962004c0002800800034000000028080002400000000108000240000000000800014000000004080001400000001208000340000000070800024000000003080001400000001008000240000000011c0001800b000100736f636b657400000c00028008000240000000001000008009000640ff981fabae00000024010080200101804400010093344712dc2a519d79b39cc0427d8d82202b954ba423ecd72ee7d03811d237e858683c463f72eb912b6817bab7de69c3508a17610d69d19729db9f85418242a54300010042b8347787c06716e61b1cbc98d23ef8b5d9b57a2b5ebdd3ad924eb11cc20293dee4ed8d97a24ec53e2f6530d91a6d2aa9604bddd86e55052a9bd721ba38c2005800028008000180fffffffc0900020073797a32000000000900020073797a3200000000080003400000000408000180fffffffd08000180ffffffff0900020073797a300000000008000180fffffffb08000180000000033c0002800900020073797a320000000008000180000000000800018000000000080003400000000308000340000000010900020073797a3200000000ac0500800900090073797a30000000008c000b8024000180090001006d6173710000000014000280080003400000000008000140000000720c00018008000100647570000c000180080001006c6f6700100001800a000100696e6e657200000020000180080001006475700014000280080002400000000e080002400000000e100001800b0001006e756d67656e00000c000180080001006e617400b8000180a10001006e3ccd8ab9c0ba249bd09150bb6268afb0ac23cbf5e5eacf3d5f7f829e4969223dd9e9ef1fec71db9762a884c746d20e37dd44516a2a1d4f757a8642365341d0d020db85e762fbc7de3ecad217a546cf578dc395a493d1c012a8fcf1923a3d28123ea5f48f79579a57ff6e56d6b80f0c6b703236ebc3b62920aa490ad712a5901618aad26376af17cc9a16d069f909693fa8dc80c01d4dfc2f7aa13521000000100002800900020073797a320000000074010a80240002800900020073797a32000000000900020073797a300000000008000340000000043c00028008000180ffffffff08000180fffffffc08000180fffffffd08000180fffffffb080003400000000308000340000000040800034000000002200002800900020073797a3200000000080003400000000108000340000000025b000100af4aaf7f7ba0b927dce430cfbb1a040dd17d722e68935a56937e67c17fe942dc8515c4a3525415829f40c4a62ddf85c6d4cdcc994cc6b80a44a1e780aaf091186b537250e125a31db1ac2d73c4b95b4997039164fcf2a8000c00028008000180fffffffe100002800900020073797a32000000002000028008000180fffffffb08000340000000040900020073797a31000000004c0002800800034000000004080003400000000408000180fffffffe08000340000000030900020073797a32000000000900020073797a300000000008000180b77820bd08000180ffffffff0c00028008000340000000010c000440fffffffffffffffcf0010a8017000100e318abc5f138ddc23cf2eb2e2be347da4bebc6007a000100d1b8b94d657a7e5df57bf302bb344b39aafc0020e556f40eb77d314fede77222c46f95122d4c1bea10212d817bd170c9dc03f302b61bd5a86c752be88972c42fe379980d7d18a73246e988503947175310262c4d197959671dc0d4d70ffaf0ea09abf805547da8b64093f3e60efc63aba94ca37022e00000cb000100709426a049590c18a3a46823e379f741cbb4716d00e07f7aaf3f60f9b56450d7856f895a382b7551720cb7617fe4b01600955d5b4bea263f8382ba1679723c47c83e528d97cf13f1518583c2899679616872543c8699d29727697ddc4d88d3a36bed84e604364b262b46b2a1f768d0b77e15bded213a3fe9961fd228a11680c0e81f57cd90426c475fb155bddc9dea5e94e424b502c66519a203fdfab115713f0446b3f2b66e4a03a0a275db6c69aa1f2f003b173217850eb0d8aa76f7b0907a5a2cdc1a218b4e003000028008000340000000020800034000000002080003400000000408000180ffffffff0900020073797a30000000005900010012fea1d504e9b98cd50d8f0d4dc3e0bb93c8696ffde13278efbc11f1690afef7087fbe6a91ed6bb61f1c11eebe49a23d9a3d62d28647e26278af397b9bf165feb48177d3d357272ce3415e8a8f74f8c33ccebd9795000000080003400000000270000640f57090c86e4f9d56572ab44a830072fc86a334aefb28b626d8c2e46566ac0607625f262eb6a86a1c3c639429c1867af39aad5fee90ee75ae4e6db7d840cd87d58d478b44b33b0c7c072c8ee825ba1c090aec9de95915d35dfbb8916736f3da6a6e31921cfe2a249f5ec9c2a068000b802c0001800c0001007061796c6f6164001c00028008000240000000010800074000000010080008400000000010000180090001006861736800000000100001800b0001006c6f6f6b757000001800018011000100666c6f775f6f66666c6f6164000000000800034000000001080500800800034000000001cc000640f78122b5ed0e8b2f2b74b04c539f1f39c204e8c76e9f07d4307969bdb86c869be3315e1d0d4e7ca96c13b8c03ad122f6163771e0fc6723af5d3b89afdb3d13bbebd536603f8ed577a0c25fcb9c2013aa2956e4d63e85d39e7212a98c27c1a9ffa07e1f156d5d5b7c9538becf059da6f051980f598fa4bf3510c392b0aa838c35d22477c16ea57db94845dcc696c79a7a1eb9edf70a36953057ab99ed5cd9a27d8ae8afeafa11729716e3401a594340fd0815cc64bd24e70fa56083b5f5b6efbce169d84ea849a0340c00044000000000000000020c000540000000000000002f35000640dc88f1a354465b9a87ec257cba332e4adb6ac9a0e5f38d2ac060275bb86354c484db44ba0afff1ac3f76c94f919b6d8a340000000c0004400000000000000009d4030a805400028008000180fffffffc08000180fffffffb0900020073797a300000000008000340000000030900020073797a31000000000900020073797a310000000008000340000000010900020073797a3100000000340002800900020073797a31000000000900020073797a3000000000080003400000000208000340000000020800034000000003600002800900020073797a30000000000900020073797a30000000000900020073797a3100000000080003400000000408000180fffffffd0900020073797a3100000000080003400000000308000340000000010900020073797a32000000004b000100803a669e5e7c631b8aa88e396a47d7b95dd877f61a65397e523fa7dcbf7c4557f7f30b7846f704927b1c2e63d6f897c94b95e85013e50401a4d89686782177b79aeac2203991b800f20001007a93fa7dabbb2e6289560f94fbde84a778fdbad5439a964d2de0f2a534f210cfd67cb0dd89dc85d04cdf88c400512f30b4d80fd0b327f6fa0bc3c8fd821b1b1c106ca7a87f9a90413082280c1729981e170d89d64277c3e6b2658b215a971779963a4f6302a792dd84f3cae81cb0fe6162a592fc1f72b0f6e676c4a8864ad5c718396c68f60c73f6c17efd393dd51ab1e570eb0d79089737c85981a8041252606a262c9a8d01ec5e91f266e5edd77efec77ead7b10901e03b7296802fabcf04a277d42ecfef3afe43b42fae22422adf3573fe2f0f308cfa1b3529557f5bc31c46e673f68698b215c87125dd6bb1a00004000028008000180ffffffff08000180fffffffd08000180fffffffd080003400000000308000180000000030900020073797a310000000008000180fffffffe1a000100074631733b41285415b40cf8921acfa4d33571d5125a0000ad000100d27230d0695bfb418f01e013ca130ff4980c165f0ef7667fc8ec9b4c6e2ff877413e0e1dce9f874e8f684ca17a4bfc6f59fd1e72230de94925d4cd20388c81b22ed7cdc38ba9cb2d76ed0f570560cc1cab8ea0e5513f0b7c2d7ddc4b4a6fa37fac2bc057ce1feda8ec20ce17c842935d7b71cecbeee5ec229cf7ecec9ec977019ed8c031556145546c25d37f23479fdfe44c1518279cfb9aada909d7074283ab99c5be8e5d44bccf590000009b0001007baeb0fb72ca066f140880d5ba4434c499f15a68da7c964712dd4679850e224f64e0fd29de1ac0e69d0d17bb8323bba58760951995e52b22ccce79db3c3a358303ebb27e2129ec4b321813d7aecd372bc4937cddf0dd65ee6d8b7cf822dd20e372267e2e5f33f3b20ad68adf64ba4211c9cadca6acac3bd75825fddeab1b45aba955ca1b94ed1b7e101390b97cd22f230c400c24156c2f00840100800c000440000000000000012a0900090073797a300000000068010180d000010003a4969d8815f3c5e0aaf2e3afd353345312b79008d1cc782ae726599be47ec2d45bb1cb2242c1b4b703e36a95e4332816e0438daafaed3108b78aec5d55ad50eff57c43b1bc5b387169b04626c7abecef3722b5471d81209ada45f7be4119768130d717033cc6056bb10786ef4e17beb8d941f50169267965613255d406f880ce137cf502d4ed489222e5f0c9203bf16d3e80a38a9412b5dd92d8f11d570cd3bf8644eaaca84f9e1ea84bc5cf9af7d4d4b88c57d720d49988a309230e7e890c52ae8a1f7eed1ec4eaabb3d8920001003405fe601b9755e5c73f27e122da1e8eba513be4ce31df28b62610b1f84add05e20be0969639b4f2cc9c8c7edbb900fdbbf61ba1e0bb86110662084c145b32836d8339d48423bd58eb31f1cca2f2bca1a21fddaa4b18759a4023780d078bab1e818598437b4d366a31ba375870ddf44457319d01004dfe2462188d43a6ec5b6c23f91ffd07cbdbf115db067e95ca0000cc070080d4000180300002800900020073797a310000000008000180fffffffc080003400000000408000180ffffffff08000340000000011c000280080003400000000208000180ffffffff08000340000000040c00028008000340000000021c00028008000180fffffffe080003400000000108000340000000020a0001005ca3bb320300000050000280080003400000000108000180fffffffc080003400000000108000180000000010900020073797a3100000000080003400000000408000340000000010800034000000001080003400000000480000640ae59b3e8dd92282b1450d70fabda51f19a434d045a146fef11c4a4929260d7e5c37a49ba59489af061b5b29525a231a3d4183c1d89f7ac72e35a134d987c84e2725a456db7d1f2dfe328cc00499250ffca0707a34319eb9200866b58356a3e89f44567d0665cdb973cf8d694581b43580d456d685e70e5be77c84aa3380202806000028008000180ffffffff08000340000000040900020073797a31000000000900020073797a30000000000900020073797a3000000000080003400000004008000340000000030900020073797a30000000000900020073797a3000000000ac000100ebff40d8583c3d6846be0cba35b713fc525e074f5d29c5df99872900fe2ec1b7209c334d412dfe754380933680406000c590504c6f8a80b106d660684ca9ecfdc9fea2cef823dc9a08338c12dbfcc31b0f3d33573dfeb07937f26103b0ba88bbbee67b059789adf1cc70ea25ee3fae588a6107241f05db14763dc9ec80f89f49158af9066a470fe8ef82db15e8c5864984aa97be6cdcacc3a419c966eed99e9aae453bdae8d11e962c0002800800034000000004080003400000000108000180fffffffc080003400000000208000180fffffffb0c0002800800034000000001ef0001006c8f3a1671e267cd96a08110641ea27f8628f3f946dac9aee8005e24aceb8e9e11a3cc9c6d4832c4d75cd05dc63e10d6bb67fd0bb519e44ccd4e0aa3c0d5958280ccd56ad827715d04e6ee164d4b4a0ebd3c40b28a6053daa5ce843a455778d9295689041089b451593ac1a347a59b5f61267d96c17c6a7ebe04d1d8dab0f5259789935800df32d19bbd137306e414f002b12d0728c614d9985a4991e359d7fe617eb7fffab4276da8489c6b0dfef45217b4769c2559cb5e8c910a426fc6815864e07e91793faca19092659c6d6b735365edfdbc17235faaacd02223453f869721778bb8308226ba3156c60044010280700001009a4228a12d393bdd83cbfd5ddbf710cc9ee8ccff1cb03048ac8e30dae4215966d3dfb089eb70e22e3a6c14f164476fbe63995c9069e9f2a7c0f2b4d745331b45e42e1ffda7f8271a371653b2905040a95e2b1b4d77cc02a4547460e85c7c3655a3b70d9b8dc4aebdac215ae8180002800900020073797a320000000008000340000000014800028008000340000000040900020073797a300000000008000340000000030900020073797a30000000000900020073797a3100000000080003400000000208000180fffffffe7000010063aca941563151c82eae8e865d7c18144dc928eacc19e211d14a0163659be03feaf0fd74909359400174fae110e0a24c1938ad3f45f0df30607a3b0b980e80b7a04a7bd99a08929b10ca5e9ed2891cc73cdb7e76b76c9d1cf3c09164c4b4c986fa2ddf17f5c8990d0edfb4020900090073797a000100ba5022a4de001dd72fb03c616fb9f8c9156a18ff2b3f0e8ab9230c8c4b95a485790de5f515910bc190c1039affce5f9d233a578eacf1e3503c334a4ee2a00b93e1d4b0dcbc235bc7244273e1032c17f5e11b46d9cafd521226b0608632bb31023649b8b7227cc60b907e032800d7fe4af21a9a01120b254e66eec0bb35ee943063d42f07be9e6a085f5126aa412949e6d8213d2b0faa5144a0b758ce5fef2af9051b81e9ed277a1e1063a3766ad22934350059f3b2f1d41265934486472a3a0fbaa83bebddfd91853da66f962f5a2f6279410000100002800900020073797a31000000004c0002800900020073797a310000000008000340000000030900020073797a30000000000900020073797a310000000008000340000000010900020073797a31000000000800034000000002910001001efd63a64425930b3e0b4538661c9156b680e7845c61436e450d01a645d9b850c09ce7bb5834327dd4c442ff8f1f1dbd5124af95515e6f2d3e6519c5aeca1bb9d819b9151e72fc240019edd2f21789287962f0d772658f2e51962f8325211b7ff0665fa5362da20200b627c5c1c8d170c1d61aecff2181e0e16ca676f7249bd974b9e57a05478dd0e28e743f100000005000028008000340000000040900020073797a32000000000800018000000000080003400000000208000180fffffffb08000180fffffffc080003400000000308000340000000010800034000000003240002800900020073797a310000000008000180ffffffff0900020073797a30000000006b0001004c5e71122d5c7c350da34733f1f976c21fba0e2d04e2f81c28054721b7dcd4fdf3d274a815c025f838cc082f855dcf81eaceabc76f5bfd432fa9ca66ee652cb6c98b440f972419bf4fe34319e386faccf63a89730ee887663d00442de17dd1ad3406ae867bf8de00400002800900020073797a300000000008000340000000030900020073797a32000000000900020073797a320000000008000180ffffffff0800034000000003ec000380e800008082000640f5588cfa7a4b8e5a5981490f22f205aff3579c4b974f55173ea044ec316876e20a7b0a26b2a048ba17a20fbc641b108f56fa4bdadbe2c1c29c27ff618f6b51a7d2bd2797f08fe3076533d94724f43242bd2b4ae2e346d4c1bb2f3aa0f99d2bc84fd7e38ecb4190d5bd8c2bc6f57c6125288028f344522edf57374f0ff3c300000c000440000000000000000548000780080001006f7366003c00028005000200050000000800014000000013"], 0x3518}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r7, r6, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00')
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
pread64(r9, &(0x7f0000002380)=""/253, 0xfd, 0x4eb)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000)

100.697971ms ago: executing program 1 (id=962):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0xc5}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000000}, 0x94)

100.322449ms ago: executing program 2 (id=963):
socket$inet6(0xa, 0x2, 0x0)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$loop(&(0x7f0000000200), 0x40, 0x200c81)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x10000000, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x7}], 0x1, 0x40000130, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$MSR(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))

13.705075ms ago: executing program 1 (id=964):
syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x3f, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

0s ago: executing program 3 (id=965):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})

kernel console output (not intermixed with test programs):

4: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  184.105225][ T2338] pvrusb2: Attached sub-driver cx25840
[  184.114147][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  184.124402][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  184.161320][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.170720][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.177876][ T5947] gspca_ov534_9: reg_w failed -71
[  184.287699][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  184.301810][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  184.312621][   T44] pwc: recv_control_msg error -32 req 02 val 2b00
[  184.339791][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  184.352341][   T44] pwc: recv_control_msg error -32 req 02 val 2700
[  184.360728][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.407651][ T7278] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  184.475027][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  184.482655][ T5947] gspca_ov534_9: Unknown sensor 0000
[  184.483525][ T5947] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  184.581333][   T44] pwc: recv_control_msg error -32 req 04 val 1000
[  184.658017][ T5947] usb 1-1: USB disconnect, device number 18
[  184.670250][   T44] pwc: recv_control_msg error -71 req 04 val 1300
[  184.694327][ T5931] usb 4-1: USB disconnect, device number 12
[  184.703986][   T44] pwc: recv_control_msg error -71 req 04 val 1400
[  185.017963][   T44] pwc: recv_control_msg error -71 req 02 val 2000
[  185.082348][   T44] pwc: recv_control_msg error -71 req 02 val 2100
[  185.157439][   T44] pwc: recv_control_msg error -71 req 04 val 1500
[  185.226005][   T44] pwc: recv_control_msg error -71 req 02 val 2500
[  185.302576][   T44] pwc: recv_control_msg error -71 req 02 val 2400
[  185.417235][ T5893] usb 2-1: USB disconnect, device number 13
[  185.438588][   T44] pwc: recv_control_msg error -71 req 02 val 2600
[  185.467226][   T30] audit: type=1400 audit(2000000014.130:394): avc:  denied  { write } for  pid=7277 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  185.578020][   T44] pwc: recv_control_msg error -71 req 02 val 2900
[  185.713972][   T44] pwc: recv_control_msg error -71 req 02 val 2800
[  185.878811][   T44] pwc: recv_control_msg error -71 req 04 val 1100
[  186.156359][   T44] pwc: recv_control_msg error -71 req 04 val 1200
[  186.485813][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.563409][   T44] pwc: Registered as video103.
[  186.781088][   T44] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  187.082333][   T44] usb 3-1: USB disconnect, device number 13
[  187.467050][ T7291] program syz.2.393 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.855355][ T5893] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  188.597139][ T5893] usb 2-1: device descriptor read/64, error -71
[  188.817743][ T7310] loop3: detected capacity change from 0 to 1
[  189.802706][ T7310] Dev loop3: unable to read RDB block 1
[  189.816117][ T7310]  loop3: unable to read partition table
[  189.832803][ T7310] loop3: partition table beyond EOD, truncated
[  189.852731][ T7310] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  189.906713][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.914996][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.918359][ T7322] binder: 7321:7322 unknown command 0
[  189.936925][   T30] audit: type=1400 audit(2000000018.750:395): avc:  denied  { connect } for  pid=7323 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  189.947496][ T7322] binder: 7321:7322 ioctl c0306201 200000000080 returned -22
[  189.973640][   T30] audit: type=1400 audit(2000000018.790:396): avc:  denied  { write } for  pid=7323 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  190.022174][ T7325] binder: 7321:7325 ioctl c0306201 0 returned -14
[  190.081148][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.092342][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.128112][ T7312] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.137242][ T7312] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.146119][ T7312] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.157278][ T7312] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.267327][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  190.717192][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  190.728576][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  190.753069][ T7335] netlink: 'syz.1.404': attribute type 21 has an invalid length.
[  190.809280][ T7336] overlay: Unknown parameter '/'
[  190.894930][ T7337] overlayfs: missing 'lowerdir'
[  191.277129][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  191.422963][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  191.513479][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  191.529093][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.539403][ T5914] usb 4-1: Product: syz
[  191.543663][ T5914] usb 4-1: Manufacturer: syz
[  191.557580][ T5914] usb 4-1: SerialNumber: syz
[  191.573252][ T5914] usb 4-1: config 0 descriptor??
[  191.600330][ T5914] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  191.610626][ T5931] usb 5-1: Using ep0 maxpacket: 32
[  191.627818][ T5931] usb 5-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config
[  191.645417][ T5914] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  191.655298][ T5931] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  191.680385][ T7349] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[  191.688693][ T5931] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  191.697958][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.705941][ T5931] usb 5-1: Product: syz
[  191.722582][ T5931] usb 5-1: Manufacturer: syz
[  191.727517][  T976] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  191.736430][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  191.745878][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  191.750709][ T5931] usb 5-1: SerialNumber: syz
[  191.754574][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  191.767965][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  191.778276][ T5931] usb 5-1: config 0 descriptor??
[  191.829459][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.054846][  T976] usb 1-1: Using ep0 maxpacket: 8
[  192.198658][  T976] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  192.218094][  T976] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  192.284635][  T976] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.295349][  T976] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  192.307076][  T976] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  192.321866][  T976] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  192.333819][  T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.055484][ T5914] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  193.067189][ T5914] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  193.100320][  T976] usb 1-1: usb_control_msg returned -32
[  193.112797][  T976] usbtmc 1-1:16.0: can't read capabilities
[  193.303472][ T7324] mac80211_hwsim hwsim3 `ëÿ: renamed from wlan1
[  193.321136][  T976] usb 5-1: USB disconnect, device number 11
[  193.373847][ T5914] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  193.390252][ T5914] em28xx 4-1:0.0: No AC97 audio processor
[  193.487136][ T5914] usb 4-1: USB disconnect, device number 13
[  193.517216][ T5914] em28xx 4-1:0.0: Disconnecting em28xx
[  193.560723][ T5914] em28xx 4-1:0.0: Freeing device
[  193.664806][   T30] audit: type=1400 audit(2000000022.420:397): avc:  denied  { connect } for  pid=7365 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  194.337172][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.344757][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.416406][ T5914] usb 1-1: USB disconnect, device number 19
[  194.557458][ T7374] binder: 7369:7374 unknown command 0
[  194.569916][ T7374] binder: 7369:7374 ioctl c0306201 200000000080 returned -22
[  194.615548][ T7373] binder: 7369:7373 ioctl c0306201 0 returned -14
[  194.725900][   T30] audit: type=1400 audit(2000000023.540:398): avc:  denied  { setopt } for  pid=7377 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  194.773088][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[  194.810309][ T7381] bridge_slave_1: left allmulticast mode
[  194.816040][ T7381] bridge_slave_1: left promiscuous mode
[  194.832242][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.904619][ T7381] bridge_slave_0: left allmulticast mode
[  194.915036][ T7381] bridge_slave_0: left promiscuous mode
[  194.921049][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.985170][ T7388] xt_l2tp: v2 doesn't support IP mode
[  195.148298][ T7397] overlayfs: missing 'lowerdir'
[  195.189219][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'.
[  195.248058][ T5947] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  195.332524][   T30] audit: type=1400 audit(2000000024.150:399): avc:  denied  { execute } for  pid=7385 comm="syz.1.421" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  195.504986][   T30] audit: type=1400 audit(2000000024.260:400): avc:  denied  { bind } for  pid=7407 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  195.525026][   T30] audit: type=1400 audit(2000000024.260:401): avc:  denied  { listen } for  pid=7407 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  195.556872][ T5947] usb 4-1: device descriptor read/64, error -71
[  195.818062][ T5947] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  196.227171][ T5947] usb 4-1: device descriptor read/64, error -71
[  196.381112][ T5947] usb usb4-port1: attempt power cycle
[  196.583026][ T7457] binder: 7456:7457 unknown command 0
[  196.612806][ T7457] binder: 7456:7457 ioctl c0306201 200000000080 returned -22
[  196.809871][ T5947] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  196.877735][ T5947] usb 4-1: device descriptor read/8, error -71
[  196.997370][ T7473] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  197.116962][ T5947] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  197.159963][ T5947] usb 4-1: device descriptor read/8, error -71
[  197.193218][   T30] audit: type=1400 audit(2000000026.010:402): avc:  denied  { mounton } for  pid=7472 comm="syz.4.434" path="/proc/312/task" dev="proc" ino=14278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  197.249301][   T30] audit: type=1400 audit(2000000026.060:403): avc:  denied  { ioctl } for  pid=7480 comm="syz.1.436" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  197.287220][ T5947] usb usb4-port1: unable to enumerate USB device
[  197.526878][ T5914] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  197.697426][ T5914] usb 5-1: Using ep0 maxpacket: 32
[  197.703871][ T5914] usb 5-1: config 0 has no interfaces?
[  197.710529][ T5914] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  197.722900][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.739390][ T5914] usb 5-1: config 0 descriptor??
[  197.756966][  T975] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  197.919800][  T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.380754][  T975] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  198.393119][  T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.405660][  T975] usb 1-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0
[  198.413936][   T30] audit: type=1400 audit(2000000027.230:404): avc:  denied  { setopt } for  pid=7472 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  198.419644][   T44] usb 5-1: USB disconnect, device number 12
[  198.436847][  T975] usb 1-1: Product: syz
[  198.474196][  T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  198.482164][   T30] audit: type=1400 audit(2000000027.230:405): avc:  denied  { write } for  pid=7472 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  198.509642][  T975] usb 1-1: invalid MIDI out EP 0
[  198.530640][   T30] audit: type=1400 audit(2000000027.230:406): avc:  denied  { read } for  pid=7472 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  198.578685][  T975] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  198.633385][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.793869][  T975] hid (null): global environment stack underflow
[  198.836818][ T7500] binder: 7499:7500 ioctl c0306201 0 returned -14
[  199.104920][ T5947] usb 1-1: USB disconnect, device number 20
[  199.109105][  T975] hid-generic 0000:FFFFF87C:0007.0009: global environment stack underflow
[  199.163462][  T975] hid-generic 0000:FFFFF87C:0007.0009: item 0 2 1 11 parsing failed
[  199.172752][   T30] audit: type=1400 audit(2000000027.980:407): avc:  denied  { create } for  pid=7508 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  199.199296][  T975] hid-generic 0000:FFFFF87C:0007.0009: probe with driver hid-generic failed with error -22
[  200.589502][ T7523] netlink: 'syz.1.449': attribute type 4 has an invalid length.
[  200.609256][ T7523] netlink: 152 bytes leftover after parsing attributes in process `syz.1.449'.
[  201.392207][ T7532] evm: overlay not supported
[  201.410634][ T7532] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.663353][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.455'.
[  201.799929][ T7546] binder: 7545:7546 ioctl c0306201 0 returned -14
[  202.590448][ T7533] comedi comedi3: reset error (fatal)
[  203.502888][ T7563] binder: 7562:7563 unknown command 0
[  203.509810][ T7563] binder: 7562:7563 ioctl c0306201 200000000080 returned -22
[  203.656962][ T7567] netlink: 'syz.4.462': attribute type 4 has an invalid length.
[  203.664718][ T7567] netlink: 152 bytes leftover after parsing attributes in process `syz.4.462'.
[  204.240054][  T975] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  204.604636][  T976] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  204.612327][  T975] usb 3-1: Using ep0 maxpacket: 32
[  204.625522][  T975] usb 3-1: config 2 has an invalid interface number: 173 but max is 0
[  204.644156][  T975] usb 3-1: config 2 has no interface number 0
[  204.774034][  T975] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a
[  204.783438][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.802056][  T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.813922][  T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.823688][  T975] usb 3-1: Product: syz
[  204.829456][  T975] usb 3-1: Manufacturer: syz
[  204.834315][  T975] usb 3-1: SerialNumber: syz
[  204.847227][  T976] usb 5-1: string descriptor 0 read error: -22
[  204.883374][  T976] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  204.895958][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.928669][  T976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  204.942086][  T976] usb 5-1: MIDIStreaming interface descriptor not found
[  205.155926][  T976] usb 5-1: USB disconnect, device number 13
[  205.193459][ T7569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.463'.
[  205.234002][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.468'.
[  206.150386][  T975] option 3-1:2.173: GSM modem (1-port) converter detected
[  206.217633][ T7592] binder: 7591:7592 ioctl c0306201 0 returned -14
[  206.221978][  T975] usb 3-1: USB disconnect, device number 14
[  206.278905][  T975] option 3-1:2.173: device disconnected
[  207.027186][ T7598] program syz.0.471 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  207.905254][ T7615] binder: 7609:7615 unknown command 0
[  207.934038][ T7615] binder: 7609:7615 ioctl c0306201 200000000080 returned -22
[  208.287431][ T7619] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[  208.295293][ T7619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.475'.
[  208.594742][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'.
[  208.669663][ T7622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.477'.
[  209.209582][   T30] audit: type=1400 audit(2000000038.020:408): avc:  denied  { bind } for  pid=7630 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  209.252738][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'.
[  209.290274][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'.
[  209.362832][ T7631] bridge_slave_1 (unregistering): left allmulticast mode
[  209.377012][ T7631] bridge_slave_1 (unregistering): left promiscuous mode
[  209.384556][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.844983][ T7641] program syz.3.485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.391885][ T7655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.488'.
[  211.440787][   T30] audit: type=1400 audit(2000000040.260:409): avc:  denied  { append } for  pid=7654 comm="syz.0.488" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  211.647050][  T975] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  211.847402][  T975] usb 4-1: Using ep0 maxpacket: 16
[  211.868516][  T975] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.891810][  T975] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.925731][  T975] usb 4-1: config 0 interface 0 has no altsetting 0
[  211.940389][  T975] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  211.957842][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.968509][  T975] usb 4-1: config 0 descriptor??
[  212.031479][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'.
[  212.057110][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  212.074138][   T30] audit: type=1400 audit(2000000040.890:410): avc:  denied  { bind } for  pid=7665 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  212.103414][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.115893][ T7667] bond0: (slave rose0): Enslaving as an active interface with an up link
[  212.144785][   T30] audit: type=1400 audit(2000000040.950:411): avc:  denied  { read } for  pid=7665 comm="syz.1.492" path="socket:[14631]" dev="sockfs" ino=14631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  212.225287][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  212.257958][ T5914] usb 3-1: config 162 has an invalid interface number: 251 but max is 1
[  212.386869][ T5914] usb 3-1: config 162 has an invalid interface number: 209 but max is 1
[  212.397619][   T30] audit: type=1400 audit(2000000040.950:412): avc:  denied  { write } for  pid=7665 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  212.434830][   T30] audit: type=1400 audit(2000000040.990:413): avc:  denied  { bind } for  pid=7666 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  212.461574][   T30] audit: type=1400 audit(2000000041.140:414): avc:  denied  { search } for  pid=7671 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.493123][  T975] holtek_kbd 0003:04D9:A055.000A: item fetching failed at offset 0/4
[  212.510476][   T30] audit: type=1400 audit(2000000041.140:415): avc:  denied  { search } for  pid=7671 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.543523][ T5914] usb 3-1: config 162 has no interface number 0
[  212.551059][  T975] holtek_kbd 0003:04D9:A055.000A: probe with driver holtek_kbd failed with error -22
[  212.560866][ T5914] usb 3-1: config 162 has no interface number 1
[  212.579950][ T5914] usb 3-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  212.624125][ T5914] usb 3-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  212.649716][ T5914] usb 3-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  212.666690][   T30] audit: type=1400 audit(2000000041.140:416): avc:  denied  { search } for  pid=7671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.862354][   T30] audit: type=1400 audit(2000000041.140:417): avc:  denied  { search } for  pid=7671 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.930762][ T5914] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  212.970946][ T5914] usb 3-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  212.986880][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'.
[  213.180813][ T5914] usb 3-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  213.267286][ T5914] usb 3-1: config 162 interface 251 has no altsetting 0
[  213.287140][ T5914] usb 3-1: config 162 interface 209 has no altsetting 0
[  213.314839][ T5914] usb 3-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  213.327499][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.354016][ T5914] usb 3-1: Product: syz
[  213.369039][ T5914] usb 3-1: Manufacturer: syz
[  213.386063][ T5914] usb 3-1: SerialNumber: syz
[  213.651341][ T5914] io_edgeport 3-1:162.251: required endpoints missing
[  213.723118][ T7699] program syz.0.499 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.482675][ T5914] io_edgeport 3-1:162.209: Edgeport 2 port adapter converter detected
[  215.171481][   T44] usb 4-1: USB disconnect, device number 18
[  215.185062][ T5914] usb 3-1: у  detected
[  215.228741][ T5914] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  215.343076][ T5914] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  216.153896][   T44] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  216.193378][    C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb
[  216.210821][ T5914] usb 3-1: USB disconnect, device number 15
[  217.550355][ T5914] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  217.632719][ T5914] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  217.666884][   T44] usb 4-1: device descriptor read/64, error -71
[  217.688165][ T5914] io_edgeport 3-1:162.209: device disconnected
[  217.927315][ T7736] sctp: [Deprecated]: syz.1.504 (pid 7736) Use of int in max_burst socket option.
[  217.927315][ T7736] Use struct sctp_assoc_value instead
[  217.988610][   T44] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  218.227577][   T44] usb 4-1: device descriptor read/64, error -71
[  218.648566][   T44] usb usb4-port1: attempt power cycle
[  219.031621][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  219.031635][   T30] audit: type=1400 audit(2000000047.850:431): avc:  denied  { read append } for  pid=7749 comm="syz.3.508" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  219.062014][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.124226][   T30] audit: type=1400 audit(2000000047.900:432): avc:  denied  { open } for  pid=7749 comm="syz.3.508" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  219.200837][ T7758] netlink: 60 bytes leftover after parsing attributes in process `syz.4.507'.
[  219.250425][ T7732] overlayfs: conflicting lowerdir path
[  220.158331][ T7748] comedi comedi3: reset error (fatal)
[  220.447808][   T44] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  220.611087][   T44] usb 4-1: unable to get BOS descriptor or descriptor too short
[  220.633661][   T44] usb 4-1: not running at top speed; connect to a high speed hub
[  220.653438][   T44] usb 4-1: config 4 has an invalid interface number: 72 but max is 0
[  220.666855][   T44] usb 4-1: config 4 has no interface number 0
[  220.678180][   T44] usb 4-1: config 4 interface 72 has no altsetting 0
[  220.698993][   T44] usb 4-1: string descriptor 0 read error: -22
[  220.705978][   T44] usb 4-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=7a.2b
[  220.756956][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.824984][   T44] mos7840 4-1:4.72: required endpoints missing
[  221.393095][   T30] audit: type=1400 audit(2000000050.210:433): avc:  denied  { setopt } for  pid=7785 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  221.432522][ T7789] netlink: 96 bytes leftover after parsing attributes in process `syz.0.513'.
[  221.770436][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'.
[  221.826937][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'.
[  222.174671][   T44] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  223.880185][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'.
[  223.968682][ T5893] usb 4-1: USB disconnect, device number 22
[  224.054683][ T7805] binder: 7803:7805 unknown command 0
[  224.061482][ T7805] binder: 7803:7805 ioctl c0306201 200000000080 returned -22
[  224.109256][ T7805] binder: 7803:7805 ioctl c0306201 0 returned -14
[  224.125416][   T44] usb 3-1: Using ep0 maxpacket: 16
[  224.142280][   T44] usb 3-1: config 8 has an invalid interface number: 146 but max is 0
[  224.252143][   T44] usb 3-1: config 8 has an invalid descriptor of length 33, skipping remainder of the config
[  224.263624][   T44] usb 3-1: config 8 has no interface number 0
[  224.270875][   T44] usb 3-1: config 8 interface 146 has no altsetting 0
[  224.282256][   T44] usb 3-1: New USB device found, idVendor=413c, idProduct=81e6, bcdDevice=7a.52
[  224.297239][ T5947] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  224.312301][   T30] audit: type=1400 audit(2000000053.120:434): avc:  denied  { getopt } for  pid=7807 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  224.317128][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.348979][   T44] usb 3-1: Product: syz
[  224.353396][   T44] usb 3-1: Manufacturer: syz
[  224.359856][   T44] usb 3-1: SerialNumber: syz
[  224.487456][ T5947] usb 2-1: device descriptor read/64, error -71
[  224.593702][   T44] usb 3-1: bad CDC descriptors
[  224.624123][   T44] option 3-1:8.146: GSM modem (1-port) converter detected
[  224.693231][ T7814] netlink: 'syz.2.523': attribute type 10 has an invalid length.
[  224.717636][ T7814] 8021q: adding VLAN 0 to HW filter on device team0
[  224.720154][   T44] usb 3-1: USB disconnect, device number 16
[  224.730313][ T7814] : (slave team0): Enslaving as an active interface with an up link
[  224.754085][ T5947] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  224.824805][   T44] option 3-1:8.146: device disconnected
[  224.947001][ T5947] usb 2-1: device descriptor read/64, error -71
[  225.072041][ T5947] usb usb2-port1: attempt power cycle
[  225.980934][   T30] audit: type=1400 audit(2000000054.800:435): avc:  denied  { connect } for  pid=7820 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  226.656989][ T5947] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  226.733879][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  226.801458][ T5947] usb 2-1: config 2 has an invalid interface number: 173 but max is 0
[  226.825037][ T5947] usb 2-1: config 2 has no interface number 0
[  227.068039][ T5947] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a
[  227.081201][ T5914] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  227.087270][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.091713][ T7841] binder: 7840:7841 unknown command 0
[  227.107518][ T5947] usb 2-1: Product: syz
[  227.111739][ T5947] usb 2-1: Manufacturer: syz
[  227.131903][ T5947] usb 2-1: SerialNumber: syz
[  227.136842][ T7841] binder: 7840:7841 ioctl c0306201 200000000080 returned -22
[  227.424983][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  227.435632][ T5914] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  227.445680][ T5914] usb 4-1: config 0 has no interface number 0
[  227.454115][ T5914] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  227.470556][ T5914] usb 4-1: config 0 interface 85 has no altsetting 0
[  227.491536][ T7841] binder: 7840:7841 ioctl c0306201 0 returned -14
[  227.501519][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  227.511032][ T5931] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  227.521460][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.536309][ T5914] usb 4-1: Product: syz
[  227.542577][ T5914] usb 4-1: Manufacturer: syz
[  227.547365][ T5914] usb 4-1: SerialNumber: syz
[  227.560982][ T5914] usb 4-1: config 0 descriptor??
[  227.602558][ T7835] netlink: 'syz.4.530': attribute type 4 has an invalid length.
[  227.610339][ T7835] netlink: 152 bytes leftover after parsing attributes in process `syz.4.530'.
[  227.658743][ T5947] option 2-1:2.173: GSM modem (1-port) converter detected
[  227.667338][ T5931] usb 1-1: Using ep0 maxpacket: 16
[  227.680253][ T5931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.708003][ T5947] usb 2-1: USB disconnect, device number 18
[  227.724378][ T5931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.744483][ T5947] option 2-1:2.173: device disconnected
[  227.761801][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0
[  227.786557][ T7847] netlink: 96 bytes leftover after parsing attributes in process `syz.2.534'.
[  227.801192][ T5931] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  227.814724][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.830581][ T7849] Bluetooth: MGMT ver 1.23
[  227.832856][ T5931] usb 1-1: config 0 descriptor??
[  227.842419][ T7849] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  227.950641][ T7851] FAULT_INJECTION: forcing a failure.
[  227.950641][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  227.965743][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.4.536 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  227.965771][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  227.965782][ T7851] Call Trace:
[  227.965789][ T7851]  <TASK>
[  227.965796][ T7851]  dump_stack_lvl+0x16c/0x1f0
[  227.965832][ T7851]  should_fail_ex+0x512/0x640
[  227.965868][ T7851]  _copy_from_user+0x2e/0xd0
[  227.965886][ T7851]  copy_msghdr_from_user+0x98/0x160
[  227.965915][ T7851]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  227.965948][ T7851]  ? __pfx__kstrtoull+0x10/0x10
[  227.965977][ T7851]  ___sys_sendmsg+0xfe/0x1d0
[  227.966005][ T7851]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.966046][ T7851]  ? find_held_lock+0x2b/0x80
[  227.966088][ T7851]  __sys_sendmmsg+0x200/0x420
[  227.966119][ T7851]  ? __pfx___sys_sendmmsg+0x10/0x10
[  227.966156][ T7851]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.966187][ T7851]  ? fput+0x70/0xf0
[  227.966207][ T7851]  ? ksys_write+0x1ac/0x250
[  227.966232][ T7851]  ? __pfx_ksys_write+0x10/0x10
[  227.966263][ T7851]  __x64_sys_sendmmsg+0x9c/0x100
[  227.966278][ T7851]  ? lockdep_hardirqs_on+0x7c/0x110
[  227.966309][ T7851]  do_syscall_64+0xcd/0x4c0
[  227.966326][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.966343][ T7851] RIP: 0033:0x7ff1c538e929
[  227.966358][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.966374][ T7851] RSP: 002b:00007ff1c612e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  227.966391][ T7851] RAX: ffffffffffffffda RBX: 00007ff1c55b5fa0 RCX: 00007ff1c538e929
[  227.966402][ T7851] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003
[  227.966412][ T7851] RBP: 00007ff1c612e090 R08: 0000000000000000 R09: 0000000000000000
[  227.966421][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.966431][ T7851] R13: 0000000000000000 R14: 00007ff1c55b5fa0 R15: 00007ffcdf98d4d8
[  227.966453][ T7851]  </TASK>
[  227.977931][ T7837] netlink: 'syz.3.531': attribute type 4 has an invalid length.
[  228.157771][   T30] audit: type=1400 audit(2000000056.980:436): avc:  denied  { append } for  pid=7836 comm="syz.3.531" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  228.525075][ T5914] appletouch 4-1:0.85: Geyser mode initialized.
[  228.534435][ T5931] holtek_kbd 0003:04D9:A055.000B: item fetching failed at offset 0/4
[  228.544013][ T5931] holtek_kbd 0003:04D9:A055.000B: probe with driver holtek_kbd failed with error -22
[  228.644883][ T5914] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input25
[  228.664899][   T30] audit: type=1400 audit(2000000057.080:437): avc:  denied  { create } for  pid=7854 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  228.690482][   T30] audit: type=1400 audit(2000000057.110:438): avc:  denied  { write } for  pid=7854 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  228.763824][ T5931] usb 4-1: USB disconnect, device number 23
[  228.797880][ T5931] appletouch 4-1:0.85: input: appletouch disconnected
[  229.106857][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  229.256830][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  229.404339][ T5914] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  229.441393][ T5914] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  229.482625][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=1ddd, bcdDevice=ff.f4
[  229.508015][ T5914] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  229.556948][ T5914] usb 2-1: Product: syz
[  229.596152][ T5914] usb 2-1: Manufacturer: syz
[  229.613016][ T5914] usb 2-1: SerialNumber: syz
[  229.631209][ T5914] usb 2-1: config 0 descriptor??
[  229.919846][ T5914] usb 2-1: USB disconnect, device number 19
[  229.979965][ T7865] comedi comedi3: reset error (fatal)
[  230.075852][   T30] audit: type=1400 audit(2000000058.890:439): avc:  denied  { create } for  pid=7872 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  230.096517][   T30] audit: type=1400 audit(2000000058.890:440): avc:  denied  { read } for  pid=7872 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  230.155270][ T7874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.542'.
[  230.273926][ T5947] usb 1-1: USB disconnect, device number 21
[  230.569839][ T7877] netlink: 'syz.0.543': attribute type 4 has an invalid length.
[  230.577645][ T7877] netlink: 152 bytes leftover after parsing attributes in process `syz.0.543'.
[  230.686517][ T7879] binder: 7878:7879 unknown command 0
[  230.700511][ T7879] binder: 7878:7879 ioctl c0306201 200000000080 returned -22
[  230.920756][ T7885] program syz.1.547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.022150][   T30] audit: type=1400 audit(2000000060.840:441): avc:  denied  { module_request } for  pid=7899 comm="syz.4.549" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  232.049202][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[  232.106994][ T5931] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  232.292141][ T5931] usb 4-1: Using ep0 maxpacket: 32
[  232.556473][ T5931] usb 4-1: config 2 has an invalid interface number: 173 but max is 0
[  232.572330][ T5931] usb 4-1: config 2 has no interface number 0
[  232.595098][ T5931] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a
[  232.604692][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.616723][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.552'.
[  232.632346][ T5931] usb 4-1: Product: syz
[  232.647577][ T5931] usb 4-1: Manufacturer: syz
[  232.655632][ T5931] usb 4-1: SerialNumber: syz
[  232.672209][ T7916] netlink: 'syz.2.554': attribute type 10 has an invalid length.
[  232.687763][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  232.866817][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  232.889584][ T5931] option 4-1:2.173: GSM modem (1-port) converter detected
[  232.915567][ T5914] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  232.989308][ T5931] usb 4-1: USB disconnect, device number 24
[  232.997002][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.024089][ T5931] option 4-1:2.173: device disconnected
[  233.054555][ T5914] usb 2-1: config 0 has no interface number 0
[  233.093100][ T5914] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  233.129992][ T5914] usb 2-1: config 0 interface 85 has no altsetting 0
[  233.151604][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  233.160948][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.169366][ T5914] usb 2-1: Product: syz
[  233.174105][ T5914] usb 2-1: Manufacturer: syz
[  233.185561][ T5914] usb 2-1: SerialNumber: syz
[  233.198340][ T5914] usb 2-1: config 0 descriptor??
[  233.302062][ T7929] binder: 7928:7929 unknown command 0
[  233.314403][ T7929] binder: 7928:7929 ioctl c0306201 200000000080 returned -22
[  233.564057][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  233.649859][   T30] audit: type=1400 audit(2000000062.470:442): avc:  denied  { setopt } for  pid=7930 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  234.233873][ T7944] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  234.398048][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.423202][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.874816][ T7957] kernel profiling enabled (shift: 9)
[  235.003961][ T7961] netlink: 'syz.2.565': attribute type 10 has an invalid length.
[  235.546563][ T7969] binder: 7968:7969 unknown command 0
[  235.573488][ T7969] binder: 7968:7969 ioctl c0306201 200000000080 returned -22
[  235.907527][ T5914] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  235.940410][ T5931] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  236.157168][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  236.178412][ T5914] usb 4-1: config 2 has an invalid interface number: 173 but max is 0
[  236.199707][ T5914] usb 4-1: config 2 has no interface number 0
[  236.216820][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  236.226023][ T5914] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a
[  236.257187][ T5931] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  236.266682][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.275595][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.301746][ T5914] usb 4-1: Product: syz
[  236.306530][ T5931] usb 1-1: Product: syz
[  236.311232][ T5914] usb 4-1: Manufacturer: syz
[  236.316212][ T5931] usb 1-1: Manufacturer: syz
[  236.326865][ T5914] usb 4-1: SerialNumber: syz
[  236.341147][ T5931] usb 1-1: SerialNumber: syz
[  236.405849][ T5931] usb 1-1: config 0 descriptor??
[  236.417005][ T5947] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  236.427382][ T5893] usb 2-1: USB disconnect, device number 20
[  236.441146][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  236.522147][ T7992] bond_slave_0: entered promiscuous mode
[  236.550710][ T7992] bond_slave_0: left promiscuous mode
[  236.561674][ T7994] program syz.1.575 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.591382][ T5914] option 4-1:2.173: GSM modem (1-port) converter detected
[  236.679584][ T5947] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.690392][ T5914] usb 4-1: USB disconnect, device number 25
[  236.786032][ T5914] option 4-1:2.173: device disconnected
[  237.553194][ T5947] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  237.563308][ T5947] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  237.573070][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.575658][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.606706][ T7979] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  237.638718][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.663026][ T5947] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  237.986890][ T5931] gspca_ov534_9: reg_w failed -110
[  238.002127][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.577'.
[  238.249373][ T5947] usb 3-1: USB disconnect, device number 17
[  238.386843][ T5931] gspca_ov534_9: Unknown sensor 0000
[  238.386946][ T5931] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  239.025161][ T5931] usb 1-1: USB disconnect, device number 22
[  239.201420][ T8025] binder: 8023:8025 unknown command 0
[  239.234791][ T8025] binder: 8023:8025 ioctl c0306201 200000000080 returned -22
[  239.880910][ T8028] netlink: 'syz.3.583': attribute type 4 has an invalid length.
[  239.888910][ T8028] netlink: 152 bytes leftover after parsing attributes in process `syz.3.583'.
[  239.931481][ T8037] netlink: 'syz.4.585': attribute type 1 has an invalid length.
[  239.963952][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.426932][ T5914] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  240.587290][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  240.707006][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  240.869094][ T8053] netlink: 'syz.2.589': attribute type 10 has an invalid length.
[  240.957153][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  240.972734][ T5914] usb 4-1: config 2 has an invalid interface number: 173 but max is 0
[  241.125147][ T5914] usb 4-1: config 2 has no interface number 0
[  241.248984][ T5914] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=42.1a
[  241.259676][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.288101][ T5931] usb 5-1: device descriptor read/64, error -32
[  241.301058][ T5914] usb 4-1: Product: syz
[  241.305290][ T5914] usb 4-1: Manufacturer: syz
[  241.320643][ T5914] usb 4-1: SerialNumber: syz
[  241.420168][ T8055] tipc: Started in network mode
[  241.430246][ T8055] tipc: Node identity ba3337e426ba, cluster identity 4711
[  241.440596][ T8055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.449204][ T8055] syzkaller0: entered promiscuous mode
[  241.454805][ T8055] syzkaller0: entered allmulticast mode
[  241.516594][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[  241.556980][ T5931] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  241.580630][ T5914] option 4-1:2.173: GSM modem (1-port) converter detected
[  241.629114][ T5914] usb 4-1: USB disconnect, device number 26
[  241.658916][ T5914] option 4-1:2.173: device disconnected
[  242.156863][ T5931] usb 5-1: Using ep0 maxpacket: 32
[  242.166380][ T5931] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  242.177430][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.185536][ T5931] usb 5-1: Product: syz
[  242.191076][ T5931] usb 5-1: Manufacturer: syz
[  242.196495][ T8054] tipc: Resetting bearer <eth:syzkaller0>
[  242.221930][ T8054] tipc: Disabling bearer <eth:syzkaller0>
[  242.237023][ T5931] usb 5-1: SerialNumber: syz
[  242.244781][ T5931] usb 5-1: config 0 descriptor??
[  242.253834][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  242.277253][ T8069] binder: 8068:8069 unknown command 0
[  242.283828][ T8069] binder: 8068:8069 ioctl c0306201 200000000080 returned -22
[  242.892953][ T8071] netlink: 'syz.3.598': attribute type 4 has an invalid length.
[  242.902732][ T8071] netlink: 152 bytes leftover after parsing attributes in process `syz.3.598'.
[  243.514012][ T5931] gspca_ov534_9: reg_w failed -110
[  243.637725][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'.
[  243.781903][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.601'.
[  243.986852][ T5931] gspca_ov534_9: Unknown sensor 0000
[  243.986937][ T5931] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  244.363399][ T5931] usb 5-1: USB disconnect, device number 15
[  244.957060][ T5931] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  245.137287][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  245.421157][ T5931] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.444301][ T8110] program syz.0.609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.454260][ T5931] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.506889][ T5947] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  245.531349][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.610'.
[  246.254139][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0
[  246.260969][ T5931] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  246.270311][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.284859][ T5931] usb 2-1: config 0 descriptor??
[  246.362139][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.906983][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.022423][ T5947] usb 5-1: string descriptor 0 read error: -22
[  247.054692][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.073696][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.236130][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  247.244301][ T5947] usb 5-1: MIDIStreaming interface descriptor not found
[  247.289989][ T5931] holtek_kbd 0003:04D9:A055.000C: item fetching failed at offset 0/4
[  247.299964][ T5931] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22
[  247.375565][ T8127] erspan0: left allmulticast mode
[  247.865996][ T5947] usb 5-1: USB disconnect, device number 16
[  248.078382][   T44] libceph: connect (1)[c::]:6789 error -101
[  248.087682][   T44] libceph: mon0 (1)[c::]:6789 connect error
[  248.125923][ T5893] libceph: connect (1)[c::]:6789 error -101
[  248.135128][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  248.398741][ T5931] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  248.427402][   T44] libceph: connect (1)[c::]:6789 error -101
[  248.433673][   T44] libceph: mon0 (1)[c::]:6789 connect error
[  248.460933][ T5893] libceph: connect (1)[c::]:6789 error -101
[  248.474504][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  248.491638][ T8142] program syz.3.618 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.719922][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  248.781552][ T5893] libceph: connect (1)[c::]:6789 error -101
[  248.890176][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  248.972329][ T5931] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  248.981888][ T5893] libceph: connect (1)[c::]:6789 error -101
[  248.986868][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.995909][ T5931] usb 1-1: Product: syz
[  249.000615][ T5931] usb 1-1: Manufacturer: syz
[  249.005270][ T5931] usb 1-1: SerialNumber: syz
[  249.008858][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  249.029573][ T5931] usb 1-1: config 0 descriptor??
[  249.043709][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  249.088433][ T8133] ceph: No mds server is up or the cluster is laggy
[  249.095569][ T8136] ceph: No mds server is up or the cluster is laggy
[  249.429581][ T5893] usb 2-1: USB disconnect, device number 21
[  249.607470][ T5914] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  250.031752][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  250.031852][ T5914] usb 5-1: config 0 has no interface number 0
[  250.031908][ T5914] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  250.031934][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.056217][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.056650][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.070508][ T5914] usb 5-1: config 0 descriptor??
[  250.082580][ T5914] usb 5-1: selecting invalid altsetting 1
[  250.147905][ T5914] dvb_ttusb_budget: ttusb_init_controller: error
[  250.147925][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  250.266939][ T5931] gspca_ov534_9: reg_w failed -71
[  250.322466][ T5914] DVB: Unable to find symbol cx22700_attach()
[  250.365827][ T8164] program syz.2.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  250.585262][ T8165] input: syz1 as /devices/virtual/input/input26
[  250.606867][ T5931] gspca_ov534_9: Unknown sensor 0000
[  250.606973][ T5931] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  251.245122][ T5914] DVB: Unable to find symbol tda10046_attach()
[  251.260796][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  251.275296][ T5931] usb 1-1: USB disconnect, device number 23
[  252.023029][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[  252.090642][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'.
[  252.101074][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'.
[  252.297535][   T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  252.557045][ T5931] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  252.678371][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.696859][   T44] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  252.705973][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.724670][ T5931] usb 3-1: config index 0 descriptor too short (expected 8192, got 36)
[  252.746726][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.761324][   T44] usb 1-1: config 0 descriptor??
[  252.774716][ T5931] usb 3-1: config 0 has no interfaces?
[  252.786185][ T5931] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  252.806072][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.819879][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  252.824170][ T5931] usb 3-1: config 0 descriptor??
[  252.886433][ T5947] usb 5-1: USB disconnect, device number 17
[  252.981557][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.994409][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.007879][ T5893] usb 2-1: config 1 interface 1 has no altsetting 1
[  253.029508][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.047150][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.073629][ T5893] usb 2-1: Product: syz
[  253.088094][ T5893] usb 2-1: Manufacturer: syz
[  253.093450][ T5893] usb 2-1: SerialNumber: syz
[  253.104736][ T5931] usb 3-1: USB disconnect, device number 18
[  253.134688][ T5893] usb 2-1: selecting invalid altsetting 1
[  253.167398][ T8195] mkiss: ax0: crc mode is auto.
[  253.200395][   T44] waltop 0003:172F:0500.000D: unknown main item tag 0x0
[  253.234212][   T44] waltop 0003:172F:0500.000D: item fetching failed at offset 3/5
[  253.256642][   T44] waltop 0003:172F:0500.000D: probe with driver waltop failed with error -22
[  253.403520][ T8196] syz.3.635: attempt to access beyond end of device
[  253.403520][ T8196] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0
[  253.417745][ T8196] qnx6: unable to read the first superblock
[  253.424006][ T8196] syz.3.635: attempt to access beyond end of device
[  253.424006][ T8196] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  253.436932][ T8196] qnx6: unable to read the first superblock
[  253.442867][ T8196] qnx6: unable to read the first superblock
[  253.514453][   T30] audit: type=1400 audit(2000000082.320:443): avc:  denied  { map } for  pid=8194 comm="syz.3.635" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  253.552190][ T5893] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  253.575831][ T5893] cdc_ncm 2-1:1.0: bind() failure
[  253.578530][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.591199][ T5893] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  253.601691][ T5893] cdc_ncm 2-1:1.1: bind() failure
[  253.606880][   T30] audit: type=1400 audit(2000000082.320:444): avc:  denied  { execute } for  pid=8194 comm="syz.3.635" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  253.612836][ T5893] usb 2-1: USB disconnect, device number 22
[  253.644123][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.682006][ T5931] usb 1-1: USB disconnect, device number 24
[  253.696176][   T30] audit: type=1400 audit(2000000082.500:445): avc:  denied  { setopt } for  pid=8183 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  253.745435][ T8201] program syz.1.636 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.647779][   T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  256.560264][   T30] audit: type=1400 audit(2000000084.300:446): avc:  denied  { connect } for  pid=8216 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.560408][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  256.614669][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.719200][   T44] usb 5-1: device descriptor read/64, error -32
[  257.225505][   T44] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  258.005318][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.049913][   T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  258.225667][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.378706][   T44] usb 5-1: config 0 descriptor??
[  258.404875][   T44] pwc: Askey VC010 type 2 USB webcam detected.
[  258.416978][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  258.480282][   T44] pwc: send_video_command error -71
[  258.485600][   T44] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  258.530263][   T44] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  258.575295][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'.
[  258.586320][ T8247] program syz.0.651 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.595750][ T5931] usb 3-1: Using ep0 maxpacket: 8
[  258.613595][ T8250] tmpfs: Unknown parameter 'grpquKta_block_hardlim'
[  258.632448][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  258.646598][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'.
[  258.658714][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  258.668168][   T44] usb 5-1: USB disconnect, device number 19
[  258.691303][ T8250] netlink: 'syz.1.650': attribute type 10 has an invalid length.
[  258.732067][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  258.827896][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  258.865563][ T8253] capability: warning: `syz.0.653' uses 32-bit capabilities (legacy support in use)
[  259.059416][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  259.063292][ T8250] 8021q: adding VLAN 0 to HW filter on device team0
[  259.096419][ T5931] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  259.110849][ T8250] : (slave team0): Enslaving as an active interface with an up link
[  259.159531][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.366688][ T5931] usb 3-1: config 0 descriptor??
[  259.428964][ T8240] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  259.857721][ T8260] netlink: 92 bytes leftover after parsing attributes in process `syz.0.655'.
[  259.877764][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  259.884025][ T5931] usb 3-1: USB disconnect, device number 19
[  259.920156][ T8257] 9pnet_fd: p9_fd_create_tcp (8257): problem connecting socket to 127.0.0.1
[  260.179341][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'.
[  260.202159][ T8268] bridge_slave_1: left allmulticast mode
[  260.211139][ T8268] bridge_slave_1: left promiscuous mode
[  260.217576][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.230378][ T8268] bridge_slave_0: left allmulticast mode
[  260.236380][ T8268] bridge_slave_0: left promiscuous mode
[  260.242961][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.327080][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  260.650541][ T5914] usb 1-1: Using ep0 maxpacket: 8
[  261.227993][ T5914] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  261.236723][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  261.266667][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  261.305992][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  261.317243][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  261.330426][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  261.345766][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  261.361301][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  261.372294][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.534624][ T5931] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  262.055955][ T8289] overlay: Unknown parameter '/'
[  262.107031][ T8289] overlayfs: missing 'lowerdir'
[  262.220451][ T5914] usb 1-1: usb_control_msg returned -32
[  262.463327][ T5914] usbtmc 1-1:16.0: can't read capabilities
[  262.591043][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  262.605169][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  262.605205][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  262.632617][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  262.632656][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.632678][ T5931] usb 2-1: Product: syz
[  262.632695][ T5931] usb 2-1: Manufacturer: syz
[  262.632711][ T5931] usb 2-1: SerialNumber: syz
[  262.635571][ T5931] usb 2-1: config 0 descriptor??
[  262.639865][ T5931] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  262.639903][ T5931] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  262.698920][ T8294] program syz.3.667 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.760301][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.789025][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.810357][  T916] usb 1-1: USB disconnect, device number 25
[  263.836827][ T5931] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  263.846313][ T5931] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  263.863352][ T5931] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  263.872097][ T5931] em28xx 2-1:0.0: No AC97 audio processor
[  264.030825][ T8307] netlink: 'syz.3.669': attribute type 10 has an invalid length.
[  264.800297][ T8316] netlink: 'syz.2.671': attribute type 1 has an invalid length.
[  264.863662][ T8316] 8021q: adding VLAN 0 to HW filter on device bond2
[  264.880276][ T8319] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  264.959465][   T44] usb 2-1: USB disconnect, device number 23
[  264.966418][   T44] em28xx 2-1:0.0: Disconnecting em28xx
[  265.119806][   T30] audit: type=1400 audit(2000000093.810:447): avc:  denied  { getopt } for  pid=8322 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  265.172273][   T44] em28xx 2-1:0.0: Freeing device
[  265.197102][ T8327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.674'.
[  265.277520][  T916] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  266.141212][   T30] audit: type=1400 audit(2000000094.960:448): avc:  denied  { create } for  pid=8322 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[  267.449452][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'.
[  267.566891][  T916] usb 1-1: Using ep0 maxpacket: 16
[  267.590720][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  267.664013][ T8338] program syz.1.676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.712528][  T916] usb 1-1: device descriptor read/all, error -71
[  267.833758][ T8344] program syz.2.679 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.487368][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  268.687146][   T24] usb 4-1: Using ep0 maxpacket: 32
[  268.831791][   T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  269.046513][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.055267][   T24] usb 4-1: Product: syz
[  269.063626][   T24] usb 4-1: Manufacturer: syz
[  269.949942][   T24] usb 4-1: SerialNumber: syz
[  269.957150][   T24] usb 4-1: config 0 descriptor??
[  269.965307][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  270.034362][ T8365] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  270.269583][   T30] audit: type=1400 audit(2000000099.070:449): avc:  denied  { mount } for  pid=8372 comm="syz.1.689" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  270.295115][   T30] audit: type=1400 audit(2000000099.110:450): avc:  denied  { unmount } for  pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  270.605743][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  270.792208][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.803054][ T5931] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  270.813224][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.850467][ T5931] usb 5-1: config 0 descriptor??
[  271.275425][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.572915][   T24] gspca_ov534_9: reg_w failed -110
[  271.637877][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.650307][ T5931] usbhid 5-1:0.0: can't add hid device: -71
[  271.669451][ T5931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  271.725163][ T5931] usb 5-1: USB disconnect, device number 20
[  271.809592][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  271.846695][ T8394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.695'.
[  272.028698][   T24] gspca_ov534_9: Unknown sensor 0000
[  272.028792][   T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  272.512668][ T8399] openvswitch: netlink: Message has 24 unknown bytes.
[  272.522394][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.532565][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  272.766978][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  273.380955][  T975] usb 4-1: USB disconnect, device number 27
[  273.827598][  T975] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  274.406822][  T975] usb 4-1: Using ep0 maxpacket: 16
[  274.431422][  T975] usb 4-1: unable to get BOS descriptor or descriptor too short
[  274.442864][ T8414] netlink: 'syz.1.704': attribute type 4 has an invalid length.
[  274.450849][ T8414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.704'.
[  274.487635][  T975] usb 4-1: config 8 interface 0 has no altsetting 0
[  274.604650][  T975] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca
[  274.627493][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'.
[  274.639071][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.659794][  T975] usb 4-1: Product: syz
[  274.664024][  T975] usb 4-1: Manufacturer: syz
[  274.677658][  T975] usb 4-1: SerialNumber: syz
[  275.006076][ T8429] 9pnet_virtio: no channels available for device syz
[  275.578065][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'.
[  275.587519][ T8432] bridge_slave_0: left allmulticast mode
[  275.593369][ T8432] bridge_slave_0: left promiscuous mode
[  275.599475][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.735513][ T8434] netlink: 'syz.1.710': attribute type 10 has an invalid length.
[  275.774934][   T30] audit: type=1400 audit(2000000104.590:451): avc:  denied  { bind } for  pid=8403 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  275.831016][ T8428] netlink: 'syz.2.709': attribute type 4 has an invalid length.
[  275.839141][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.2.709'.
[  276.005859][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.711'.
[  276.099135][ T8441] mmap: syz.0.713 (8441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  276.203369][  T975] usb 4-1: USB disconnect, device number 28
[  276.251139][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  277.497043][ T5931] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  277.673964][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.703728][   T30] audit: type=1326 audit(2000000106.520:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff1c538e929 code=0x7ffc0000
[  277.712948][ T5931] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  277.727207][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.743561][   T30] audit: type=1326 audit(2000000106.520:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff1c538e929 code=0x7ffc0000
[  277.774902][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.808630][ T5931] usb 4-1: config 0 descriptor??
[  277.953539][ T8466] binder: 8464:8466 unknown command 0
[  277.962553][ T8466] binder: 8464:8466 ioctl c0306201 200000000080 returned -22
[  277.979395][ T8468] program syz.1.721 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  278.037676][ T5931] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  278.056496][ T8470] netlink: 'syz.4.722': attribute type 10 has an invalid length.
[  278.061288][ T8470] 8021q: adding VLAN 0 to HW filter on device team0
[  278.062099][ T8470] : (slave team0): Enslaving as an active interface with an up link
[  278.376164][ T5204] udevd[5204]: worker [6016] terminated by signal 33 (Unknown signal 33)
[  278.392105][ T5204] udevd[5204]: worker [6016] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.000E/hidraw/hidraw0'
[  278.958835][  T916] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  281.342432][  T975] usb 4-1: USB disconnect, device number 29
[  281.361174][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'.
[  281.395285][   T30] audit: type=1400 audit(2000000110.160:454): avc:  denied  { read write } for  pid=8498 comm="syz.0.731" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.431383][   T30] audit: type=1400 audit(2000000110.160:455): avc:  denied  { open } for  pid=8498 comm="syz.0.731" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.607003][  T916] usb 2-1: device descriptor read/64, error -71
[  281.613470][   T30] audit: type=1400 audit(2000000110.160:456): avc:  denied  { map } for  pid=8498 comm="syz.0.731" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.778016][   T30] audit: type=1400 audit(2000000110.160:457): avc:  denied  { execute } for  pid=8498 comm="syz.0.731" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.814988][ T8507] program syz.0.734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  282.000370][ T8518] 9pnet_fd: Insufficient options for proto=fd
[  282.206029][   T30] audit: type=1400 audit(2000000111.020:458): avc:  denied  { write } for  pid=8525 comm="syz.0.741" name="file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.228279][    C1] vkms_vblank_simulate: vblank timer overrun
[  282.265499][ T8527] netlink: 96 bytes leftover after parsing attributes in process `syz.4.739'.
[  282.299393][   T30] audit: type=1400 audit(2000000111.020:459): avc:  denied  { open } for  pid=8525 comm="syz.0.741" path="/142/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.407951][   T30] audit: type=1400 audit(2000000111.020:460): avc:  denied  { ioctl } for  pid=8525 comm="syz.0.741" path="/142/file0" dev="tmpfs" ino=805 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.437821][   T30] audit: type=1400 audit(2000000111.140:461): avc:  denied  { bind } for  pid=8521 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  282.594742][   T30] audit: type=1400 audit(2000000111.410:462): avc:  denied  { getopt } for  pid=8525 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  282.667973][   T30] audit: type=1400 audit(2000000111.460:463): avc:  denied  { mounton } for  pid=8525 comm="syz.0.741" path="/142/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.968018][  T975] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  283.076447][ T8545] fuse: Unknown parameter 'roo'
[  283.164545][  T975] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  284.038481][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.131978][  T975] usb 2-1: config 0 descriptor??
[  284.158347][  T975] gspca_main: cpia1-2.14.0 probing 0813:0001
[  284.366856][  T976] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  284.374741][ T5931] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  284.567923][ T8554] netlink: 'syz.1.744': attribute type 10 has an invalid length.
[  284.598404][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'.
[  284.765600][ T8558] 9pnet_fd: Insufficient options for proto=fd
[  284.827490][ T8552] SELinux: failed to load policy
[  284.903772][  T976] usb 1-1: device descriptor read/64, error -71
[  284.976825][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  285.155025][ T8554] dummy0: entered promiscuous mode
[  285.190368][ T8554] bridge0: port 3(dummy0) entered blocking state
[  285.191828][ T5931] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  285.207683][ T8554] bridge0: port 3(dummy0) entered disabled state
[  285.211547][ T5931] usb 3-1: config 0 has no interface number 0
[  285.219293][ T8554] dummy0: entered allmulticast mode
[  285.237765][ T8554] bridge0: port 3(dummy0) entered blocking state
[  285.244325][ T8554] bridge0: port 3(dummy0) entered forwarding state
[  285.306229][ T5931] usb 3-1: config 0 interface 132 has no altsetting 0
[  285.381407][  T976] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  285.436900][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[  285.460036][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.468916][ T5931] usb 3-1: Product: syz
[  285.473169][ T5931] usb 3-1: Manufacturer: syz
[  285.481178][ T5931] usb 3-1: SerialNumber: syz
[  286.177897][  T976] usb 1-1: device descriptor read/64, error -71
[  286.200238][ T5931] usb 3-1: config 0 descriptor??
[  286.209554][  T975] gspca_cpia1: usb_control_msg 03, error -110
[  286.262808][  T975] gspca_cpia1: usb_control_msg 01, error -32
[  286.371587][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  286.379939][  T976] usb usb1-port1: attempt power cycle
[  286.385639][ T5931] usb 3-1: can't set config #0, error -71
[  286.396166][  T975] gspca_cpia1: usb_control_msg 01, error -32
[  286.405271][ T5931] usb 3-1: USB disconnect, device number 20
[  286.411648][  T975] gspca_cpia1: usb_control_msg 01, error -32
[  286.418614][  T975] gspca_cpia1: usb_control_msg 01, error -32
[  286.427078][  T975] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  286.508652][ T8570] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  286.536907][    T9] usb 4-1: Using ep0 maxpacket: 8
[  286.560619][    T9] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[  286.592378][ T8570] 8021q: adding VLAN 0 to HW filter on device bond3
[  286.607926][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.685760][    T9] usb 4-1: Product: syz
[  286.698952][    T9] usb 4-1: Manufacturer: syz
[  286.707972][    T9] usb 4-1: SerialNumber: syz
[  286.721196][    T9] usb 4-1: config 0 descriptor??
[  286.744991][  T916] usb 2-1: USB disconnect, device number 26
[  286.794814][    T9] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32
[  286.840230][ T8583] comedi comedi3: comedi_config --init_data is deprecated
[  287.086659][    T9] usb 4-1: USB disconnect, device number 30
[  287.225629][ T8591] misc userio: No port type given on /dev/userio
[  288.616856][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  288.659393][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  288.659409][   T30] audit: type=1400 audit(2000000117.480:468): avc:  denied  { setopt } for  pid=8618 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  288.844372][    T9] usb 3-1: device descriptor read/64, error -71
[  288.911861][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae21400: rx timeout, send abort
[  289.171961][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  289.210143][   T30] audit: type=1400 audit(2000000117.480:469): avc:  denied  { write } for  pid=8618 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  289.412663][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae20800: rx timeout, send abort
[  289.421188][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae21400: abort rx timeout. Force session deactivation
[  289.467921][    T9] usb 3-1: device descriptor read/64, error -71
[  289.619844][    T9] usb usb3-port1: attempt power cycle
[  289.687430][   T30] audit: type=1400 audit(2000000117.740:470): avc:  denied  { read } for  pid=5186 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  289.723445][ T8630] netlink: 'syz.0.771': attribute type 10 has an invalid length.
[  289.796414][ T8630] 8021q: adding VLAN 0 to HW filter on device team0
[  289.818039][ T8630] : (slave team0): Enslaving as an active interface with an up link
[  289.914322][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae20c00: rx timeout, send abort
[  289.923262][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae20800: abort rx timeout. Force session deactivation
[  289.964594][   T30] audit: type=1400 audit(2000000117.740:471): avc:  denied  { search } for  pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  290.067965][   T30] audit: type=1400 audit(2000000117.740:472): avc:  denied  { search } for  pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  290.113070][   T30] audit: type=1400 audit(2000000117.740:473): avc:  denied  { add_name } for  pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  290.203856][   T30] audit: type=1400 audit(2000000117.740:474): avc:  denied  { create } for  pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  290.216898][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  290.270130][    T9] usb 3-1: device descriptor read/8, error -71
[  290.422637][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae20c00: abort rx timeout. Force session deactivation
[  290.489846][ T8640] netlink: 76 bytes leftover after parsing attributes in process `syz.4.775'.
[  290.506951][   T30] audit: type=1400 audit(2000000117.740:475): avc:  denied  { append open } for  pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  290.532251][   T30] audit: type=1400 audit(2000000117.740:476): avc:  denied  { getattr } for  pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  290.589160][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  290.610799][   T30] audit: type=1400 audit(2000000119.370:477): avc:  denied  { getopt } for  pid=8639 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  290.633504][ T8643] binder: 8642:8643 unknown command 0
[  290.640000][ T8643] binder: 8642:8643 ioctl c0306201 200000000080 returned -22
[  290.647830][    T9] usb 3-1: device descriptor read/8, error -71
[  290.651589][ T8643] binder: BINDER_SET_CONTEXT_MGR already set
[  290.661065][ T8643] binder: 8642:8643 ioctl 4018620d 200000000040 returned -16
[  290.711409][ T8646] binder: 8645:8646 unknown command 0
[  290.717181][ T8646] binder: 8645:8646 ioctl c0306201 200000000080 returned -22
[  290.725885][ T8646] FAULT_INJECTION: forcing a failure.
[  290.725885][ T8646] name failslab, interval 1, probability 0, space 0, times 0
[  290.777056][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.4.778 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  290.777092][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  290.777103][ T8646] Call Trace:
[  290.777110][ T8646]  <TASK>
[  290.777117][ T8646]  dump_stack_lvl+0x16c/0x1f0
[  290.777157][ T8646]  should_fail_ex+0x512/0x640
[  290.777188][ T8646]  ? fs_reclaim_acquire+0xae/0x150
[  290.777215][ T8646]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  290.777234][ T8646]  should_failslab+0xc2/0x120
[  290.777253][ T8646]  __kmalloc_noprof+0xd2/0x510
[  290.777286][ T8646]  tomoyo_realpath_from_path+0xc2/0x6e0
[  290.777305][ T8646]  ? tomoyo_profile+0x47/0x60
[  290.777329][ T8646]  tomoyo_path_number_perm+0x245/0x580
[  290.777353][ T8646]  ? tomoyo_path_number_perm+0x237/0x580
[  290.777380][ T8646]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  290.777406][ T8646]  ? find_held_lock+0x2b/0x80
[  290.777453][ T8646]  ? find_held_lock+0x2b/0x80
[  290.777476][ T8646]  ? hook_file_ioctl_common+0x145/0x410
[  290.777502][ T8646]  ? __fget_files+0x20e/0x3c0
[  290.777539][ T8646]  security_file_ioctl+0x9b/0x240
[  290.777570][ T8646]  __x64_sys_ioctl+0xb7/0x210
[  290.777597][ T8646]  do_syscall_64+0xcd/0x4c0
[  290.777616][ T8646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.777634][ T8646] RIP: 0033:0x7ff1c538e929
[  290.777649][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.777666][ T8646] RSP: 002b:00007ff1c612e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.777685][ T8646] RAX: ffffffffffffffda RBX: 00007ff1c55b5fa0 RCX: 00007ff1c538e929
[  290.777696][ T8646] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000005
[  290.777707][ T8646] RBP: 00007ff1c612e090 R08: 0000000000000000 R09: 0000000000000000
[  290.777717][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.777727][ T8646] R13: 0000000000000000 R14: 00007ff1c55b5fa0 R15: 00007ffcdf98d4d8
[  290.777751][ T8646]  </TASK>
[  290.777759][ T8646] ERROR: Out of memory at tomoyo_realpath_from_path.
[  291.458340][    T9] usb usb3-port1: unable to enumerate USB device
[  291.569626][ T8648] bridge0: port 3(dummy0) entered disabled state
[  291.576088][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.583571][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.686231][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.698648][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.730144][ T8648] vlan0: left promiscuous mode
[  291.780886][ T8648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.791795][ T8648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.801342][ T8648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.810479][ T8648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.841939][ T8654] program syz.4.780 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.554707][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'.
[  293.590032][ T8679] dummy0: left allmulticast mode
[  293.701477][ T8679] dummy0: left promiscuous mode
[  293.709352][ T8679] bridge0: port 3(dummy0) entered disabled state
[  293.741083][   T30] audit: type=1400 audit(2000000122.560:478): avc:  denied  { nlmsg_read } for  pid=8680 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  293.762454][ T8681] netlink: 104 bytes leftover after parsing attributes in process `syz.3.789'.
[  293.794696][ T8679] bridge_slave_1: left allmulticast mode
[  293.814486][ T8679] bridge_slave_1: left promiscuous mode
[  293.832262][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.908944][ T8679] bridge_slave_0: left allmulticast mode
[  293.914830][ T8679] bridge_slave_0: left promiscuous mode
[  293.923988][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.933576][ T8685] netlink: 'syz.3.789': attribute type 23 has an invalid length.
[  295.710807][   T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  295.804311][ T8708] binder: 8707:8708 unknown command 0
[  295.815615][ T8708] binder: 8707:8708 ioctl c0306201 200000000080 returned -22
[  295.887427][   T44] usb 2-1: device descriptor read/64, error -71
[  296.566534][   T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  296.583348][ T8726] comedi comedi3: comedi_config --init_data is deprecated
[  296.897478][   T44] usb 2-1: device descriptor read/64, error -71
[  297.136928][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  297.509100][   T44] usb usb2-port1: attempt power cycle
[  297.608952][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  297.668431][    T9] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  297.754443][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  297.811316][    T9] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0
[  297.837414][    T9] usb 3-1: Product: syz
[  297.869423][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  297.887665][    T9] usb 3-1: invalid MIDI out EP 0
[  297.991566][    T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  298.097526][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.156891][  T916] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  298.259689][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  298.277667][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  298.337655][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'.
[  298.348026][  T916] usb 1-1: Using ep0 maxpacket: 8
[  298.362554][  T916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  298.588057][    T9] hid (null): global environment stack underflow
[  298.599869][  T916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  298.863417][  T916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  299.211759][   T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  299.229229][  T916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  299.319539][   T24] usb 3-1: USB disconnect, device number 25
[  299.360839][  T916] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  299.459227][   T44] usb 2-1: device descriptor read/64, error -71
[  299.486036][  T916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.684400][  T916] usb 1-1: config 0 descriptor??
[  299.759421][   T44] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  299.790666][ T8745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  299.963815][ T8754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=8754 comm=syz.4.807
[  299.988908][   T44] usb 2-1: device descriptor read/64, error -71
[  300.158699][   T44] usb usb2-port1: attempt power cycle
[  300.159260][    T9] hid-generic 0000:FFFFF87C:0007.000F: global environment stack underflow
[  300.172716][    T9] hid-generic 0000:FFFFF87C:0007.000F: item 0 2 1 11 parsing failed
[  300.181249][    T9] hid-generic 0000:FFFFF87C:0007.000F: probe with driver hid-generic failed with error -22
[  300.219686][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.230762][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.238381][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.253103][   T30] audit: type=1400 audit(2000000129.040:479): avc:  denied  { write } for  pid=8764 comm="syz.3.809" path="socket:[19044]" dev="sockfs" ino=19044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  300.254263][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.284603][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.294049][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.308302][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.318899][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.328027][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.335368][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.364170][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.372957][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.380679][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.392868][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.414325][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.421601][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.447509][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.457822][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.536839][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.556911][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.586857][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.608747][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.616870][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.677540][   T44] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  300.677556][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.677648][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.707846][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.804368][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.811312][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.818127][ T5155] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  300.825905][   T44] usb 2-1: device descriptor read/8, error -71
[  300.957013][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  300.957151][    T9] usb 1-1: USB disconnect, device number 31
[  301.098861][   T44] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  301.275436][   T44] usb 2-1: device descriptor read/8, error -71
[  301.407063][   T44] usb usb2-port1: unable to enumerate USB device
[  301.749714][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  302.030120][    T9] usb 3-1: device descriptor read/64, error -71
[  302.379772][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  302.677960][    T9] usb 3-1: device descriptor read/64, error -71
[  302.873019][    T9] usb usb3-port1: attempt power cycle
[  303.028448][  T916] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  303.297004][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  303.427858][    T9] usb 3-1: device descriptor read/8, error -71
[  303.536081][  T916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.547570][   T44] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  303.555927][  T916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.576302][  T916] usb 5-1: string descriptor 0 read error: -22
[  303.591155][  T916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  303.748157][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  303.776888][  T916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.781386][    T9] usb 3-1: device descriptor read/8, error -71
[  303.787197][   T44] usb 2-1: Using ep0 maxpacket: 8
[  303.811335][  T916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  303.828418][   T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  303.846997][   T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  303.858774][  T916] usb 5-1: MIDIStreaming interface descriptor not found
[  303.869088][   T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  303.964666][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'.
[  303.997322][ T8797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'.
[  304.181185][    T9] usb usb3-port1: unable to enumerate USB device
[  304.388996][   T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  304.417258][  T916] usb 5-1: USB disconnect, device number 21
[  304.427899][   T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.536898][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  304.749219][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  304.750121][   T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  304.768322][    T9] usb 1-1: too many configurations: 246, using maximum allowed: 8
[  304.787349][    T9] usb 1-1: config 9 has no interfaces?
[  304.798761][    T9] usb 1-1: config 9 has no interfaces?
[  304.807003][    T9] usb 1-1: config 9 has no interfaces?
[  304.813564][    T9] usb 1-1: config 9 has no interfaces?
[  304.827840][    T9] usb 1-1: config 9 has no interfaces?
[  304.838871][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.848200][    T9] usb 1-1: config 9 has no interfaces?
[  304.855845][    T9] usb 1-1: config 9 has no interfaces?
[  304.872274][    T9] usb 1-1: config 9 has no interfaces?
[  304.889170][    T9] usb 1-1: New USB device found, idVendor=1210, idProduct=8003, bcdDevice= 1.00
[  304.927147][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.969193][    T9] usb 1-1: Product: syz
[  304.989649][    T9] usb 1-1: Manufacturer: syz
[  305.018148][    T9] usb 1-1: SerialNumber: syz
[  305.148186][   T44] usb 2-1: can't set config #16, error -71
[  305.205884][   T44] usb 2-1: USB disconnect, device number 34
[  305.628085][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.748761][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.436141][   T30] audit: type=1400 audit(2000000135.250:480): avc:  denied  { bind } for  pid=8798 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  306.594455][    T9] usb 1-1: USB disconnect, device number 32
[  306.700580][ T8834] program syz.2.831 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.014965][   T30] audit: type=1400 audit(2000000135.830:481): avc:  denied  { setopt } for  pid=8820 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  307.103489][ T8846] binder: 8843:8846 unknown command 0
[  307.109355][ T8846] binder: 8843:8846 ioctl c0306201 200000000080 returned -22
[  307.121930][ T8846] binder: 8843:8846 ioctl 8933 200000000300 returned -22
[  307.130711][ T8846] binder: 8843:8846 ioctl 89f2 200000000540 returned -22
[  307.185863][ T8849] binder: 8843:8849 ioctl 89f1 200000000580 returned -22
[  307.396913][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  307.607072][    T9] usb 3-1: Using ep0 maxpacket: 8
[  307.614185][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  307.630238][    T9] usb 3-1: config 4 interface 0 has no altsetting 0
[  307.640604][    T9] usb 3-1: string descriptor 0 read error: -22
[  307.650291][    T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  308.106820][    T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  308.122123][    T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  308.153718][    T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  308.200091][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  308.277075][    T9] usb 3-1: media controller created
[  308.314652][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  308.412563][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.491630][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.450686][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  309.548933][   T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  309.750910][    T9] usb 3-1: USB disconnect, device number 30
[  309.779155][   T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  309.791192][   T44] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  309.852037][   T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  309.887841][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.008617][ T8880] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  310.194248][   T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  310.212632][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'.
[  310.579373][ T8887] FAULT_INJECTION: forcing a failure.
[  310.579373][ T8887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.602075][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: syz.3.846 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  310.602106][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.602117][ T8887] Call Trace:
[  310.602124][ T8887]  <TASK>
[  310.602131][ T8887]  dump_stack_lvl+0x16c/0x1f0
[  310.602168][ T8887]  should_fail_ex+0x512/0x640
[  310.602200][ T8887]  _copy_to_user+0x32/0xd0
[  310.602220][ T8887]  simple_read_from_buffer+0xcb/0x170
[  310.602261][ T8887]  proc_fail_nth_read+0x197/0x270
[  310.602293][ T8887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  310.602320][ T8887]  ? rw_verify_area+0xcf/0x680
[  310.602344][ T8887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  310.602369][ T8887]  vfs_read+0x1e4/0xc60
[  310.602399][ T8887]  ? __pfx___mutex_lock+0x10/0x10
[  310.602417][ T8887]  ? __pfx_vfs_read+0x10/0x10
[  310.602449][ T8887]  ? __fget_files+0x20e/0x3c0
[  310.602474][ T8887]  ksys_read+0x12a/0x250
[  310.602497][ T8887]  ? __pfx_ksys_read+0x10/0x10
[  310.602527][ T8887]  do_syscall_64+0xcd/0x4c0
[  310.602546][ T8887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.602564][ T8887] RIP: 0033:0x7ff88db8d33c
[  310.602578][ T8887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  310.602595][ T8887] RSP: 002b:00007ff88e9f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  310.602612][ T8887] RAX: ffffffffffffffda RBX: 00007ff88ddb5fa0 RCX: 00007ff88db8d33c
[  310.602623][ T8887] RDX: 000000000000000f RSI: 00007ff88e9f50a0 RDI: 0000000000000004
[  310.602633][ T8887] RBP: 00007ff88e9f5090 R08: 0000000000000000 R09: 0000000000000000
[  310.602643][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.602651][ T8887] R13: 0000000000000000 R14: 00007ff88ddb5fa0 R15: 00007ffdbf22bdc8
[  310.602673][ T8887]  </TASK>
[  310.788970][    C0] vkms_vblank_simulate: vblank timer overrun
[  310.830645][   T44] usb 5-1: USB disconnect, device number 22
[  311.247521][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  311.849742][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'.
[  311.867691][  T976] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  312.118357][  T976] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  312.147139][  T976] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  312.186177][  T976] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  312.245374][  T976] usb 1-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0
[  312.268854][  T976] usb 1-1: Product: syz
[  312.291344][  T976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  312.307368][  T976] usb 1-1: invalid MIDI out EP 0
[  312.446618][  T976] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  312.764451][  T976] hid (null): global environment stack underflow
[  312.815464][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.842518][   T44] usb 1-1: USB disconnect, device number 33
[  312.963383][  T976] hid-generic 0000:FFFFF87C:0007.0010: global environment stack underflow
[  313.271104][  T976] hid-generic 0000:FFFFF87C:0007.0010: item 0 2 1 11 parsing failed
[  313.843706][  T976] hid-generic 0000:FFFFF87C:0007.0010: probe with driver hid-generic failed with error -22
[  314.907514][  T976] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  315.752638][  T976] usb 4-1: unable to get BOS descriptor or descriptor too short
[  315.846060][  T976] usb 4-1: not running at top speed; connect to a high speed hub
[  315.919804][  T976] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config
[  315.978982][  T976] usb 4-1: config 1 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  316.114355][  T976] usb 4-1: config 1 interface 0 has no altsetting 0
[  316.135964][  T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  316.165857][  T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.193023][  T976] usb 4-1: Product: syz
[  316.201681][  T976] usb 4-1: Manufacturer: syz
[  316.206396][  T976] usb 4-1: SerialNumber: syz
[  316.337735][   T30] audit: type=1400 audit(2000000145.160:482): avc:  denied  { read } for  pid=8928 comm="syz.4.860" path="socket:[20232]" dev="sockfs" ino=20232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  316.346905][   T44] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  316.362142][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.406416][ T8929] 9pnet_virtio: no channels available for device syz
[  316.446704][  T976] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input29
[  316.490982][ T5189] bcm5974 4-1:1.0: could not read from device
[  316.500949][ T5189] bcm5974 4-1:1.0: could not read from device
[  316.547169][ T8927] netlink: 'syz.2.859': attribute type 4 has an invalid length.
[  316.554925][ T8927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.859'.
[  316.577161][   T44] usb 1-1: Using ep0 maxpacket: 32
[  316.602717][ T5189] bcm5974 4-1:1.0: could not read from device
[  316.620322][  T976] usb 4-1: USB disconnect, device number 31
[  316.643771][   T44] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  316.801439][ T6605] udevd[6605]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory
[  316.836411][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.845670][   T44] usb 1-1: Product: syz
[  316.850501][   T44] usb 1-1: Manufacturer: syz
[  316.856413][   T44] usb 1-1: SerialNumber: syz
[  317.335445][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.392275][   T44] usb 1-1: config 0 descriptor??
[  317.611656][   T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  319.024232][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.062465][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.071810][   T44] gspca_ov534_9: reg_w failed -110
[  319.363858][ T8953] tmpfs: Bad value for 'mpol'
[  319.508948][   T44] gspca_ov534_9: Unknown sensor 0000
[  319.509028][   T44] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  319.536995][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  319.756833][ T5931] usb 2-1: Using ep0 maxpacket: 32
[  319.764914][ T5931] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  319.782568][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.800634][ T5931] usb 2-1: config 0 descriptor??
[  320.049684][ T5931] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  320.092813][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  320.143326][ T5931] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  320.152063][ T5931] usb 2-1: media controller created
[  320.159831][  T976] usb 1-1: USB disconnect, device number 34
[  320.236245][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.717873][ T8983] overlayfs: failed to resolve './file1': -2
[  321.005125][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.024776][ T8992] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  321.026252][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.107127][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.137580][ T8994] netlink: 'syz.4.878': attribute type 10 has an invalid length.
[  321.167555][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.247806][  T976] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  321.433283][  T976] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  321.450060][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.459717][  T976] usb 3-1: Product: syz
[  321.472268][  T976] usb 3-1: Manufacturer: syz
[  321.487753][  T976] usb 3-1: SerialNumber: syz
[  321.495725][  T976] usb 3-1: config 0 descriptor??
[  321.517775][ T5931] stb0899_attach: Driver disabled by Kconfig
[  321.525566][ T5931] az6027: no front-end attached
[  321.525566][ T5931] 
[  321.655579][ T5931] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  321.668880][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30
[  321.684076][ T5931] dvb-usb: schedule remote query interval to 400 msecs.
[  321.691272][ T5931] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  321.706519][  T976] usb 3-1: f81604_read: reg: 105 failed: -EPROTO
[  321.723625][  T976] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  321.732739][  T976] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[  321.751315][  T976] usb 3-1: USB disconnect, device number 31
[  322.015084][ T5931] usb 2-1: USB disconnect, device number 35
[  322.065912][ T5931] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  322.367579][ T9005] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  322.563264][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.944318][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'.
[  323.233155][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'.
[  323.589533][ T9020] 9pnet_fd: Insufficient options for proto=fd
[  323.881798][ T9023] netlink: 'syz.1.887': attribute type 4 has an invalid length.
[  323.889680][ T9023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.887'.
[  323.978889][   T30] audit: type=1400 audit(2000000152.800:483): avc:  denied  { ioctl } for  pid=9024 comm="syz.2.889" path="socket:[20351]" dev="sockfs" ino=20351 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  324.132807][   T30] audit: type=1400 audit(2000000152.950:484): avc:  denied  { ioctl } for  pid=9027 comm="syz.1.890" path="socket:[20635]" dev="sockfs" ino=20635 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  324.157444][    C0] vkms_vblank_simulate: vblank timer overrun
[  324.251257][ T9034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  324.261471][ T9030] program syz.2.891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  324.872736][   T30] audit: type=1400 audit(2000000152.990:485): avc:  denied  { getopt } for  pid=9027 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  325.676043][ T9044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.895'.
[  325.686304][   T30] audit: type=1400 audit(2000000154.500:486): avc:  denied  { map } for  pid=9043 comm="syz.3.895" path="socket:[20675]" dev="sockfs" ino=20675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  325.710036][    C0] vkms_vblank_simulate: vblank timer overrun
[  325.718499][   T30] audit: type=1400 audit(2000000154.500:487): avc:  denied  { read accept } for  pid=9043 comm="syz.3.895" path="socket:[20675]" dev="sockfs" ino=20675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  325.742863][    C0] vkms_vblank_simulate: vblank timer overrun
[  325.839490][ T9049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.894'.
[  326.443127][ T9058] netlink: 'syz.2.900': attribute type 4 has an invalid length.
[  326.450999][ T9058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.900'.
[  326.751741][ T9073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  326.799918][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'.
[  326.935730][ T9074] tipc: Invalid UDP bearer configuration
[  326.935785][ T9074] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  327.057493][ T5931] hid (null): unknown global tag 0xc
[  327.121029][ T5931] hid-generic 0003:0005:0001.0011: reserved main item tag 0xd
[  327.121059][ T5931] hid-generic 0003:0005:0001.0011: unknown global tag 0xc
[  327.121073][ T5931] hid-generic 0003:0005:0001.0011: item 0 0 1 12 parsing failed
[  327.135653][ T5931] hid-generic 0003:0005:0001.0011: probe with driver hid-generic failed with error -22
[  328.047165][ T9088] overlayfs: failed to resolve './file1': -2
[  328.423522][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'.
[  329.080687][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'.
[  329.992050][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  330.991903][ T9116] netlink: 'syz.4.915': attribute type 4 has an invalid length.
[  330.999774][ T9116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.915'.
[  331.039153][   T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  331.216926][   T44] usb 1-1: Using ep0 maxpacket: 8
[  331.226585][   T44] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  331.247832][   T44] usb 1-1: config 179 has no interface number 0
[  331.255158][   T44] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  331.270491][   T44] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  331.282789][   T44] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  331.297177][   T44] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  331.311773][   T44] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  331.326299][   T44] usb 1-1: config 179 interface 65 has no altsetting 0
[  331.334713][   T44] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  331.344923][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.405027][ T5931] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  331.842048][   T44] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input31
[  331.854292][  T916] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  331.920867][ T5189] input input31: unable to receive magic message: -110
[  331.938316][ T5189] input input31: unable to receive magic message: -32
[  331.948693][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  331.961100][ T5931] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  331.975855][ T5189] input input31: unable to receive magic message: -32
[  331.984997][ T5931] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  331.994530][ T5189] input input31: unable to receive magic message: -32
[  332.003305][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.012079][  T916] usb 3-1: Using ep0 maxpacket: 16
[  332.018213][ T9124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  332.034687][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  332.047061][  T916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.099893][ T5189] input input31: unable to receive magic message: -32
[  332.108083][  T916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.141492][  T916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  332.163575][ T5189] input input31: unable to receive magic message: -32
[  332.189663][  T916] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  332.201224][  T916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.272830][ T5931] usb 5-1: USB disconnect, device number 23
[  332.289793][  T916] usb 3-1: config 0 descriptor??
[  332.366509][ T9113] netlink: 'syz.0.918': attribute type 1 has an invalid length.
[  332.419607][   T44] usb 1-1: USB disconnect, device number 35
[  332.425645][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  332.710081][ T9140] binder_alloc: 9136: binder_alloc_buf, no vma
[  332.748192][  T916] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  332.757222][  T916] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max
[  332.948543][  T916] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  333.014871][  T916] microsoft 0003:045E:07DA.0012: no inputs found
[  333.047064][ T5931] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  333.073804][  T916] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway
[  333.216242][ T5931] usb 2-1: device descriptor read/64, error -71
[  333.500864][ T9156] netlink: 'syz.0.932': attribute type 4 has an invalid length.
[  333.508738][ T9156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.932'.
[  333.780462][  T916] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  333.799070][ T5931] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  333.848846][   T44] usb 3-1: USB disconnect, device number 32
[  333.930967][  T916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.951440][ T5931] usb 2-1: device descriptor read/64, error -71
[  334.027258][  T916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.061242][ T9163] program syz.0.933 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.078295][ T5931] usb usb2-port1: attempt power cycle
[  334.427523][ T5931] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  334.750162][  T916] usb 5-1: string descriptor 0 read error: -22
[  334.759273][  T916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  334.776978][  T916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.779665][ T5931] usb 2-1: device descriptor read/8, error -71
[  334.814331][  T916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  334.833587][  T916] usb 5-1: MIDIStreaming interface descriptor not found
[  335.047216][   T44] usb 5-1: USB disconnect, device number 24
[  335.067871][ T5931] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  335.097595][ T5931] usb 2-1: device descriptor read/8, error -71
[  335.207185][  T916] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  335.218546][ T5931] usb usb2-port1: unable to enumerate USB device
[  335.316846][ T5947] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  335.350161][ T9176] capability: warning: `syz.3.936' uses deprecated v2 capabilities in a way that may be insecure
[  335.359495][  T916] usb 1-1: Using ep0 maxpacket: 8
[  335.375218][  T916] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  335.386009][  T916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.399441][  T916] usb 1-1: Product: syz
[  335.404911][  T916] usb 1-1: Manufacturer: syz
[  335.413238][  T916] usb 1-1: SerialNumber: syz
[  335.427299][  T916] usb 1-1: config 0 descriptor??
[  335.709518][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.723113][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.735530][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.764068][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  335.776360][  T916] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71
[  335.788510][  T916] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  335.801157][ T5947] usb 3-1: string descriptor 0 read error: -22
[  335.808628][ T5947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  335.820782][  T916] usb 1-1: USB disconnect, device number 36
[  335.854308][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.455395][ T5947] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  336.455466][ T5947] usb 3-1: MIDIStreaming interface descriptor not found
[  336.944544][ T9190] netlink: 'syz.4.939': attribute type 10 has an invalid length.
[  337.140168][ T5931] usb 3-1: USB disconnect, device number 33
[  338.794974][   T30] audit: type=1400 audit(2000000167.540:488): avc:  denied  { write } for  pid=9205 comm="syz.3.945" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  338.970025][   T30] audit: type=1400 audit(2000000167.540:489): avc:  denied  { open } for  pid=9205 comm="syz.3.945" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  339.041275][ T9213] random: crng reseeded on system resumption
[  339.421780][ T9230] 9pnet_fd: Insufficient options for proto=fd
[  339.513388][   T44] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[  339.564251][ T9233] netlink: 64 bytes leftover after parsing attributes in process `syz.0.951'.
[  339.637365][ T9234] x_tables: duplicate underflow at hook 1
[  339.723632][   T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.829306][   T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.028244][   T44] usb 3-1: string descriptor 0 read error: -22
[  340.065526][   T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.087949][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.122429][   T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  340.289633][   T44] usb 3-1: MIDIStreaming interface descriptor not found
[  340.836829][  T976] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  340.851814][   T44] usb 3-1: USB disconnect, device number 34
[  340.879224][ T8148] udevd[8148]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  341.038840][  T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.066903][  T976] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  341.087760][  T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.121441][  T976] usb 2-1: config 0 descriptor??
[  341.131132][  T976] pwc: Askey VC010 type 2 USB webcam detected.
[  341.646603][ T9254] overlay: Unknown parameter '/'
[  341.695231][ T9253] overlayfs: missing 'lowerdir'
[  342.028197][  T976] pwc: recv_control_msg error -32 req 02 val 2b00
[  342.110369][   T30] audit: type=1400 audit(2000000170.930:490): avc:  denied  { read } for  pid=9235 comm="syz.1.952" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  342.134626][   T30] audit: type=1400 audit(2000000170.930:491): avc:  denied  { open } for  pid=9235 comm="syz.1.952" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  342.313585][  T976] pwc: recv_control_msg error -32 req 02 val 2700
[  342.600130][  T976] pwc: recv_control_msg error -32 req 04 val 1000
[  343.170788][ T9262] vlan1: entered promiscuous mode
[  343.253880][ T9262] vlan1: entered allmulticast mode
[  343.381789][ T9262] veth0_vlan: entered allmulticast mode
[  343.454446][ T9262] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  343.734998][  T976] pwc: recv_control_msg error -71 req 04 val 1300
[  343.781473][  T976] pwc: recv_control_msg error -71 req 04 val 1400
[  343.884134][ T9272] netlink: 'syz.3.960': attribute type 10 has an invalid length.
[  344.109256][  T976] pwc: recv_control_msg error -71 req 02 val 2000
[  344.131711][  T976] pwc: recv_control_msg error -71 req 02 val 2100
[  344.145771][  T976] pwc: recv_control_msg error -71 req 04 val 1500
[  344.157335][  T976] pwc: recv_control_msg error -71 req 02 val 2500
[  344.174094][  T976] pwc: recv_control_msg error -71 req 02 val 2400
[  344.189268][  T976] pwc: recv_control_msg error -71 req 02 val 2600
[  344.191056][ T9270] sp0: Synchronizing with TNC
[  344.216687][  T976] pwc: recv_control_msg error -71 req 02 val 2900
[  344.231639][  T976] pwc: recv_control_msg error -71 req 02 val 2800
[  344.308536][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[  344.370541][ T6089] 
[  344.372911][ T6089] =====================================================
[  344.379894][ T6089] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  344.387384][ T6089] 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 Not tainted
[  344.394477][ T6089] -----------------------------------------------------
[  344.401392][ T6089] kworker/u8:9/6089 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  344.409184][ T6089] ffffffff8f796038 (disc_data_lock#4){.+.+}-{3:3}, at: sp_get+0x18/0xf0
[  344.417535][ T6089] 
[  344.417535][ T6089] and this task is already holding:
[  344.424884][ T6089] ffffffff9b0b8978 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  344.433574][ T6089] which would create a new lock dependency:
[  344.439457][ T6089]  (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3}
[  344.447318][ T6089] 
[  344.447318][ T6089] but this new dependency connects a HARDIRQ-irq-safe lock:
[  344.456759][ T6089]  (&port_lock_key){-.-.}-{3:3}
[  344.456778][ T6089] 
[  344.456778][ T6089] ... which became HARDIRQ-irq-safe at:
[  344.469554][ T6089]   lock_acquire+0x179/0x350
[  344.474139][ T6089]   _raw_spin_lock_irqsave+0x3a/0x60
[  344.479413][ T6089]   serial8250_handle_irq+0x95/0xcb0
[  344.484738][ T6089]   serial8250_default_handle_irq+0x9a/0x210
[  344.490763][ T6089]   serial8250_interrupt+0x103/0x210
[  344.496037][ T6089]   __handle_irq_event_percpu+0x22c/0x7d0
[  344.501781][ T6089]   handle_irq_event+0xab/0x1e0
[  344.506657][ T6089]   handle_edge_irq+0x28e/0xab0
[  344.511545][ T6089]   __common_interrupt+0xe2/0x250
[  344.516557][ T6089]   common_interrupt+0xba/0xe0
[  344.521310][ T6089]   asm_common_interrupt+0x26/0x40
[  344.526423][ T6089]   _raw_spin_unlock_irqrestore+0x31/0x80
[  344.532133][ T6089]   uart_write+0x2a4/0xb30
[  344.536533][ T6089]   n_tty_write+0x40f/0x1160
[  344.541113][ T6089]   file_tty_write.constprop.0+0x501/0x9b0
[  344.546908][ T6089]   redirected_tty_write+0xd4/0x150
[  344.552109][ T6089]   vfs_write+0x6c7/0x1150
[  344.556515][ T6089]   ksys_write+0x12a/0x250
[  344.560918][ T6089]   do_syscall_64+0xcd/0x4c0
[  344.565495][ T6089]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.571487][ T6089] 
[  344.571487][ T6089] to a HARDIRQ-irq-unsafe lock:
[  344.578489][ T6089]  (disc_data_lock#4){.+.+}-{3:3}
[  344.578517][ T6089] 
[  344.578517][ T6089] ... which became HARDIRQ-irq-unsafe at:
[  344.591396][ T6089] ...
[  344.591403][ T6089]   lock_acquire+0x179/0x350
[  344.598551][ T6089]   _raw_read_lock+0x5f/0x70
[  344.603143][ T6089]   sp_get+0x18/0xf0
[  344.607044][ T6089]   sixpack_write_wakeup+0x20/0x390
[  344.612228][ T6089]   tty_wakeup+0xe8/0x120
[  344.616550][ T6089]   tty_port_default_wakeup+0x2a/0x40
[  344.621911][ T6089]   uart_flush_buffer+0x37f/0x8a0
[  344.626930][ T6089]   tty_driver_flush_buffer+0x61/0x80
[  344.632331][ T6089]   tty_ldisc_hangup+0xe7/0x730
[  344.637208][ T6089]   __tty_hangup.part.0+0x3d2/0x890
[  344.642433][ T6089]   tty_ioctl+0x102d/0x1640
[  344.646944][ T6089]   __x64_sys_ioctl+0x18b/0x210
[  344.651796][ T6089]   do_syscall_64+0xcd/0x4c0
[  344.656366][ T6089]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.662332][ T6089] 
[  344.662332][ T6089] other info that might help us debug this:
[  344.662332][ T6089] 
[  344.673089][ T6089]  Possible interrupt unsafe locking scenario:
[  344.673089][ T6089] 
[  344.681416][ T6089]        CPU0                    CPU1
[  344.686770][ T6089]        ----                    ----
[  344.692113][ T6089]   lock(disc_data_lock#4);
[  344.696626][ T6089]                                local_irq_disable();
[  344.703361][ T6089]                                lock(&port_lock_key);
[  344.710217][ T6089]                                lock(disc_data_lock#4);
[  344.717230][ T6089]   <Interrupt>
[  344.720662][ T6089]     lock(&port_lock_key);
[  344.725149][ T6089] 
[  344.725149][ T6089]  *** DEADLOCK ***
[  344.725149][ T6089] 
[  344.733275][ T6089] 6 locks held by kworker/u8:9/6089:
[  344.738558][ T6089]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  344.749792][ T6089]  #1: ffffc90005b3fd10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  344.760824][ T6089]  #2: ffff888026120ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780
[  344.769917][ T6089]  #3: ffff8880324be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  344.779229][ T6089]  #4: ffffffff9b0b8978 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  344.788349][ T6089]  #5: ffff8880324be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  344.797646][ T6089] 
[  344.797646][ T6089] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  344.808136][ T6089] -> (&port_lock_key){-.-.}-{3:3} {
[  344.813351][ T6089]    IN-HARDIRQ-W at:
[  344.817317][ T6089]                     lock_acquire+0x179/0x350
[  344.823465][ T6089]                     _raw_spin_lock_irqsave+0x3a/0x60
[  344.830304][ T6089]                     serial8250_handle_irq+0x95/0xcb0
[  344.837146][ T6089]                     serial8250_default_handle_irq+0x9a/0x210
[  344.844676][ T6089]                     serial8250_interrupt+0x103/0x210
[  344.851512][ T6089]                     __handle_irq_event_percpu+0x22c/0x7d0
[  344.858787][ T6089]                     handle_irq_event+0xab/0x1e0
[  344.865198][ T6089]                     handle_edge_irq+0x28e/0xab0
[  344.871603][ T6089]                     __common_interrupt+0xe2/0x250
[  344.878185][ T6089]                     common_interrupt+0xba/0xe0
[  344.884509][ T6089]                     asm_common_interrupt+0x26/0x40
[  344.891181][ T6089]                     _raw_spin_unlock_irqrestore+0x31/0x80
[  344.898457][ T6089]                     uart_write+0x2a4/0xb30
[  344.904453][ T6089]                     n_tty_write+0x40f/0x1160
[  344.910620][ T6089]                     file_tty_write.constprop.0+0x501/0x9b0
[  344.917981][ T6089]                     redirected_tty_write+0xd4/0x150
[  344.924727][ T6089]                     vfs_write+0x6c7/0x1150
[  344.930698][ T6089]                     ksys_write+0x12a/0x250
[  344.936670][ T6089]                     do_syscall_64+0xcd/0x4c0
[  344.942823][ T6089]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.950357][ T6089]    IN-SOFTIRQ-W at:
[  344.954326][ T6089]                     lock_acquire+0x179/0x350
[  344.960464][ T6089]                     _raw_spin_lock_irqsave+0x3a/0x60
[  344.967303][ T6089]                     serial8250_handle_irq+0x95/0xcb0
[  344.974142][ T6089]                     serial8250_default_handle_irq+0x9a/0x210
[  344.981674][ T6089]                     serial8250_interrupt+0x103/0x210
[  344.988516][ T6089]                     __handle_irq_event_percpu+0x22c/0x7d0
[  344.995792][ T6089]                     handle_irq_event+0xab/0x1e0
[  345.002193][ T6089]                     handle_edge_irq+0x28e/0xab0
[  345.008612][ T6089]                     __common_interrupt+0xe2/0x250
[  345.015198][ T6089]                     common_interrupt+0x61/0xe0
[  345.021515][ T6089]                     asm_common_interrupt+0x26/0x40
[  345.028176][ T6089]                     lock_acquire+0x62/0x350
[  345.034226][ T6089]                     unwind_next_frame+0xd1/0x20a0
[  345.040845][ T6089]                     arch_stack_walk+0x94/0x100
[  345.047161][ T6089]                     stack_trace_save+0x8e/0xc0
[  345.053477][ T6089]                     kasan_save_stack+0x33/0x60
[  345.059800][ T6089]                     kasan_save_track+0x14/0x30
[  345.066117][ T6089]                     kasan_save_free_info+0x3b/0x60
[  345.072778][ T6089]                     __kasan_slab_free+0x51/0x70
[  345.079201][ T6089]                     kfree+0x2b4/0x4d0
[  345.084732][ T6089]                     slab_free_after_rcu_debug+0x60/0x340
[  345.091918][ T6089]                     rcu_core+0x79c/0x14e0
[  345.097801][ T6089]                     handle_softirqs+0x219/0x8e0
[  345.104203][ T6089]                     __irq_exit_rcu+0x109/0x170
[  345.110514][ T6089]                     irq_exit_rcu+0x9/0x30
[  345.116393][ T6089]                     sysvec_apic_timer_interrupt+0xa4/0xc0
[  345.123670][ T6089]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  345.131378][ T6089]                     pv_native_safe_halt+0xf/0x20
[  345.137872][ T6089]                     default_idle+0x13/0x20
[  345.143843][ T6089]                     default_idle_call+0x6d/0xb0
[  345.150245][ T6089]                     do_idle+0x391/0x510
[  345.155955][ T6089]                     cpu_startup_entry+0x4f/0x60
[  345.162385][ T6089]                     start_secondary+0x21d/0x2b0
[  345.168793][ T6089]                     common_startup_64+0x13e/0x148
[  345.175368][ T6089]    INITIAL USE at:
[  345.179250][ T6089]                    lock_acquire+0x179/0x350
[  345.185301][ T6089]                    _raw_spin_lock_irqsave+0x3a/0x60
[  345.192057][ T6089]                    serial8250_do_set_termios+0x310/0x1710
[  345.199438][ T6089]                    serial8250_set_termios+0x6e/0x80
[  345.206183][ T6089]                    uart_set_options+0x31a/0x5f0
[  345.212589][ T6089]                    serial8250_console_setup+0x189/0x450
[  345.219685][ T6089]                    univ8250_console_setup+0x1eb/0x2e0
[  345.226634][ T6089]                    try_enable_preferred_console+0x2fd/0x530
[  345.234083][ T6089]                    register_console+0x3ab/0x11b0
[  345.240570][ T6089]                    univ8250_console_init+0x5f/0x90
[  345.247267][ T6089]                    console_init+0x14f/0x680
[  345.253327][ T6089]                    start_kernel+0x29f/0x4d0
[  345.259388][ T6089]                    x86_64_start_reservations+0x18/0x30
[  345.266405][ T6089]                    x86_64_start_kernel+0x130/0x190
[  345.273069][ T6089]                    common_startup_64+0x13e/0x148
[  345.279553][ T6089]  }
[  345.282034][ T6089]  ... key      at: [<ffffffff9b0b7be0>] port_lock_key+0x0/0x40
[  345.289658][ T6089] 
[  345.289658][ T6089] the dependencies between the lock to be acquired
[  345.289665][ T6089]  and HARDIRQ-irq-unsafe lock:
[  345.303154][ T6089] -> (disc_data_lock#4){.+.+}-{3:3} {
[  345.308533][ T6089]    HARDIRQ-ON-R at:
[  345.312492][ T6089]                     lock_acquire+0x179/0x350
[  345.318633][ T6089]                     _raw_read_lock+0x5f/0x70
[  345.324788][ T6089]                     sp_get+0x18/0xf0
[  345.330248][ T6089]                     sixpack_write_wakeup+0x20/0x390
[  345.336997][ T6089]                     tty_wakeup+0xe8/0x120
[  345.342895][ T6089]                     tty_port_default_wakeup+0x2a/0x40
[  345.349816][ T6089]                     uart_flush_buffer+0x37f/0x8a0
[  345.356392][ T6089]                     tty_driver_flush_buffer+0x61/0x80
[  345.363332][ T6089]                     tty_ldisc_hangup+0xe7/0x730
[  345.369736][ T6089]                     __tty_hangup.part.0+0x3d2/0x890
[  345.376481][ T6089]                     tty_ioctl+0x102d/0x1640
[  345.382529][ T6089]                     __x64_sys_ioctl+0x18b/0x210
[  345.388937][ T6089]                     do_syscall_64+0xcd/0x4c0
[  345.395088][ T6089]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.402663][ T6089]    SOFTIRQ-ON-R at:
[  345.406637][ T6089]                     lock_acquire+0x179/0x350
[  345.412782][ T6089]                     _raw_read_lock+0x5f/0x70
[  345.418958][ T6089]                     sp_get+0x18/0xf0
[  345.424399][ T6089]                     sixpack_write_wakeup+0x20/0x390
[  345.431142][ T6089]                     tty_wakeup+0xe8/0x120
[  345.437062][ T6089]                     tty_port_default_wakeup+0x2a/0x40
[  345.443984][ T6089]                     uart_flush_buffer+0x37f/0x8a0
[  345.450564][ T6089]                     tty_driver_flush_buffer+0x61/0x80
[  345.457484][ T6089]                     tty_ldisc_hangup+0xe7/0x730
[  345.464017][ T6089]                     __tty_hangup.part.0+0x3d2/0x890
[  345.470996][ T6089]                     tty_ioctl+0x102d/0x1640
[  345.477073][ T6089]                     __x64_sys_ioctl+0x18b/0x210
[  345.483498][ T6089]                     do_syscall_64+0xcd/0x4c0
[  345.489635][ T6089]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.497164][ T6089]    INITIAL READ USE at:
[  345.501474][ T6089]                         lock_acquire+0x179/0x350
[  345.507959][ T6089]                         _raw_read_lock+0x5f/0x70
[  345.514447][ T6089]                         sp_get+0x18/0xf0
[  345.520257][ T6089]                         sixpack_write_wakeup+0x20/0x390
[  345.527351][ T6089]                         tty_wakeup+0xe8/0x120
[  345.533587][ T6089]                         tty_port_default_wakeup+0x2a/0x40
[  345.540875][ T6089]                         uart_flush_buffer+0x37f/0x8a0
[  345.547805][ T6089]                         tty_driver_flush_buffer+0x61/0x80
[  345.555076][ T6089]                         tty_ldisc_hangup+0xe7/0x730
[  345.561826][ T6089]                         __tty_hangup.part.0+0x3d2/0x890
[  345.568919][ T6089]                         tty_ioctl+0x102d/0x1640
[  345.575313][ T6089]                         __x64_sys_ioctl+0x18b/0x210
[  345.582066][ T6089]                         do_syscall_64+0xcd/0x4c0
[  345.588550][ T6089]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.596569][ T6089]  }
[  345.599061][ T6089]  ... key      at: [<ffffffff8f796038>] disc_data_lock+0x18/0xfe0
[  345.606955][ T6089]  ... acquired at:
[  345.610741][ T6089]    lock_acquire+0x179/0x350
[  345.615421][ T6089]    _raw_read_lock+0x5f/0x70
[  345.620101][ T6089]    sp_get+0x18/0xf0
[  345.624064][ T6089]    sixpack_write_wakeup+0x20/0x390
[  345.629328][ T6089]    tty_wakeup+0xe8/0x120
[  345.633730][ T6089]    tty_port_default_wakeup+0x2a/0x40
[  345.639171][ T6089]    serial8250_tx_chars+0x68e/0x860
[  345.644441][ T6089]    __start_tx+0x3e9/0x4a0
[  345.648930][ T6089]    serial8250_start_tx+0x368/0x530
[  345.654265][ T6089]    __uart_start+0x295/0x4c0
[  345.658960][ T6089]    uart_write+0x218/0xb30
[  345.663455][ T6089]    sixpack_receive_buf+0x3d0/0x1c90
[  345.668810][ T6089]    tty_ldisc_receive_buf+0x15a/0x1a0
[  345.674261][ T6089]    tty_port_default_receive_buf+0x70/0xb0
[  345.680134][ T6089]    flush_to_ldisc+0x268/0x780
[  345.684964][ T6089]    process_one_work+0x9cf/0x1b70
[  345.690065][ T6089]    worker_thread+0x6c8/0xf10
[  345.694809][ T6089]    kthread+0x3c5/0x780
[  345.699035][ T6089]    ret_from_fork+0x5d7/0x6f0
[  345.703802][ T6089]    ret_from_fork_asm+0x1a/0x30
[  345.708742][ T6089] 
[  345.711063][ T6089] 
[  345.711063][ T6089] stack backtrace:
[  345.716937][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: kworker/u8:9 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  345.716956][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  345.716967][ T6089] Workqueue: events_unbound flush_to_ldisc
[  345.716984][ T6089] Call Trace:
[  345.716993][ T6089]  <TASK>
[  345.716999][ T6089]  dump_stack_lvl+0x116/0x1f0
[  345.717024][ T6089]  check_irq_usage+0x7dc/0x920
[  345.717054][ T6089]  ? check_path.constprop.0+0x24/0x50
[  345.717075][ T6089]  ? __lock_acquire+0x1285/0x1c90
[  345.717086][ T6089]  __lock_acquire+0x1285/0x1c90
[  345.717098][ T6089]  ? lock_acquire+0x179/0x350
[  345.717110][ T6089]  lock_acquire+0x179/0x350
[  345.717122][ T6089]  ? sp_get+0x18/0xf0
[  345.717135][ T6089]  ? ldsem_down_read_trylock+0x11a/0x180
[  345.717151][ T6089]  ? ldsem_down_read_trylock+0x120/0x180
[  345.717166][ T6089]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  345.717178][ T6089]  _raw_read_lock+0x5f/0x70
[  345.717199][ T6089]  ? sp_get+0x18/0xf0
[  345.717209][ T6089]  sp_get+0x18/0xf0
[  345.717219][ T6089]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  345.717231][ T6089]  sixpack_write_wakeup+0x20/0x390
[  345.717243][ T6089]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  345.717255][ T6089]  tty_wakeup+0xe8/0x120
[  345.717274][ T6089]  tty_port_default_wakeup+0x2a/0x40
[  345.717287][ T6089]  serial8250_tx_chars+0x68e/0x860
[  345.717305][ T6089]  __start_tx+0x3e9/0x4a0
[  345.717318][ T6089]  serial8250_start_tx+0x368/0x530
[  345.717333][ T6089]  __uart_start+0x295/0x4c0
[  345.717350][ T6089]  uart_write+0x218/0xb30
[  345.717363][ T6089]  sixpack_receive_buf+0x3d0/0x1c90
[  345.717378][ T6089]  ? ldsem_down_read_trylock+0x120/0x180
[  345.717392][ T6089]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[  345.717408][ T6089]  ? __pfx_sixpack_receive_buf+0x10/0x10
[  345.717420][ T6089]  tty_ldisc_receive_buf+0x15a/0x1a0
[  345.717441][ T6089]  tty_port_default_receive_buf+0x70/0xb0
[  345.717455][ T6089]  flush_to_ldisc+0x268/0x780
[  345.717469][ T6089]  process_one_work+0x9cf/0x1b70
[  345.717487][ T6089]  ? __pfx_process_one_work+0x10/0x10
[  345.717503][ T6089]  ? assign_work+0x1a0/0x250
[  345.717515][ T6089]  worker_thread+0x6c8/0xf10
[  345.717531][ T6089]  ? __kthread_parkme+0x19e/0x250
[  345.717549][ T6089]  ? __pfx_worker_thread+0x10/0x10
[  345.717562][ T6089]  kthread+0x3c5/0x780
[  345.717574][ T6089]  ? __pfx_kthread+0x10/0x10
[  345.717587][ T6089]  ? rcu_is_watching+0x12/0xc0
[  345.717605][ T6089]  ? __pfx_kthread+0x10/0x10
[  345.717616][ T6089]  ret_from_fork+0x5d7/0x6f0
[  345.717635][ T6089]  ? __pfx_kthread+0x10/0x10
[  345.717646][ T6089]  ret_from_fork_asm+0x1a/0x30
[  345.717663][ T6089]  </TASK>
[  346.112758][  T976] pwc: recv_control_msg error -71 req 04 val 1100
[  346.119807][  T976] pwc: recv_control_msg error -71 req 04 val 1200
[  346.129881][  T976] pwc: Registered as video103.
[  346.241070][  T976] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32
[  346.254181][  T976] usb 2-1: USB disconnect, device number 40
[  346.312294][ T8148] udevd[8148]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory