last executing test programs:

12.857027427s ago: executing program 4 (id=1050):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x1, &(0x7f0000000000)="d7"})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup2(r1, r1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r6)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}})
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

8.849756951s ago: executing program 2 (id=1061):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

8.250655266s ago: executing program 1 (id=1062):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x6, &(0x7f00000000c0)={0xfffffffffffffdff, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ftruncate(0xffffffffffffffff, 0x2007ffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000100), 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x4085000)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, 0xffffffffffffffff)
close(r0)

8.225480702s ago: executing program 2 (id=1063):
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000f, 0x2172, 0xffffffffffffffff, 0x60f4b000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x7ffffbfd, 0x0, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
msgget(0x2, 0x624)
msgget(0x1, 0x240)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

7.987786731s ago: executing program 0 (id=1064):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002a000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.079857777s ago: executing program 1 (id=1066):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000006c0)=[@code={0x1, 0x65, {"440f20c0350f000000440f22c0b9e0010000b8f8ffffffba000000000f3066baf80cb8a0c06885ef66bafc0c66ed0f08c422f5294c9f67c462e199ef66bad004eccfb9800000c00f3235010000000f3036460f07"}}, @code={0x1, 0x4b, {"c40119de72800f07423b7104f3440fc7b1d0f05b000fc71cb6c442e59cf7c403a5688cd8240af532056445801d0068000000410f07c4c10d143e"}}, @uexit={0x0, 0x18}, @code={0x1, 0x77, {"0f20c035000000400f22c0c7442400bb000000c74424021bc78661c7442406000000000f011c24660fd9620866400fc7b2c44260e666b849000f00d0c4c37d39078943c10cbc9366ba4200b800000000ef66baf80cb8e26d9a89ef66bafc0c66ed26410f01cf"}}, @code={0x1, 0x61, {"410f01df0f67e0c74424004f190000c744240200000000c7442406000000000f0114248f2800a355f35fb93c020000b819f8c5aaba903f2f100f300f2360674e0fc7180f23e066400f3882302e0f01ca"}}], 0x1a0})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.972101866s ago: executing program 0 (id=1067):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@remote, @default, @null, @null, @null, @null, @null]}, &(0x7f00000000c0)=0x48, 0x400)
accept$netrom(r2, 0x0, &(0x7f00000004c0))
r3 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000080)=0x2)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a000000e80011"], 0x144}}, 0x0)

6.526301632s ago: executing program 4 (id=1068):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x100000000)

6.472251365s ago: executing program 0 (id=1069):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x81, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x7, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xa, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x43, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000200)={0x4, 0x1, 0x3ff, 0x10000003, 0x17, "3ecc0a00050000000000007f8000"})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

6.375905619s ago: executing program 1 (id=1070):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4e}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xea, 0x87, 0xad, 0x8, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0xe3, 0x68, 0xd3}}]}}]}}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000580)={0x18})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000), 0x5})
ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000900)={0x18, 0x0, 0x1000, 0x1004000})
ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000940)={0x8, r5})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, <r6=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, <r7=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r6, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r7})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x6, 0x0, 0x0, r7})
syz_usb_connect$cdc_ncm(0x6, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0xe4, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b281e55b"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xf1, 0x9, 0x9, 0x9a}, {0x6, 0x24, 0x1a, 0x100, 0x10}, [@obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0xe, 0xf3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf7}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0x9, 0x98, 0x4, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x5, 0x24, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x50, 0x81, 0x48, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xfe, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x2, 0x15, 0xff, 0x4}, 0xac, &(0x7f0000000140)={0x5, 0xf, 0xac, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x3, 0xf00, 0x1, [0x0, 0xff0030, 0x30, 0x0, 0x50, 0x3f]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0x4, 0xc}, @generic={0x58, 0x10, 0x1, "f15e253f820ca39bebca1f10817d5942620949697babbef253404e6588ebe9f3e138e4d05eb1a149d3c777b11504e486c0c9a722f795115c062dd76e0359a97ba1d86df8d0b042ffd4132459cd00719b6b861b502b"}, @ssp_cap={0x10, 0x10, 0xa, 0xf8, 0x1, 0x1, 0xf, 0xae89, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d5cf08df2e8a8522a3f233085d28325a"}]}, 0x4, [{0xfd, &(0x7f0000000200)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]})

5.986361191s ago: executing program 4 (id=1071):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x50)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xd8, 0x1403, 0x100, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x48010)
fcntl$getflags(r0, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newtaction={0xd28, 0x30, 0x1, 0x0, 0x0, {}, [{0xd14, 0x1, [@m_police={0xcc8, 0x6, 0x0, 0x0, {{0xb}, {0xc54, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x9, 0x9, 0x0, 0x5f9, 0x40, 0x400, 0x1, 0x2, 0x9, 0x8000, 0x9, 0x1b97c, 0x4, 0x2, 0x1, 0x200, 0xa, 0x5, 0x200, 0x8, 0x3, 0x82, 0xe7, 0x3ff, 0x9, 0x800, 0x6, 0xe, 0x9, 0xc, 0x401, 0x1, 0x1, 0x90f, 0x80000001, 0x5, 0x497, 0xd, 0x401, 0xb3, 0xffffffff, 0xfdd, 0x3, 0x5, 0x50c, 0x8, 0x7, 0x42ad, 0x5, 0x0, 0x7, 0x2, 0x2, 0x1, 0x7cc7, 0x4, 0x20e59f6e, 0xff, 0x8001, 0x100, 0x27b, 0x6, 0x5, 0x3, 0x9, 0x6, 0xfffffffd, 0x0, 0x4, 0x9, 0x1, 0x2, 0xfffffff8, 0x7, 0x3, 0x4, 0x5, 0x8001, 0x7f, 0x1, 0x2, 0x4, 0x4, 0x3, 0xa, 0x9, 0x2, 0x5, 0x0, 0x40, 0x6a10, 0x8, 0x0, 0xe, 0x4, 0x11, 0x3, 0x8, 0x2, 0x96f, 0x9, 0x8, 0x9, 0x2, 0x7f, 0xf, 0xfffffffe, 0x9, 0x80, 0x5, 0x4, 0x1, 0x401, 0xf, 0x11, 0xe, 0x64e, 0xe, 0x3, 0x7ff, 0xa57, 0xb0, 0x483, 0x6, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fff, 0xf, 0x30000, 0x0, 0xf88, 0x9, 0x76620000, 0x4, 0x4e7c, 0x4, 0x8033, 0x3, 0x81, 0x3, 0x3, 0x2, 0x1, 0x28f, 0x7, 0x80000000, 0x3, 0x8, 0x9, 0x9, 0x4, 0xb5, 0x7ff, 0x3, 0x9, 0x9, 0x7fffffff, 0x4, 0x9, 0x40, 0x3ff, 0x800, 0xfffff2ae, 0x8, 0x800, 0x7fff, 0x8, 0x1, 0x2, 0x5, 0x8, 0x0, 0x5, 0xfffffffd, 0x4, 0x5521, 0x3, 0x80, 0x9, 0x8001, 0x6, 0x10, 0x101, 0x2, 0x9, 0x0, 0xffffffff, 0x5, 0x9, 0x2504a605, 0x1, 0x7, 0xffff8001, 0x13e, 0x7f, 0x6, 0x8, 0xfff, 0x1c, 0x28e, 0x9, 0x4, 0x1000, 0x9b, 0x0, 0x8, 0x2, 0xfffffff9, 0x3, 0x1000, 0xffffffff, 0xd72, 0x2, 0xb, 0x7bf, 0x31c2, 0x9, 0x2, 0x9, 0x2, 0xfffffffa, 0x6c, 0x10, 0x3d0, 0x2d15, 0x400, 0x7, 0x8, 0x0, 0x6, 0x8000, 0x7, 0x4, 0x1ce, 0x7, 0x2, 0xffff, 0x800, 0xfffffff7, 0x5, 0x362, 0xb, 0x3, 0x3, 0x7, 0xd, 0x826, 0x7f, 0x7, 0x3, 0xfb, 0x7fffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc0000000000000}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4ce5, 0x48, 0x2, 0x7506, 0x7, 0x8, 0x1, 0xfffffffa, 0x400, 0x1, 0x7, 0x4, 0x8001, 0x1, 0x8, 0x80, 0xc39, 0x664, 0x81, 0x9, 0x3, 0x3, 0x80, 0x1, 0xf040, 0x0, 0x100, 0x73a, 0x4, 0x7, 0x6, 0x6799, 0x7fffffff, 0x7f, 0x8, 0x0, 0x8, 0x4, 0x3, 0x1ff, 0x7fffffff, 0xaf, 0x8, 0x40, 0x9, 0x80000000, 0x5dbcf6f, 0x42e, 0x6, 0x0, 0x8001, 0xfffffffa, 0x5, 0xf9, 0x99, 0x3, 0x4, 0x6, 0x8, 0x53, 0x4a1, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0xfffffffa, 0x2, 0x3511, 0x1ff, 0x8, 0x6, 0x1, 0xe7d7, 0x7, 0x12, 0x5, 0x2, 0x8, 0x8, 0x1, 0xcf1, 0x3ff, 0x9, 0x3, 0x4, 0x7, 0x41ae, 0x0, 0x5, 0xedc, 0x9, 0x0, 0x9, 0x4, 0x6, 0x5, 0xa1a5, 0x7, 0x10001, 0x5, 0x8, 0xf569, 0x8000, 0x8, 0x6, 0x9, 0x1, 0x8, 0x76, 0x27b, 0x3, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x5, 0x8, 0x3, 0xae, 0x3997, 0x5, 0x81, 0x8, 0x800, 0x4, 0x8, 0x837, 0x0, 0xfffffffe, 0x101, 0xf, 0x401, 0x2, 0x0, 0xca09, 0x1, 0xffffff7f, 0xb, 0x1, 0x7, 0xa, 0x101, 0x3, 0x1ff, 0x52, 0x4, 0x5, 0x2, 0x6, 0x8, 0x2000000, 0x1, 0x81, 0x8, 0xa, 0x7fff, 0x5a, 0xffffffff, 0x1000, 0x8, 0x7, 0x10, 0xeaf5, 0xc911, 0x5, 0x4, 0x2, 0x90000000, 0x2, 0x5, 0x1, 0x101, 0x0, 0x8, 0x6, 0x9, 0x8, 0x0, 0x9, 0x6, 0x1, 0xd1, 0x2, 0x1ff, 0x4, 0x8, 0x9, 0x6, 0x4, 0x6, 0x9, 0x0, 0x4, 0x5, 0x2b90, 0x3, 0x3, 0x6, 0x7, 0x6, 0x4, 0x9, 0x1, 0x0, 0x101, 0x8001, 0x1ff, 0x6, 0x7, 0x700, 0x7ff, 0x100, 0x5, 0xed, 0x80, 0x7, 0x3, 0x3a0, 0xc, 0x66, 0xfffffffb, 0x9, 0x4, 0x2, 0x0, 0x9, 0x3ff, 0x7fffffff, 0xfffffffd, 0x4c5, 0x6, 0xfff, 0xfffff612, 0xfffffff9, 0x9, 0x0, 0xaf18, 0xa, 0x2, 0x8, 0x4, 0x3, 0xb, 0x5, 0xac, 0xff, 0x3, 0x97, 0x401, 0x2, 0x7, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd37e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xe2, 0x7fc00000, 0x4, 0xa1b, 0xa153, 0x8, 0x2, 0x4, 0xd181, 0x3, 0xa, 0xffffffff, 0x8, 0x3, 0x7, 0x6, 0x7, 0x80, 0xf, 0x7fffffff, 0x9dd, 0x2, 0x0, 0x6, 0x3, 0x3, 0x600000, 0x45, 0x1b, 0xd11b, 0x7, 0x72215156, 0x0, 0x5, 0x7fffffff, 0x9, 0x7fff, 0x0, 0x81, 0xcb29, 0x5, 0x196, 0x2, 0x1000, 0x8, 0x1, 0x7, 0x3, 0xfe, 0xa5, 0x3, 0x2, 0x7, 0xa, 0x6, 0x4, 0x1af2, 0x7ba, 0x401, 0x8, 0x1, 0x20, 0x2, 0x0, 0x3, 0x6, 0x6, 0x7fffffff, 0x1, 0x82dc, 0x6, 0x3ff, 0x6, 0x7, 0xbc75931, 0x7, 0xd2, 0xa626, 0xfff, 0x6, 0x1, 0x7fff, 0x3, 0xc399, 0x4, 0x0, 0x0, 0x8, 0x6, 0x8, 0xf, 0x8001, 0x55, 0x409, 0x9, 0xff, 0x5, 0x7, 0xd, 0xd189, 0x4, 0x7fffffff, 0xff, 0x2800000, 0x1, 0x0, 0x63301bfd, 0x4, 0x138, 0xffffffff, 0x0, 0x4, 0x2, 0xeac, 0x9, 0x9, 0x7f, 0x10, 0x8, 0xe, 0x6, 0x6, 0x2, 0xfffffffe, 0xffffffff, 0x232, 0x0, 0x7841, 0x9, 0x0, 0x9bcd, 0x1, 0xe, 0x6, 0x400, 0x2, 0xfffffff6, 0x0, 0x7f, 0xfd81, 0xe35, 0xc119, 0x9, 0x1, 0x32, 0xffffff01, 0xfffffff9, 0x9, 0x9, 0xdf5, 0x390, 0xda, 0xfffffff7, 0x10, 0x2, 0x4, 0x5, 0x4, 0x3, 0x3, 0xfffffffb, 0x3, 0xffff8000, 0x8, 0x2, 0x6, 0xfffffff7, 0xffffff81, 0x6, 0x6, 0x3d86, 0x2, 0x3, 0x9, 0x4, 0x8, 0x6, 0x5, 0x5, 0x8c, 0x49, 0x200, 0x5, 0x6, 0xb, 0x1, 0x5, 0x9, 0x7, 0x3, 0x200, 0x8, 0x7, 0x2, 0x6, 0xa, 0x6, 0x2, 0x34d, 0x0, 0x5, 0x7, 0x2, 0xffff, 0xa, 0xffffffff, 0x81, 0x3, 0x2, 0xfffffffe, 0x1000, 0x40, 0x6, 0x0, 0x40, 0x2, 0x1, 0x81, 0x1, 0x9, 0x8001, 0x5, 0x5, 0x3ff, 0x3, 0x30a, 0xffffffff, 0x4, 0x4, 0x400, 0x5, 0x3, 0x7, 0x8, 0x7, 0x0, 0x0, 0x2, 0x1, 0x4, 0x7, 0x86, 0x9, 0xb8, 0xd, 0x7ff, 0x5, 0x7, 0x2, 0x3ff, 0x3ff, 0x6, 0x47, 0x1d, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]]}, {0x4c, 0x6, "1312a46971a3317df04b01c72ddd0e14e8cc31aa4e9e65e27e253309cde00629d806c273c29972146065191d164d0e9bc9486e615d3d362e7dbaf04645c798bcaf0f2e7ab89a7812"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xd28}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r3, @ANYRESOCT=r4, @ANYBLOB="76444140dd63f98b3593dd6ec8ec5954dafc2976d64d307906e6514a83d10f214ef60f86038a042046f04ab8ae586112484410a045ee2404822300593dc91432194dcf526abdba2413620cfeeb5a880be1f8cb97841f1660eae9c81b80e8ee9d311ad3a9dea333834dd0883f"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23)
write(r9, &(0x7f0000000140)="1e1508", 0x3)
connect$qrtr(r8, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc)
bind$qrtr(r8, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800)

5.819203599s ago: executing program 2 (id=1072):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x81, 0x18}, 0xc)
syz_emit_ethernet(0x152, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x2, [0xfd2, 0x8d7, 0x194, 0x43e]})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20)

5.087271969s ago: executing program 0 (id=1074):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
open(0x0, 0x145142, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=0000000000000000010000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b79da42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4f000093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e63fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5649209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9eb0641fd6d5e80979a3d985089e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469f242119ad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x800})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffc0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)

4.744174137s ago: executing program 4 (id=1075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
listen(0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x81, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x7, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xa, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x43, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000200)={0x4, 0x1, 0x3ff, 0x10000003, 0x17, "3ecc0a00050000000000007f8000"})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

4.501477536s ago: executing program 0 (id=1076):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xf2f3, 0x24100)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="e6", 0x1})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
close(0x3)
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0)

4.332296921s ago: executing program 4 (id=1077):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x80800)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_mtu=0x101}})
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000001}, 0xc)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80})
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x0, @rand_addr=0x64010100, 0x4e24, 0x1, 'lblc\x00', 0x10, 0x80000001, 0x7d}, {@rand_addr=0x64010102, 0x4e21, 0x2, 0xb09, 0x0, 0x5c2}}, 0x44)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={<r4=>0x0}, &(0x7f00000002c0)=0x8)
socket$packet(0x11, 0x2, 0x300)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={<r5=>r4, 0x34, "b0730e0d1c1d2d3677ed157aab6a89dc644c9d5c2c8cc5b45c79c9f2f3e7d5f9dca01b8c8efa73e438bb23b80abccfaead20755f"}, &(0x7f0000000380)=0x3c)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x6, @mcast2, 0x2}}}, &(0x7f0000000480)=0x84)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000004c0)={0x8, 'bond0\x00', {'vlan0\x00'}, 0x1})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000500)=0xc, 0x4)
r7 = gettid()
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f00000009c0)={0xd, 0x8, &(0x7f00000005c0)})
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000a00)={0x9c, 0x75, 0x1, {0x91, "4cea2d4de7b5808bac533b0f780d087cb65b6db28b8232dd7cf5e230d67e5e04855647f9bf99f0b0dee5c9b8643596db5edeecde4a5c25a9cd389305810a37c5f72e9bff6e97e539c505eca78a29ad69fe6cba74a094f58512e9d7ca3477161c224a3a4620b47820c5ce168bfb7bdfc873eb0279281fbd3f2afca7a05392f7798322268f2e92e25998374e7a6f7af1ef4b"}}, 0x9c)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e22, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8}, {0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x0, {[0x18000000, 0x3, 0x9, 0x1, 0x6, 0x1, 0x4, 0xfffffff8]}}, 0x5c)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000b40)={@multicast1, @remote, 0x1, 0x4, [@remote, @multicast2, @multicast2, @multicast2]}, 0x20)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000b80)={0x1, 0x746})
sched_setscheduler(r7, 0x0, &(0x7f0000000bc0)=0x4)
socket$inet(0x2, 0x4, 0x5)
sendmsg(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000c00)="8234b0afca99117338aa7ce7baf4575dbe70d3fb2a9bfa7ffbaf5ab556cbbd4ba1b4d41356c1965dcfe8caef57c4d8728ccfa4076ab340c401d54f26ab9f48f21aac406a174752b01de893eceeb8a05fe64e01666c05aada090c9f81ff078d00a35b601468cf233abbfbdca3", 0x6c}, {&(0x7f0000000c80)="705aa7503c1740e544e720caec98883dc418a99a6ac41d5aecdc33cd6b514841f69b53796fb3e3f59ddd8323217c9672fb0b7b5f6167581e5bacc28d0b3947236b74c0d6e4", 0x45}, {&(0x7f0000000d00)="e00e5138998dd3a3110a9cab537d4077c150cb2e2394681ec30d332d2e128c830273a205bab23c6aab971716da7387417c9a3e00431fa2fb03aa25c57d27f95aa84e3eea9919180b4fb38d7033decb343c0b4f75eaf46625534aff2a92e0a0187078bd00c3e07a8e480d9c569cb48fd1905a5a8e4793a028e3f56fed6819d8cbce23c71665efc65cbdab51d591aef5dcee2eff42099b4b333e782c9617354cbf69cc4032", 0xa4}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="f7e63cf06b85d0d3c140a8fdf9b037488af90173edaf55588a7fd537f4ac502383af2c2f4f75387afce0f20733b01861b3745a2bcfbb18b708deb68e1a5370fbf9d99aa18f4c8731de591a7a97bc6044c801203005480dca2205cc8f97726a53e2e83824d0c1f06db5da1ee1c5a629990bc8668b5fd79e2285ca7dfc88b4b2380a8a33d0320bc59665b207892348aba432dce6d122057410c64ca2c96bc0de5222e81f953dcd4f7d48feab968959abf92e48714b10c9e39fbce8ebaa419192a3bb7129755784a3758463c7354e965f7e493dc15c2466a712bc92af613e85b3c4b9adb34d6bae1704a509301c4e403f8265e95dd04b1370", 0xf7}, {&(0x7f0000001ec0)="18ca66062dd2d1a3a6dd912778e99a9334daa24438023b97c5ead5d2a868e0203e7cb7e75acb341110ed22dcaeb3031a62a6a075e79369c035ecff1e11ea958eb3a8dce11bbbe383a1c6175f53235362c74f70223ff79631c21b439e22f97514ab928a3b46f87e86e724b27ba30a5a5216380d163af953", 0x77}, {&(0x7f0000001f40)="e01486d3bd8a0877f98de27252f73cdcc81adfbb08b184025dc07240547fc928217c21f3044f08c58d1dae16f4d3fb926833be99bedcb78d1dc8e434d4e46598bd28c371e539d39f95183864cca5b5da47a17a032ec2c478c83eacbdf483d394b115baa24629f659525369e83d3c4ad453212dbee741aee2f85cc1af5956cf4f870b40af36fdfbad92ac11665aef263d4ca88854efab9b003141b718015eaf6bd11b3c5e51120446abba8eae76deaff55c9f2a44870eca0c3d732cb43ad9e1", 0xbf}], 0x7, &(0x7f0000002080)=[{0xb8, 0x103, 0x4, "5f2df42e2de3776c61b71e0dbce2520e6c442ccc96f81b3289abf8b850b11a37ddd3222da01371e33a1e12a443c184d0f27ff9d4d307d32e892f890be55e3abea880738d34188e82b4af913b2711ee95e6ac220c98e1d1e89abf3f9e55cebb6c19ef215874a9ae004d1eca9f81ee617617140401da75fde19e8a6b4e00871bc71d0c083559ae95784b031a9845bfb2432d333114b2e6c4ffcdabbe4d2d7b76b648285406"}, {0x110, 0x111, 0x6, "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"}, {0xc0, 0xff, 0x6, "705c1340365014ec6fc1b676a09860f0d0c21728e1880a83c8fc10a935e1486ec18180299d3fa272e563a682d88033750701541d1b3e81d9f65dbf851bab16d7ebb8739aa546f37513350c8ef588c299288519686553a0903b313eaf58f0a8b58e4319a1af50aca70cb3fa4ae8caf24c8e7f7bb3c6ca03b682617ef3d9316d34c8ca0431558b372a347d981a972a8d0360ce85d83db952c891c3044e979dbff7c9fdeaddf4387051d1720c9a5623b2"}, {0x28, 0x88, 0x1, "44540932871e8ed0421a5f61dbcca325c009ab78687a"}, {0x20, 0x108, 0x1, "be50ac0988bdc0a8d89ff9"}, {0x18, 0x10f, 0x8, "93"}, {0xb8, 0x109, 0x1, "db007a3d8bf1f003eac80bd4ba576bc61f31c0b7ce3afc952e98c62c0073c290eb9e7aff7a3b1018b0fd4f278fd1326957ca5a9372dc19c6e85082cfa5177858689c800121c64e819992f4ca014a645efcc7cc6b269ed115989de2b89921a3e655277bcd23339fbd3e14383709273e5b86e178569721c920df55905a7347ea017a2f102f27e35c0d77aa3c8de156676f686af22f4e101ce23c8d6222626f51f41e4911653ad0d6"}, {0x58, 0x103, 0x9, "162e0762d80029224155fe0fcfb24f38b20697df5db488fe0494034b38024818153de44c55dd18e816319a47e3b809f4f4ba7d57def02a92a31779dbcc13858e7927f4f65ee74174"}], 0x3f8}, 0x10)

3.79143729s ago: executing program 1 (id=1078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1a, 0xb, 0x1e8, &(0x7f0000000680)})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0xff1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)

3.616813418s ago: executing program 4 (id=1079):
r0 = socket(0x400000000010, 0x3, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)

3.163547978s ago: executing program 3 (id=1081):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty}, 0xc)

3.160484572s ago: executing program 2 (id=1082):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f0000000300), 0x0}, 0x20)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.106769951s ago: executing program 1 (id=1083):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f0000000300), 0x0}, 0x20)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.016107493s ago: executing program 3 (id=1084):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x81, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x7, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xa, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x43, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000200)={0x4, 0x1, 0x3ff, 0x10000003, 0x17, "3ecc0a00050000000000007f8000"})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2.244774186s ago: executing program 3 (id=1085):
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[], 0x122}}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getpeername(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8}, 0x10)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x9, 0x2a7345, 0x20d37, 0x20})
unshare(0x14020080)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x10b200, 0x1f7)

1.809386643s ago: executing program 1 (id=1086):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x4)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0xe, @private1, 0x7}}, 0x24)
listen(r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000109344000000000000000000fc02000000000000fe00000000000000000000000000000000000000000000000000000000000000000000000000000006ad62add2e1a1f8aa2d181163ddb16575397a4fbbbb62b40aa3350833b5ed5c951ed45776485ebeea68bdace2c3cdd80bb3dfa474a4ac636908b9c332e4b5b557c5e744be", @ANYRES8=r2, @ANYRES32=r0, @ANYRES32=r2], 0xf0}, 0x1, 0x0, 0x0, 0x4d001}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f048})
socket$pptp(0x18, 0x1, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x80, 0x0, 0x4, 0x0, 0x19, "00000800000000000000000000000000fff017"})
r5 = syz_open_pts(r4, 0x141601)
gettid()
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={0x0, 0x1, 0x1ff, 0x0, 0x0})
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x31, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000300)="7ab0b97d7cc34828bca91d4cf8fc3fb8c67e5edfe6532f48401278a7bb46cf5c46177e89b04c5f87c29abe9f97aa5351e1452dc2ec4d260e107d9617626c1fef7d73c0f066b8745a9860afa7e9bbb98d62c44dc770c9cdf31be22ec5a0bd2ae381ae0cbf7738af91e66a43b7e86369e32538d9"}}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f00000000c0)={{0x77359400}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
listen(r0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e)

1.788176942s ago: executing program 2 (id=1087):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, r1, 0x1, 0xfffffffe, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', 0x0})

1.476336114s ago: executing program 3 (id=1088):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r0, &(0x7f0000000040)={{0x3, @null, 0xffffffff}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

927.6833ms ago: executing program 0 (id=1089):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYBLOB="5adee9aa"], 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x0)
syz_usb_disconnect(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0)
socket(0xa, 0x3, 0x3a)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
close(0x3)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004d"], 0x0)

812.117703ms ago: executing program 3 (id=1090):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x1)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x101, 0x7, 0x4f424752, 0x1, 0xa, [{}, {0x34f2, 0x4}, {0xf7e0, 0x8}, {0x20000000, 0x5}, {0x2, 0xffffffff}, {}, {0xd, 0x2}, {0xe1c3, 0x7}], 0x50, 0x8, 0x1, 0x1, 0x4}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x40000000, 0x3, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)}], 0x1}, 0x0)
r7 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0)
pipe2(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, &(0x7f0000000140), 0x4, 0x0)
dup3(r4, r9, 0x0)
r10 = dup(r2)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x4, 0xffff1000, 0x1000, &(0x7f0000013000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x7, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newsa={0x138, 0x10, 0x832152701231f605, 0x70bd27, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x42, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x8001000000000001, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xd, 0xde}, {0x0, 0x6, 0x20}, 0x70bd2b, 0x0, 0x2, 0x4, 0x0, 0x65}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040891}, 0x40080)

644.983465ms ago: executing program 2 (id=1091):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="09000000000000000000000000000000010000040c00048008000140800000010c000480080001400000000f0c000480080001400000000108000340000000020c00048008"], 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x38, r2, 0xeeeeeeee})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
listen(r0, 0x7)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
readv(r3, 0x0, 0xfffffffffffffe0e)
shutdown(r0, 0x1)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="f221937056cc72c6a075b0533393f95a8f4afddd47f8fb251d5be2de5124c6b4d11c43a0e8fb455199ea96071a7f3ecda596dd73d4824fd95b04755731a696b1fcf3b5e5e7a9ad0287066aa1344b0c1fed6df5f0193a76d45833017d2d5104d310150130ad6971920867f3f718e27294f820ecf3709a4e9e5f5ec0bfd5e4ddaec600dba1448fb9cf2c4944e8e3486bd2b12b0eb62aee39a53a88da", 0x9b}, {&(0x7f00000002c0)="855a6305cce5f6b84f6e1befb94ee4de372998fe58421117fa62e35cdc9f69476b6772e124d4a11be93234b703fb15fa10b335f2783699f6009b9f6ecc7682574e6c387a250bac4d621e91a7bb69a623c17d74afd2d5dd2d10ba4c683d0117a32d47c3be9df9380047d77a59282c60240e4560fc22783c85281522175316c8bf10317b61", 0x84}, {&(0x7f0000000040)="6b3ff29acbd652838c7eda0f4fd9a9726c6029e03efd5aa26d4c", 0x1a}, {&(0x7f0000000380)="4dfe755428a39b33d035a01339af03edc2e776566474268c7bbbd89454e6c9ed3cd7f292a1c4b557ca6962ec6afc908c64019eb16769bd6877e0a6d70bf535d57d6b08706c007503c067c8e17a783f7f3a2b06224c41de37105b86f3845a54e52f8623018e83d2d307df5fd5b2443650a678e5a5ca96d42c6a5d7440d48210c41d9ebb6d96a97f7852c09875d585e7e96f0422bbb4c29b9f3c3b248f5724bdfb420d7602b0ae11c394dd30436abfc4619376b0438f439475824904167ed888742d2f132fbee86bac096b3d0bcceb833d1476eddf5fe8", 0xd6}, {&(0x7f0000000480)="d6feb529491a432be7046ce759ff", 0xe}, {&(0x7f00000004c0)="cc055d1dbed40cb048e2711ae0a770cf249456ac77a25b3d029168239142073021723d75ecddc86b4dae6b97de8c86723be0ae2cd1975e19b3e91d04e9d7dfae4fd1eee430c7ca83cfeeb8bf2097361c8d28a03b19d42c4cfce303005453709260e5a4b08b124952ee5849c704ea5af10e5f93776cf56522d5b424d34748d844a7921372c74ad549c09ad5e6b7d350353163a9c259388054e25737d3fdc8238340e6d5cda3fdb78e390a0cf6083f3828a476249c85c28ab393dc8ae00bdf871f849062084fcbb26dfcafa8ea36eba0f961b69ecec491", 0xd6}, {&(0x7f00000005c0)="ffb2aa324dc366283c3f16d6e1b63e460d92a145484c73b2a9723fcca812b591d611949f458223d10f685e3b9279", 0x2e}, {&(0x7f0000000600)="0787c8cba7", 0x5}], 0x8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee3, &(0x7f0000000240)=""/90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r6, 0x5, &(0x7f0000000740)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c)

0s ago: executing program 3 (id=1092):
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000640)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r3, 0x47bc, 0x20, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x24044800)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000001580)="18", 0x1, 0x20008084, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
syz_fuse_handle_req(r8, &(0x7f00000015c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local})
clock_gettime(0x4, &(0x7f0000000980))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)

kernel console output (not intermixed with test programs):

pid=7862 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  211.338832][   T30] audit: type=1400 audit(1750008784.441:431): avc:  denied  { setopt } for  pid=7862 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  211.461506][ T7865] overlayfs: missing 'lowerdir'
[  211.814324][   T78] uclogic 0003:5543:0004.0005: No inputs registered, leaving
[  211.849947][   T78] uclogic 0003:5543:0004.0005: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0
[  211.870431][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short
[  211.902653][   T78] usb 3-1: USB disconnect, device number 10
[  211.913112][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -71
[  211.935991][ T5935] usb 2-1: can't read configurations, error -71
[  211.965707][ T7872] fido_id[7872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  211.966880][ T7875] tipc: Failed to remove unknown binding: 66,1,1/0:3531820346/3531820348
[  212.017792][ T7875] tipc: Failed to remove unknown binding: 66,1,1/0:3531820346/3531820348
[  212.135188][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'.
[  212.542202][ T7890] Bluetooth: hci0: Opcode 0x080f failed: -22
[  213.297552][ T7908] netlink: 'syz.2.527': attribute type 29 has an invalid length.
[  214.144396][ T7914] overlayfs: missing 'workdir'
[  214.250212][   T30] audit: type=1400 audit(1750008787.421:432): avc:  denied  { append } for  pid=7909 comm="syz.4.528" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  214.737247][ T5141] Bluetooth: hci0: command tx timeout
[  214.855193][ T7920] tipc: Failed to remove unknown binding: 66,1,1/0:2395425236/2395425238
[  215.015068][ T7920] tipc: Failed to remove unknown binding: 66,1,1/0:2395425236/2395425238
[  215.040457][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.531'.
[  215.277309][   T30] audit: type=1400 audit(1750008788.541:433): avc:  denied  { connect } for  pid=7925 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  215.432125][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  215.441241][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'.
[  215.777393][ T7944] lo speed is unknown, defaulting to 1000
[  216.390598][ T7956] overlayfs: missing 'workdir'
[  217.141380][ T7965] binder: 7959:7965 ioctl 4018620d 0 returned -22
[  219.364105][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'.
[  219.787967][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'.
[  220.325208][ T8001] overlayfs: missing 'workdir'
[  220.694481][    T9] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  220.702099][    T9] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  220.709531][    T9] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[  220.723476][    T9] hid-generic 0000:0004:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  220.799891][ T8005] xt_l2tp: v2 sid > 0xffff: 262144
[  220.989592][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'.
[  221.737850][ T5935] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  221.874254][ T8003] fido_id[8003]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  221.905631][ T8011] capability: warning: `syz.0.555' uses 32-bit capabilities (legacy support in use)
[  221.937748][ T5935] usb 3-1: Using ep0 maxpacket: 32
[  221.944269][ T5935] usb 3-1: config 0 has an invalid interface number: 15 but max is 0
[  221.952698][ T5935] usb 3-1: config 0 has no interface number 0
[  221.959603][ T5935] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.984657][ T8015] ucma_write: process 425 (syz.0.555) changed security contexts after opening file descriptor, this is not allowed.
[  221.996950][ T5935] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.010755][ T5935] usb 3-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=b2.bf
[  222.020724][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.029888][ T5935] usb 3-1: Product: syz
[  222.039879][ T5935] usb 3-1: Manufacturer: syz
[  222.047948][ T5935] usb 3-1: SerialNumber: syz
[  222.257019][ T5935] usb 3-1: config 0 descriptor??
[  222.569345][   T30] audit: type=1400 audit(1750008795.831:434): avc:  denied  { map } for  pid=7994 comm="syz.2.552" path="socket:[16802]" dev="sockfs" ino=16802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  222.596322][ T5935] mos7840 3-1:0.15: missing endpoints
[  222.625114][ T5935] usb 3-1: USB disconnect, device number 11
[  222.935764][ T8024] bridge0: port 3(team0) entered blocking state
[  222.942454][ T8024] bridge0: port 3(team0) entered disabled state
[  222.949431][ T8024] team0: entered allmulticast mode
[  222.954579][ T8024] team_slave_0: entered allmulticast mode
[  222.960380][ T8024] team_slave_1: entered allmulticast mode
[  222.974115][ T8024] team0: entered promiscuous mode
[  222.979208][ T8024] team_slave_0: entered promiscuous mode
[  222.986241][ T8024] team_slave_1: entered promiscuous mode
[  222.994362][ T8024] bridge0: port 3(team0) entered blocking state
[  223.000708][ T8024] bridge0: port 3(team0) entered forwarding state
[  224.830090][   T30] audit: type=1400 audit(1750008798.101:435): avc:  denied  { map } for  pid=8043 comm="syz.2.567" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  224.870906][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  225.037694][ T5935] usb 1-1: Using ep0 maxpacket: 32
[  225.045100][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  225.078493][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  225.097586][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  225.121037][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  225.149683][ T5935] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  225.167660][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.175702][ T5935] usb 1-1: Product: syz
[  225.193393][ T5935] usb 1-1: Manufacturer: syz
[  225.200362][ T5935] usb 1-1: SerialNumber: syz
[  225.302366][ T5935] usb 1-1: config 0 descriptor??
[  225.618598][ T8051] input: syz1 as /devices/virtual/input/input14
[  225.663064][ T5823] Bluetooth: hci4: command 0x0405 tx timeout
[  225.726770][   T30] audit: type=1400 audit(1750008798.731:436): avc:  denied  { getopt } for  pid=8043 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  226.045578][ T5935] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[  226.171967][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.198101][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.232793][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.292314][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.353567][ T6406] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.443880][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.512951][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  226.523018][   T30] audit: type=1400 audit(1750008799.781:437): avc:  denied  { create } for  pid=8057 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  226.766100][ T8060] netlink: 2 bytes leftover after parsing attributes in process `syz.2.571'.
[  226.782287][   T30] audit: type=1400 audit(1750008800.031:438): avc:  denied  { ioctl } for  pid=8057 comm="syz.2.571" path="socket:[16048]" dev="sockfs" ino=16048 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  226.856399][   T30] audit: type=1400 audit(1750008800.051:439): avc:  denied  { setopt } for  pid=8057 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  227.021044][   T30] audit: type=1400 audit(1750008800.051:440): avc:  denied  { write } for  pid=8057 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  227.332648][   T10] usb 1-1: USB disconnect, device number 8
[  227.356264][ T8057] delete_channel: no stack
[  227.960074][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[  228.628658][ T8078] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.570'.
[  229.171254][   T30] audit: type=1400 audit(1750008801.881:441): avc:  denied  { mount } for  pid=8072 comm="syz.3.570" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  229.252970][   T30] audit: type=1400 audit(1750008801.891:442): avc:  denied  { search } for  pid=8072 comm="syz.3.570" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  229.274355][   T30] audit: type=1400 audit(1750008801.891:443): avc:  denied  { unmount } for  pid=8072 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  229.524447][ T8083] netlink: 'syz.2.576': attribute type 4 has an invalid length.
[  229.576598][ T8083] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.576'.
[  230.631078][ T8109] pimreg3: entered allmulticast mode
[  230.854691][ T8112] mkiss: ax0: crc mode is auto.
[  230.930833][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  231.079353][ T8113] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000008'
[  231.534273][   T24] usb 3-1: Using ep0 maxpacket: 32
[  231.563460][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  231.706858][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  231.736867][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  231.807156][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  231.829321][   T24] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  231.838720][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.846696][   T24] usb 3-1: Product: syz
[  231.857726][   T24] usb 3-1: Manufacturer: syz
[  231.862404][   T24] usb 3-1: SerialNumber: syz
[  231.878501][   T24] usb 3-1: config 0 descriptor??
[  231.883909][ T8119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.584'.
[  231.888658][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  231.915771][ T5175] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  231.927686][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  231.937480][ T8118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.971426][ T5175] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  232.079356][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86
[  232.196857][ T5175] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  232.281183][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024
[  232.292768][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  232.307458][   T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  232.317705][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.329174][   T10] usb 5-1: config 0 descriptor??
[  232.334718][ T8116] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  232.343292][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[  232.364000][ T5175] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  232.926493][   T10] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[  232.955287][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  232.990877][   T10] usb 5-1: MIDIStreaming interface descriptor not found
[  233.113376][   T30] audit: type=1400 audit(1750008806.381:444): avc:  denied  { append } for  pid=8131 comm="syz.0.588" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  233.314194][   T30] audit: type=1400 audit(1750008806.381:445): avc:  denied  { getopt } for  pid=8131 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  233.572064][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'.
[  233.900762][  T976] usb 3-1: USB disconnect, device number 12
[  236.344739][ T8146] syz.0.590 (8146): drop_caches: 2
[  236.355983][ T8146] syz.0.590 (8146): drop_caches: 2
[  237.159640][  T910] usb 5-1: USB disconnect, device number 10
[  237.451949][ T8159] netlink: 304 bytes leftover after parsing attributes in process `syz.0.596'.
[  237.921153][   T30] audit: type=1400 audit(1750008811.191:446): avc:  denied  { read write } for  pid=8166 comm="syz.0.598" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  238.958043][   T30] audit: type=1400 audit(1750008811.191:447): avc:  denied  { open } for  pid=8166 comm="syz.0.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  239.027705][   T30] audit: type=1400 audit(1750008811.221:448): avc:  denied  { ioctl } for  pid=8166 comm="syz.0.598" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  239.116087][   T30] audit: type=1400 audit(1750008811.461:449): avc:  denied  { map } for  pid=8166 comm="syz.0.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  239.473172][   T30] audit: type=1400 audit(1750008811.461:450): avc:  denied  { execute } for  pid=8166 comm="syz.0.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  239.518196][   T30] audit: type=1400 audit(1750008812.341:451): avc:  denied  { mount } for  pid=8175 comm="syz.1.600" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  239.540969][ T8155] veth0_to_team: entered promiscuous mode
[  240.062781][ T8155] veth0_to_team: entered allmulticast mode
[  240.099318][   T30] audit: type=1400 audit(1750008812.341:452): avc:  denied  { read } for  pid=8175 comm="syz.1.600" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  240.121317][   T30] audit: type=1400 audit(1750008812.341:453): avc:  denied  { open } for  pid=8175 comm="syz.1.600" path="/115/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  240.173087][   T30] audit: type=1400 audit(1750008812.391:454): avc:  denied  { write } for  pid=8177 comm="syz.0.599" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  240.474482][   T30] audit: type=1400 audit(1750008813.741:455): avc:  denied  { bind } for  pid=8193 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  240.477907][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  240.663056][ T8198] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  240.749744][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.795017][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.826127][    T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  240.845849][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.866575][    T9] usb 1-1: config 0 descriptor??
[  241.883964][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.892565][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.123051][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.160297][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  242.169668][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  242.196365][    T9] usb 1-1: USB disconnect, device number 9
[  242.392152][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'.
[  244.427785][ T5141] Bluetooth: hci4: command 0x0405 tx timeout
[  245.298326][    T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  245.307001][    T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  245.321179][    T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  245.333166][    T9] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  245.543988][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  245.544021][   T30] audit: type=1400 audit(1750008818.721:458): avc:  denied  { watch } for  pid=8248 comm="syz.2.622" path="/122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  245.736837][   T30] audit: type=1400 audit(1750008818.721:459): avc:  denied  { watch_sb watch_reads } for  pid=8248 comm="syz.2.622" path="/122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  245.864091][ T8257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.864504][ T8256] fido_id[8256]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  246.569028][ T8267] syzkaller0: entered promiscuous mode
[  246.574539][ T8267] syzkaller0: entered allmulticast mode
[  247.144445][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  247.154460][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[  247.170534][ T8278] netlink: 'syz.0.628': attribute type 12 has an invalid length.
[  247.190580][ T8278] netlink: 'syz.0.628': attribute type 11 has an invalid length.
[  247.276488][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  247.348894][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  247.727926][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  247.734608][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  247.754003][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.766554][   T30] audit: type=1400 audit(1750008821.041:460): avc:  denied  { accept } for  pid=8289 comm="syz.4.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  247.778203][   T10] usb 2-1: config 0 descriptor??
[  247.805147][ T8268] overlayfs: failed to resolve './file1/file0': -2
[  248.150805][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  248.179927][ T8292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.242583][ T8292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.256942][   T30] audit: type=1400 audit(1750008821.521:461): avc:  denied  { lock } for  pid=8266 comm="syz.1.627" path="socket:[17382]" dev="sockfs" ino=17382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  248.288363][    T9] usb 5-1: device descriptor read/64, error -71
[  248.304861][ T8292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.567924][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  248.717832][    T9] usb 5-1: device descriptor read/64, error -71
[  248.838768][   T10] video4linux radio48: keene_cmd_set failed (-110)
[  248.845582][   T10] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  248.867970][    T9] usb usb5-port1: attempt power cycle
[  249.241147][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  249.287779][   T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  249.288541][    T9] usb 5-1: device descriptor read/8, error -71
[  249.437685][   T24] usb 4-1: Using ep0 maxpacket: 32
[  249.568109][   T24] usb 4-1: config 0 has an invalid interface number: 166 but max is 0
[  249.577906][   T24] usb 4-1: config 0 has no interface number 0
[  249.597704][   T24] usb 4-1: config 0 interface 166 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  249.624738][  T910] usb 2-1: USB disconnect, device number 10
[  249.636441][   T24] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a
[  249.650155][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.663028][   T24] usb 4-1: Product: syz
[  249.667509][   T24] usb 4-1: Manufacturer: syz
[  249.683081][   T24] usb 4-1: SerialNumber: syz
[  249.697691][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  249.716105][   T24] usb 4-1: config 0 descriptor??
[  249.739566][ T8312] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  249.778073][    T9] usb 5-1: device descriptor read/8, error -71
[  249.851181][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.927847][    T9] usb usb5-port1: unable to enumerate USB device
[  249.962922][ T8312] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  251.705243][ T8332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.643'.
[  252.048192][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  252.548896][   T24] net1080 4-1:0.166 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, e2:27:26:57:f4:a2
[  252.548967][ T8319] netlink: 168 bytes leftover after parsing attributes in process `syz.2.641'.
[  252.562610][   T24] usb 4-1: USB disconnect, device number 19
[  252.590108][ T8319] netlink: 168 bytes leftover after parsing attributes in process `syz.2.641'.
[  252.606033][   T24] net1080 4-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT
[  252.869557][ T8339] tmpfs: Bad value for 'mpol'
[  252.902478][ T8341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8341 comm=syz.0.646
[  252.940593][ T8341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8341 comm=syz.0.646
[  253.204238][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.295262][  T910] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  253.422331][  T910] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  253.618604][   T48] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  253.757869][  T910] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  254.001123][  T910] usb 2-1: device descriptor read/64, error -71
[  254.013107][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.356008][  T910] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  254.967693][  T910] usb 2-1: device descriptor read/64, error -71
[  255.120033][  T910] usb usb2-port1: attempt power cycle
[  255.369011][   T58] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  255.578239][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.584626][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.047046][ T1095] wlan1: authentication with 08:02:11:00:00:00 timed out
[  256.271809][  T910] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  256.383947][  T910] usb 2-1: device descriptor read/8, error -71
[  256.711071][  T910] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  256.977683][  T910] usb 2-1: device not accepting address 14, error -71
[  256.986363][  T910] usb usb2-port1: unable to enumerate USB device
[  258.173651][   T30] audit: type=1400 audit(1750008830.681:462): avc:  denied  { connect } for  pid=8421 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  258.356690][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.534027][ T8435] netlink: 6 bytes leftover after parsing attributes in process `syz.1.666'.
[  258.648806][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  258.704030][ T8439] Bluetooth: MGMT ver 1.23
[  258.921665][   T10] usb 3-1: Using ep0 maxpacket: 32
[  258.941189][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  258.950140][   T10] usb 3-1: config 0 has no interface number 0
[  258.956269][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  259.459462][   T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  259.468660][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.476664][   T10] usb 3-1: Product: syz
[  259.481180][   T10] usb 3-1: Manufacturer: syz
[  259.485783][   T10] usb 3-1: SerialNumber: syz
[  259.498943][   T10] usb 3-1: config 0 descriptor??
[  259.865998][    T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  259.893785][    T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  259.909648][    T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  259.948822][    T9] hid-generic 0000:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  260.715498][   T30] audit: type=1400 audit(1750008833.981:463): avc:  denied  { ioctl } for  pid=8458 comm="syz.0.674" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  260.734755][ T8454] fido_id[8454]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  261.107935][   T30] audit: type=1326 audit(1750008834.371:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.131147][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.154196][   T30] audit: type=1326 audit(1750008834.371:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.178432][   T30] audit: type=1326 audit(1750008834.371:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.201515][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.211741][   T30] audit: type=1326 audit(1750008834.371:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.234923][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.243742][   T30] audit: type=1326 audit(1750008834.371:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.266940][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.274725][   T30] audit: type=1326 audit(1750008834.371:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.297923][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.304960][   T30] audit: type=1326 audit(1750008834.371:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.328380][   T30] audit: type=1326 audit(1750008834.371:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f9257f8e929 code=0x7ffc0000
[  261.351531][    C0] vkms_vblank_simulate: vblank timer overrun
[  263.252602][ T8490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'.
[  263.487689][   T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  263.495220][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  263.565191][ T8499] vivid-000: disconnect
[  264.065777][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  264.073461][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  264.104043][   T10] usb 3-1: USB disconnect, device number 13
[  264.174329][ T8496] vivid-000: reconnect
[  264.744568][ T8510] trusted_key: encrypted_key: insufficient parameters specified
[  266.331444][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  266.331482][   T30] audit: type=1400 audit(1750008839.551:480): avc:  denied  { bind } for  pid=8532 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  266.549018][   T30] audit: type=1400 audit(1750008839.551:481): avc:  denied  { connect } for  pid=8532 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  266.569388][   T30] audit: type=1400 audit(1750008839.551:482): avc:  denied  { write } for  pid=8532 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  267.002497][ T8551] FAULT_INJECTION: forcing a failure.
[  267.002497][ T8551] name failslab, interval 1, probability 0, space 0, times 0
[  267.015871][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.4.698 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  267.015895][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  267.015906][ T8551] Call Trace:
[  267.015912][ T8551]  <TASK>
[  267.015918][ T8551]  dump_stack_lvl+0x16c/0x1f0
[  267.015950][ T8551]  should_fail_ex+0x512/0x640
[  267.015973][ T8551]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  267.016001][ T8551]  should_failslab+0xc2/0x120
[  267.016026][ T8551]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  267.016050][ T8551]  ? proc_alloc_inode+0x25/0x200
[  267.016080][ T8551]  ? __pfx_proc_alloc_inode+0x10/0x10
[  267.016104][ T8551]  proc_alloc_inode+0x25/0x200
[  267.016129][ T8551]  alloc_inode+0x64/0x240
[  267.016148][ T8551]  new_inode+0x22/0x1c0
[  267.016169][ T8551]  proc_pid_make_inode+0x22/0x160
[  267.016195][ T8551]  proc_fd_instantiate+0x57/0x240
[  267.016217][ T8551]  proc_fill_cache+0x361/0x470
[  267.016242][ T8551]  ? __pfx_proc_fd_instantiate+0x10/0x10
[  267.016264][ T8551]  ? __pfx_proc_fill_cache+0x10/0x10
[  267.016288][ T8551]  ? __pfx_vsnprintf+0x10/0x10
[  267.016320][ T8551]  ? snprintf+0xc7/0x100
[  267.016351][ T8551]  ? _raw_spin_unlock+0x28/0x50
[  267.016373][ T8551]  ? fget_task_next+0x2b0/0x580
[  267.016403][ T8551]  proc_readfd_common+0x1ef/0x620
[  267.016425][ T8551]  ? __pfx_proc_fd_instantiate+0x10/0x10
[  267.016449][ T8551]  ? __pfx_proc_readfd_common+0x10/0x10
[  267.016470][ T8551]  ? down_read_killable+0x220/0x4b0
[  267.016490][ T8551]  ? __pfx_down_read_killable+0x10/0x10
[  267.016508][ T8551]  ? gfs2_buffer_copy_tail.constprop.0+0xc0/0x140
[  267.016543][ T8551]  iterate_dir+0x293/0xb40
[  267.016568][ T8551]  __x64_sys_getdents64+0x13c/0x2c0
[  267.016603][ T8551]  ? __pfx___x64_sys_getdents64+0x10/0x10
[  267.016624][ T8551]  ? fput+0x70/0xf0
[  267.016654][ T8551]  ? __pfx_filldir64+0x10/0x10
[  267.016685][ T8551]  do_syscall_64+0xcd/0x4c0
[  267.016713][ T8551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.016731][ T8551] RIP: 0033:0x7f26a618e929
[  267.016746][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.016763][ T8551] RSP: 002b:00007f26a6f96038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  267.016780][ T8551] RAX: ffffffffffffffda RBX: 00007f26a63b6080 RCX: 00007f26a618e929
[  267.016792][ T8551] RDX: 000000000000100f RSI: 0000200000001f00 RDI: 0000000000000007
[  267.016804][ T8551] RBP: 00007f26a6f96090 R08: 0000000000000000 R09: 0000000000000000
[  267.016814][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.016824][ T8551] R13: 0000000000000000 R14: 00007f26a63b6080 R15: 00007fff4fdb3d28
[  267.016850][ T8551]  </TASK>
[  267.481520][ T8545] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.807671][   T78] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  268.139109][   T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.657691][   T78] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  268.666770][   T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.680116][   T78] usb 4-1: config 0 descriptor??
[  268.890982][   T78] usbhid 4-1:0.0: can't add hid device: -71
[  268.931939][   T78] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  268.973426][   T78] usb 4-1: USB disconnect, device number 20
[  269.090485][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'.
[  269.689098][ T8578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.876777][   T30] audit: type=1400 audit(1750008843.141:483): avc:  denied  { write } for  pid=8584 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  269.876847][ T8585] ieee802154 phy0 wpan0: encryption failed: -22
[  270.556476][ T8596] netlink: 168 bytes leftover after parsing attributes in process `syz.0.712'.
[  270.569670][ T8596] netlink: 168 bytes leftover after parsing attributes in process `syz.0.712'.
[  270.710028][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.783879][ T8598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.807746][ T8598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.023310][ T8586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.313600][ T5830] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  271.323360][ T5830] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  271.785695][   T36] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  272.178813][ T6750] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  272.542221][ T1095] wlan1: authentication with 08:02:11:00:00:00 timed out
[  274.077775][ T8629] binder: 8628:8629 ioctl 4018620d 0 returned -22
[  274.087173][ T8629] binder: 8628:8629 ioctl c0306201 0 returned -14
[  274.107051][ T8604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.126871][ T8629] binder: 8628:8629 ioctl c0306201 0 returned -14
[  275.517648][   T30] audit: type=1400 audit(1750008848.781:484): avc:  denied  { read } for  pid=8636 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  276.140050][ T8651] trusted_key: encrypted_key: insufficient parameters specified
[  277.104054][ T8644] ALSA: mixer_oss: invalid OSS volume 'ÿ18446744073709551615('
[  277.135013][   T30] audit: type=1400 audit(1750008850.011:485): avc:  denied  { ioctl } for  pid=8644 comm="syz.0.727" path="socket:[19211]" dev="sockfs" ino=19211 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  277.265510][ T8657] bridge0: port 3(netdevsim0) entered blocking state
[  277.275033][ T8657] bridge0: port 3(netdevsim0) entered disabled state
[  277.284375][ T8657] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  277.294815][ T8657] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  277.302481][ T8657] bridge0: port 3(netdevsim0) entered blocking state
[  277.309306][ T8657] bridge0: port 3(netdevsim0) entered forwarding state
[  277.672048][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'.
[  277.733816][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'.
[  279.037792][   T78] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  279.208240][   T78] usb 4-1: Using ep0 maxpacket: 32
[  279.229523][   T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  279.257852][   T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  279.276455][   T78] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  279.296824][   T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  279.315056][   T78] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  279.337350][   T78] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.347728][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  279.360659][   T78] usb 4-1: Product: syz
[  279.369549][   T78] usb 4-1: Manufacturer: syz
[  279.374168][   T78] usb 4-1: SerialNumber: syz
[  279.454984][   T78] usb 4-1: config 0 descriptor??
[  279.463915][ T8684] netlink: 176 bytes leftover after parsing attributes in process `syz.4.737'.
[  279.561197][   T78] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  279.582189][ T5175] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  279.641456][    T9] usb 1-1: Using ep0 maxpacket: 32
[  279.664246][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  279.726470][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  279.747715][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  279.830886][ T5175] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  279.879244][  T976] usb 4-1: USB disconnect, device number 21
[  279.885173][    C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  279.901205][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  279.999940][ T8689] ubi: mtd0 is already attached to ubi31
[  280.181969][    T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  280.284369][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.293950][    T9] usb 1-1: Product: syz
[  280.302706][    T9] usb 1-1: Manufacturer: syz
[  280.307317][    T9] usb 1-1: SerialNumber: syz
[  280.332232][    T9] usb 1-1: config 0 descriptor??
[  280.362184][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18
[  280.395114][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  280.503231][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  280.726701][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.743957][    C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  280.858733][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.924739][ T5175] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  280.960932][  T976] usb 1-1: USB disconnect, device number 10
[  280.960968][    C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  281.174912][ T8693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.239728][ T8697] lo speed is unknown, defaulting to 1000
[  281.465857][   T30] audit: type=1400 audit(1750008854.660:486): avc:  denied  { write } for  pid=8704 comm="syz.2.744" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  282.158469][   T30] audit: type=1400 audit(1750008854.913:487): avc:  denied  { create } for  pid=8703 comm="syz.1.743" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.871420][   T30] audit: type=1400 audit(1750008855.923:488): avc:  denied  { unlink } for  pid=5824 comm="syz-executor" name="file0" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  282.943064][ T8726] openvswitch: netlink: Missing key (keys=40, expected=100)
[  282.960347][   T30] audit: type=1804 audit(1750008856.063:489): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.749" name="/newroot/146/file0" dev="tmpfs" ino=800 res=1 errno=0
[  283.202086][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.748'.
[  283.365353][ T8730] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  283.705662][   T30] audit: type=1400 audit(1750008856.381:490): avc:  denied  { map } for  pid=8725 comm="syz.0.747" path="socket:[19622]" dev="sockfs" ino=19622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  285.285887][   T30] audit: type=1400 audit(1750008858.177:491): avc:  denied  { connect } for  pid=8749 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  285.340153][   T30] audit: type=1400 audit(1750008858.177:492): avc:  denied  { shutdown } for  pid=8749 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  285.383732][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'.
[  285.917193][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  285.927770][ T8770] fuse: Bad value for 'fd'
[  285.935563][   T30] audit: type=1400 audit(1750008858.832:493): avc:  denied  { mounton } for  pid=8769 comm="syz.0.761" path="/file0" dev="ramfs" ino=19697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  286.142040][   T10] usb 5-1: Using ep0 maxpacket: 32
[  286.612981][ T8761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.616636][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  286.704333][ T8778] trusted_key: encrypted_key: insufficient parameters specified
[  286.719612][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  286.731620][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  286.822673][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  286.848270][   T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  287.041467][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.200919][   T10] usb 5-1: Product: syz
[  287.205121][   T10] usb 5-1: Manufacturer: syz
[  287.209721][   T10] usb 5-1: SerialNumber: syz
[  288.073422][   T10] usb 5-1: config 0 descriptor??
[  288.097399][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19
[  288.117245][ T5175] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  289.301053][ T5175] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  289.390939][ T5933] usb 5-1: USB disconnect, device number 16
[  289.390958][    C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  290.336035][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'.
[  290.514600][ T5933] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  290.685548][ T5933] usb 2-1: Using ep0 maxpacket: 32
[  290.884178][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  290.952026][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  290.978339][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  290.990169][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  291.003995][ T5933] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  291.014929][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.023659][ T5933] usb 2-1: Product: syz
[  291.032435][ T5933] usb 2-1: Manufacturer: syz
[  291.037117][ T5933] usb 2-1: SerialNumber: syz
[  291.058361][ T5933] usb 2-1: config 0 descriptor??
[  291.105306][ T5933] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  291.119762][ T5175] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  291.153560][ T5175] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  291.280814][   T30] audit: type=1400 audit(1750008863.762:494): avc:  denied  { execmem } for  pid=8830 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  291.319928][   T10] usb 2-1: USB disconnect, device number 15
[  291.424184][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.069677][   T78] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  292.279715][   T78] usb 4-1: Using ep0 maxpacket: 16
[  292.288739][   T78] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.301932][   T78] usb 4-1: config 0 interface 0 has no altsetting 0
[  292.309738][   T78] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  292.344511][   T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.376726][   T78] usb 4-1: config 0 descriptor??
[  292.825123][ T5926] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  292.921245][   T78] hid-rmi 0003:1532:011D.0009: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.3-1/input0
[  293.085358][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.099572][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.103560][ T5926] usb 2-1: Using ep0 maxpacket: 8
[  293.115397][   T78] usb 4-1: USB disconnect, device number 22
[  293.140197][ T5926] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.150108][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.223237][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.283140][ T5926] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.321077][ T5926] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.344163][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.601998][ T5926] usb 2-1: GET_CAPABILITIES returned 0
[  293.607627][ T5926] usbtmc 2-1:16.0: can't read capabilities
[  294.283848][   T30] audit: type=1400 audit(1750008866.652:495): avc:  denied  { map } for  pid=8857 comm="syz.1.786" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.425857][   T78] usb 2-1: USB disconnect, device number 16
[  294.431818][   T30] audit: type=1400 audit(1750008866.783:496): avc:  denied  { call } for  pid=8857 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  294.745704][ T8885] FAULT_INJECTION: forcing a failure.
[  294.745704][ T8885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.758929][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.2.792 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  294.758954][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  294.758964][ T8885] Call Trace:
[  294.758970][ T8885]  <TASK>
[  294.758977][ T8885]  dump_stack_lvl+0x16c/0x1f0
[  294.759007][ T8885]  should_fail_ex+0x512/0x640
[  294.759034][ T8885]  _copy_from_user+0x2e/0xd0
[  294.759060][ T8885]  memdup_user+0x6b/0xe0
[  294.759084][ T8885]  strndup_user+0x78/0xe0
[  294.759107][ T8885]  __x64_sys_mount+0x137/0x310
[  294.759134][ T8885]  ? __pfx___x64_sys_mount+0x10/0x10
[  294.759168][ T8885]  do_syscall_64+0xcd/0x4c0
[  294.759195][ T8885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.759213][ T8885] RIP: 0033:0x7f4fe678e929
[  294.759226][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.759243][ T8885] RSP: 002b:00007f4fe7575038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  294.759260][ T8885] RAX: ffffffffffffffda RBX: 00007f4fe69b6160 RCX: 00007f4fe678e929
[  294.759272][ T8885] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000140
[  294.759282][ T8885] RBP: 00007f4fe7575090 R08: 0000000000000000 R09: 0000000000000000
[  294.759293][ T8885] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[  294.759303][ T8885] R13: 0000000000000000 R14: 00007f4fe69b6160 R15: 00007ffee7f4eb98
[  294.759327][ T8885]  </TASK>
[  295.197017][ T5926] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  295.981023][ T5926] usb 5-1: Using ep0 maxpacket: 32
[  295.995119][ T5926] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  296.004766][ T5926] usb 5-1: config 0 has no interface number 0
[  296.042015][   T78] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  296.136343][ T5926] usb 5-1: New USB device found, idVendor=06c6, idProduct=c150, bcdDevice=ce.6f
[  296.147234][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.156074][ T5926] usb 5-1: Product: syz
[  296.162251][ T5926] usb 5-1: Manufacturer: syz
[  296.166915][ T5926] usb 5-1: SerialNumber: syz
[  296.174546][ T5926] usb 5-1: config 0 descriptor??
[  296.546280][   T78] usb 2-1: Using ep0 maxpacket: 32
[  296.554596][   T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  296.570218][   T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  296.586818][   T78] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  296.598541][   T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  296.668039][   T78] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  296.677407][   T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.709648][   T78] usb 2-1: Product: syz
[  296.720359][   T78] usb 2-1: Manufacturer: syz
[  296.731639][   T78] usb 2-1: SerialNumber: syz
[  296.753083][   T78] usb 2-1: config 0 descriptor??
[  296.769630][   T78] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22
[  296.798646][ T5175] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  296.835234][ T5175] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  296.847580][    C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  296.937980][ T5175] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  296.989658][   T78] usb 2-1: USB disconnect, device number 17
[  297.035410][   T30] audit: type=1400 audit(1750008869.224:497): avc:  denied  { name_bind } for  pid=8916 comm="syz.3.800" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  297.243488][ T8920] gtp0: entered promiscuous mode
[  297.377552][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'.
[  297.425000][ T8919] FAULT_INJECTION: forcing a failure.
[  297.425000][ T8919] name failslab, interval 1, probability 0, space 0, times 0
[  297.452848][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.2.801 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  297.452875][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  297.452885][ T8919] Call Trace:
[  297.452891][ T8919]  <TASK>
[  297.452898][ T8919]  dump_stack_lvl+0x16c/0x1f0
[  297.452929][ T8919]  should_fail_ex+0x512/0x640
[  297.452952][ T8919]  ? fs_reclaim_acquire+0xae/0x150
[  297.452971][ T8919]  ? tomoyo_encode2+0x100/0x3e0
[  297.452994][ T8919]  should_failslab+0xc2/0x120
[  297.453019][ T8919]  __kmalloc_noprof+0xd2/0x510
[  297.453047][ T8919]  tomoyo_encode2+0x100/0x3e0
[  297.453074][ T8919]  tomoyo_encode+0x29/0x50
[  297.453096][ T8919]  tomoyo_realpath_from_path+0x18f/0x6e0
[  297.453122][ T8919]  ? tomoyo_profile+0x47/0x60
[  297.453151][ T8919]  tomoyo_path_number_perm+0x245/0x580
[  297.453170][ T8919]  ? tomoyo_path_number_perm+0x237/0x580
[  297.453194][ T8919]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  297.453216][ T8919]  ? find_held_lock+0x2b/0x80
[  297.453261][ T8919]  ? find_held_lock+0x2b/0x80
[  297.453280][ T8919]  ? hook_file_ioctl_common+0x145/0x410
[  297.453303][ T8919]  ? __fget_files+0x20e/0x3c0
[  297.453332][ T8919]  security_file_ioctl+0x9b/0x240
[  297.453357][ T8919]  __x64_sys_ioctl+0xb7/0x210
[  297.453378][ T8919]  do_syscall_64+0xcd/0x4c0
[  297.453406][ T8919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.453424][ T8919] RIP: 0033:0x7f4fe678e929
[  297.453450][ T8919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.453466][ T8919] RSP: 002b:00007f4fe75b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  297.453483][ T8919] RAX: ffffffffffffffda RBX: 00007f4fe69b5fa0 RCX: 00007f4fe678e929
[  297.453494][ T8919] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  297.453504][ T8919] RBP: 00007f4fe75b7090 R08: 0000000000000000 R09: 0000000000000000
[  297.453514][ T8919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.453523][ T8919] R13: 0000000000000000 R14: 00007f4fe69b5fa0 R15: 00007ffee7f4eb98
[  297.453547][ T8919]  </TASK>
[  297.453580][ T8919] ERROR: Out of memory at tomoyo_realpath_from_path.
[  298.218185][   T30] audit: type=1400 audit(1750008870.328:498): avc:  denied  { ioctl } for  pid=8933 comm="syz.1.805" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  298.271098][   T30] audit: type=1400 audit(1750008870.328:499): avc:  denied  { kexec_image_load } for  pid=8933 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  298.387380][   T30] audit: type=1400 audit(1750008870.375:500): avc:  denied  { create } for  pid=8940 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  298.924552][   T30] audit: type=1400 audit(1750008870.627:501): avc:  denied  { ioctl } for  pid=8940 comm="syz.3.806" path="socket:[19892]" dev="sockfs" ino=19892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  299.020658][   T10] usb 5-1: USB disconnect, device number 17
[  299.059023][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  299.119787][   T30] audit: type=1804 audit(1750008871.170:502): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.809" name="/newroot/156/file0" dev="tmpfs" ino=846 res=1 errno=0
[  299.323579][ T5926] usb 3-1: Using ep0 maxpacket: 8
[  299.420073][ T5933] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  299.609044][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short
[  299.618369][ T5926] usb 3-1: config 4 interface 0 has no altsetting 0
[  299.627772][ T5926] usb 3-1: string descriptor 0 read error: -22
[  299.644227][ T5926] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  299.664157][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=64, SerialNumber=0
[  299.821334][ T5933] usb 1-1: config 0 has an invalid interface number: 181 but max is 0
[  299.921641][ T8952] netlink: 168 bytes leftover after parsing attributes in process `syz.4.810'.
[  299.930738][ T8952] netlink: 168 bytes leftover after parsing attributes in process `syz.4.810'.
[  299.943128][ T8956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.811'.
[  299.952810][ T8956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.811'.
[  299.962190][ T5933] usb 1-1: config 0 has no interface number 0
[  299.969734][ T5933] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  299.986552][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.056555][ T5933] usb 1-1: config 0 descriptor??
[  300.057986][ T5926] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  300.119705][ T5926] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  300.186751][ T5926] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  300.371625][ T5926] usb 3-1: media controller created
[  300.415098][   T78] usb 1-1: USB disconnect, device number 11
[  301.093058][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  301.121886][ T5926] zl10353_read_register: readreg error (reg=127, ret==0)
[  301.155310][ T5926] usb 3-1: USB disconnect, device number 14
[  303.552619][ T8973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.799894][   T30] audit: type=1400 audit(1750008875.548:503): avc:  denied  { append } for  pid=8990 comm="syz.1.819" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  303.918878][   T30] audit: type=1804 audit(1750008875.660:504): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.820" name="/newroot/182/file0" dev="tmpfs" ino=971 res=1 errno=0
[  303.990531][ T9000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.823'.
[  303.999765][ T9000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.823'.
[  304.316467][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'.
[  304.338259][   T30] audit: type=1400 audit(1750008876.034:505): avc:  denied  { write } for  pid=8994 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  304.360675][   T30] audit: type=1400 audit(1750008876.043:506): avc:  denied  { nlmsg_write } for  pid=8994 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  306.016332][  T910] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  306.151582][ T9037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.272448][ T5926] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  306.314134][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.441937][  T910] usb 4-1: device descriptor read/64, error -71
[  306.455639][ T5926] usb 3-1: config 0 has an invalid interface number: 181 but max is 0
[  306.469657][ T5926] usb 3-1: config 0 has no interface number 0
[  306.477158][ T5926] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  306.487687][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.571186][ T9041] syz_tun: entered allmulticast mode
[  306.952720][ T5926] usb 3-1: config 0 descriptor??
[  307.053937][ T9033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.098297][  T910] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  307.204083][ T9038] syz_tun: left allmulticast mode
[  307.256029][  T910] usb 4-1: device descriptor read/64, error -71
[  307.370851][ T5933] usb 3-1: USB disconnect, device number 15
[  307.383186][  T910] usb usb4-port1: attempt power cycle
[  307.861403][  T910] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  308.478166][ T9058] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.736985][  T910] usb 4-1: device descriptor read/8, error -71
[  308.901475][ T9063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.839'.
[  308.911692][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.972892][   T30] audit: type=1400 audit(1750008880.393:507): avc:  denied  { execute } for  pid=9065 comm="syz.1.841" path="/156/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  309.045243][ T9068] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in;
[  309.045243][ T9068]    program syz.2.842 not setting count and/or reply_len properly
[  309.169771][   T30] audit: type=1804 audit(1750008880.571:508): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.844" name="/newroot/158/file0" dev="tmpfs" ino=871 res=1 errno=0
[  309.223428][  T910] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  309.264029][   T30] audit: type=1400 audit(1750008880.664:509): avc:  denied  { setopt } for  pid=9073 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  309.284781][  T910] usb 4-1: Using ep0 maxpacket: 32
[  310.182024][  T910] usb 4-1: config 254 has an invalid interface number: 160 but max is 0
[  310.195822][  T910] usb 4-1: config 254 has no interface number 0
[  310.202140][  T910] usb 4-1: config 254 interface 160 has no altsetting 0
[  310.216131][  T910] usb 4-1: New USB device found, idVendor=067b, idProduct=23e3, bcdDevice=54.ca
[  310.225294][  T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.235756][  T910] usb 4-1: Product: syz
[  310.246531][  T910] usb 4-1: Manufacturer: syz
[  310.257320][  T910] usb 4-1: SerialNumber: syz
[  310.483855][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.492623][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.019298][  T910] pl2303 4-1:254.160: required interrupt-in endpoint missing
[  311.047809][  T910] usb 4-1: USB disconnect, device number 26
[  311.056505][   T30] audit: type=1400 audit(1750008882.348:510): avc:  denied  { read } for  pid=9091 comm="syz.1.848" path="socket:[20133]" dev="sockfs" ino=20133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  311.628535][   T30] audit: type=1400 audit(1750008882.872:511): avc:  denied  { getopt } for  pid=9095 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  312.033097][ T9103] loop6: detected capacity change from 0 to 63
[  312.387706][ T5926] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  312.571918][ T5926] usb 1-1: Using ep0 maxpacket: 16
[  312.580000][ T5933] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  312.581554][ T5926] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  312.805588][ T5933] usb 4-1: config 0 has an invalid interface number: 181 but max is 0
[  312.813791][ T5933] usb 4-1: config 0 has no interface number 0
[  313.539104][ T5933] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  313.548237][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.567485][ T5933] usb 4-1: config 0 descriptor??
[  313.597533][ T5926] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  313.622603][ T9121] fuse: Bad value for 'user_id'
[  313.629261][ T9121] fuse: Bad value for 'user_id'
[  313.659454][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  313.760945][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  313.775351][ T5926] usb 1-1: SerialNumber: syz
[  314.358587][ T9104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.365992][ T9104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.440756][    T9] usb 4-1: USB disconnect, device number 27
[  314.702058][ T5926] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  314.726076][ T5926] usb 1-1: USB disconnect, device number 12
[  314.749580][ T9125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.833780][ T9141] netlink: 168 bytes leftover after parsing attributes in process `syz.2.860'.
[  314.843386][ T9141] netlink: 168 bytes leftover after parsing attributes in process `syz.2.860'.
[  315.134591][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'.
[  315.410917][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[  315.956413][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[  316.251703][  T910] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  316.588968][  T910] usb 5-1: Using ep0 maxpacket: 32
[  316.647353][  T910] usb 5-1: config 0 has an invalid interface number: 179 but max is 0
[  317.043592][  T910] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  317.053434][  T910] usb 5-1: config 0 has no interface number 0
[  317.061734][  T910] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[  317.073523][  T910] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  317.086331][  T910] usb 5-1: config 0 interface 179 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  317.119749][  T910] usb 5-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  317.160803][  T910] usb 5-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  317.203086][  T910] usb 5-1: config 0 interface 179 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[  317.230098][  T910] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  317.979159][  T910] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  317.990393][  T910] usb 5-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  318.001100][  T910] usb 5-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  318.011895][  T910] usb 5-1: config 0 interface 179 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  318.024504][  T910] usb 5-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=5b.4a
[  318.085987][  T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.533820][  T910] usb 5-1: Product: syz
[  318.654229][  T910] usb 5-1: Manufacturer: syz
[  318.658873][  T910] usb 5-1: SerialNumber: syz
[  319.420122][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  319.426524][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  319.442169][  T910] usb 5-1: config 0 descriptor??
[  319.457108][  T910] usb 5-1: can't set config #0, error -71
[  319.489853][  T910] usb 5-1: USB disconnect, device number 18
[  319.749962][ T9191] netlink: 168 bytes leftover after parsing attributes in process `syz.0.874'.
[  320.107430][ T9191] netlink: 168 bytes leftover after parsing attributes in process `syz.0.874'.
[  320.141017][ T9200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.876'.
[  320.749332][ T9200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.876'.
[  321.727374][ T9212] qnx6: unable to read the first superblock
[  322.917614][ T9227] gfs2: gfs2 mount does not exist
[  322.942492][   T30] audit: type=1400 audit(1750008893.320:512): avc:  denied  { mounton } for  pid=9214 comm="syz.3.881" path="/170/file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  322.996598][   T30] audit: type=1400 audit(1750008893.376:513): avc:  denied  { watch_sb } for  pid=9214 comm="syz.3.881" path="/170" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  324.466177][ T9239] netlink: 168 bytes leftover after parsing attributes in process `syz.0.886'.
[  324.478539][ T9239] netlink: 168 bytes leftover after parsing attributes in process `syz.0.886'.
[  324.540007][ T9233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.619627][ T9233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.640936][    T9] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  324.909648][    T9] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  324.926840][    T9] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  324.949227][    T9] hid-generic 0000:0004:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  325.056514][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.073237][ T9243] fido_id[9243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  325.151896][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0c26
[  325.299259][ T9250] netlink: 168 bytes leftover after parsing attributes in process `syz.0.889'.
[  325.771763][ T9250] netlink: 168 bytes leftover after parsing attributes in process `syz.0.889'.
[  326.345562][ T9264] netlink: 168 bytes leftover after parsing attributes in process `syz.3.892'.
[  327.124100][ T9264] netlink: 168 bytes leftover after parsing attributes in process `syz.3.892'.
[  327.762048][   T30] audit: type=1400 audit(1750008897.913:514): avc:  denied  { open } for  pid=9266 comm="syz.3.893" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  328.486074][ T5933] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  328.679972][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  328.867945][ T5933] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  328.981630][ T5933] usb 2-1: config 0 has no interface number 0
[  328.989655][ T5933] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  328.998977][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.007018][ T5933] usb 2-1: Product: syz
[  329.013016][ T5933] usb 2-1: Manufacturer: syz
[  329.024831][ T5933] usb 2-1: SerialNumber: syz
[  329.031882][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'.
[  329.035328][ T5933] usb 2-1: config 0 descriptor??
[  329.058457][ T5933] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  329.335758][ T9291] binder: 9289:9291 ioctl c018620c 200000000700 returned -1
[  329.624915][  T910] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  329.632679][  T910] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  329.640151][  T910] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  329.668469][  T910] hid-generic 0000:0004:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  329.779795][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.801912][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.931448][ T9298] fido_id[9298]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  330.039466][    T9] libceph: connect (1)[c::]:6789 error -101
[  330.069205][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  330.140021][   T30] audit: type=1400 audit(1750008900.195:515): avc:  denied  { map } for  pid=9294 comm="syz.2.900" path="socket:[22563]" dev="sockfs" ino=22563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  330.576860][ T9295] ceph: No mds server is up or the cluster is laggy
[  330.696240][    T9] libceph: connect (1)[c::]:6789 error -101
[  330.706122][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  330.714722][    T9] libceph: connect (1)[c::]:6789 error -101
[  330.720862][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  330.857384][ T5933] gspca_spca1528: reg_w err -71
[  330.878371][ T5933] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  330.966512][ T9304] ceph: No mds server is up or the cluster is laggy
[  331.082530][    T9] libceph: connect (1)[c::]:6789 error -101
[  331.094756][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  331.101546][ T5933] usb 2-1: USB disconnect, device number 18
[  331.180875][ T9311] netlink: 168 bytes leftover after parsing attributes in process `syz.0.902'.
[  331.237941][ T9311] netlink: 168 bytes leftover after parsing attributes in process `syz.0.902'.
[  331.707329][ T9317] netlink: 168 bytes leftover after parsing attributes in process `syz.2.903'.
[  331.903743][ T9317] netlink: 168 bytes leftover after parsing attributes in process `syz.2.903'.
[  332.539541][   T30] audit: type=1400 audit(1750008902.412:516): avc:  denied  { append } for  pid=9321 comm="syz.0.907" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  332.562423][    C1] vkms_vblank_simulate: vblank timer overrun
[  333.978133][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'.
[  334.117024][ T5926] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  334.133050][ T9350] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.141962][ T9350] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.150815][ T9350] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.159515][ T9350] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.172745][ T9350] vxlan0: entered promiscuous mode
[  334.242334][ T5926] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  334.252128][ T5926] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  334.264998][ T5926] hid-generic 0000:0004:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  334.383393][ T9359] fido_id[9359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  334.558324][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'.
[  335.268947][ T9378] openvswitch: netlink: Duplicate or invalid key (type 0).
[  335.276971][ T9378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.979214][  T910] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  336.996945][  T910] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  337.011069][  T910] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[  337.053068][  T910] hid-generic 0000:0004:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  337.182513][ T9412] fido_id[9412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  337.276284][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'.
[  337.504355][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'.
[  337.882369][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.135761][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.145529][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.155218][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.164795][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.174357][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.183829][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.193464][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  338.517287][ T5886] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  338.718352][ T5886] usb 2-1: Using ep0 maxpacket: 16
[  338.725603][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.783896][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  338.834966][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  338.854727][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.865843][ T5886] usb 2-1: Product: syz
[  338.870471][ T5886] usb 2-1: Manufacturer: syz
[  338.883454][ T5886] usb 2-1: SerialNumber: syz
[  338.944113][ T5886] usb 2-1: config 0 descriptor??
[  339.183835][ T9437] netlink: 'syz.3.934': attribute type 4 has an invalid length.
[  339.275702][ T9431] lo speed is unknown, defaulting to 1000
[  339.962446][ T9450] FAULT_INJECTION: forcing a failure.
[  339.962446][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.184878][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.0.933 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  340.184904][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  340.184913][ T9450] Call Trace:
[  340.184919][ T9450]  <TASK>
[  340.184926][ T9450]  dump_stack_lvl+0x16c/0x1f0
[  340.184958][ T9450]  should_fail_ex+0x512/0x640
[  340.184984][ T9450]  _copy_to_user+0x32/0xd0
[  340.185009][ T9450]  simple_read_from_buffer+0xcb/0x170
[  340.185033][ T9450]  proc_fail_nth_read+0x197/0x270
[  340.185057][ T9450]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  340.185080][ T9450]  ? rw_verify_area+0xcf/0x680
[  340.185099][ T9450]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  340.185121][ T9450]  vfs_read+0x1e1/0xc60
[  340.185145][ T9450]  ? __pfx___mutex_lock+0x10/0x10
[  340.185179][ T9450]  ? __pfx_vfs_read+0x10/0x10
[  340.185208][ T9450]  ? __fget_files+0x20e/0x3c0
[  340.185239][ T9450]  ksys_read+0x12a/0x250
[  340.185260][ T9450]  ? __pfx_ksys_read+0x10/0x10
[  340.185289][ T9450]  do_syscall_64+0xcd/0x4c0
[  340.185318][ T9450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.185336][ T9450] RIP: 0033:0x7f5e80f8d33c
[  340.185351][ T9450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  340.185368][ T9450] RSP: 002b:00007f5e81da5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  340.185384][ T9450] RAX: ffffffffffffffda RBX: 00007f5e811b6080 RCX: 00007f5e80f8d33c
[  340.185396][ T9450] RDX: 000000000000000f RSI: 00007f5e81da50a0 RDI: 0000000000000009
[  340.185407][ T9450] RBP: 00007f5e81da5090 R08: 0000000000000000 R09: 0000000000000000
[  340.185417][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.185425][ T9450] R13: 0000000000000000 R14: 00007f5e811b6080 R15: 00007ffe641facd8
[  340.185454][ T9450]  </TASK>
[  340.366168][    C1] vkms_vblank_simulate: vblank timer overrun
[  340.641253][ T9457] syzkaller1: entered promiscuous mode
[  340.647010][ T9457] syzkaller1: entered allmulticast mode
[  341.136056][ T5830] usb 2-1: USB disconnect, device number 19
[  342.481624][ T9491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.771932][ T9499] __nla_validate_parse: 27 callbacks suppressed
[  342.771947][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'.
[  342.847460][ T9489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.913558][ T9489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.962555][  T910] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  343.145873][  T910] usb 2-1: config 0 interface 0 has no altsetting 0
[  343.194499][  T910] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  343.290424][  T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.325820][  T910] usb 2-1: Product: syz
[  343.346677][  T910] usb 2-1: Manufacturer: syz
[  343.391331][  T910] usb 2-1: SerialNumber: syz
[  343.429450][  T910] usb 2-1: config 0 descriptor??
[  343.468124][  T910] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state.
[  343.524623][  T910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  343.578233][  T910] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049)
[  343.650698][  T910] usb 2-1: media controller created
[  343.864037][ T9496] Invalid source name
[  343.868040][ T9496] UBIFS error (pid: 9496): cannot open "./file0", error -22
[  343.870830][   T30] audit: type=1400 audit(1750008913.038:517): avc:  denied  { map } for  pid=9495 comm="syz.1.946" path="socket:[22870]" dev="sockfs" ino=22870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  343.992402][  T910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  344.204765][   T30] audit: type=1400 audit(1750008913.038:518): avc:  denied  { accept } for  pid=9495 comm="syz.1.946" path="socket:[22870]" dev="sockfs" ino=22870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  344.249869][ T9524] netlink: 830 bytes leftover after parsing attributes in process `syz.4.948'.
[  344.677588][   T30] audit: type=1400 audit(1750008913.038:519): avc:  denied  { mounton } for  pid=9495 comm="syz.1.946" path="/178/file0" dev="tmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  344.702279][   T30] audit: type=1400 audit(1750008913.478:520): avc:  denied  { bind } for  pid=9521 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  345.282238][  T910] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049'
[  346.062867][  T910] rc_core: IR keymap rc-twinhan1027 not found
[  346.121355][  T910] Registered IR keymap rc-empty
[  346.138268][  T910] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  346.192845][  T910] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24
[  346.231598][  T910] dvb-usb: schedule remote query interval to 150 msecs.
[  346.252210][  T910] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected.
[  346.262293][  T910] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  346.417835][ T5933] m920x_read = error: -71
[  346.661556][  T910] usb 2-1: USB disconnect, device number 20
[  346.668499][ T5933] dvb-usb: error -71 while querying for an remote control event.
[  347.005220][ T9565] netlink: 'syz.4.956': attribute type 11 has an invalid length.
[  347.005806][   T78] m920x_read = error: -19
[  347.019026][   T78] dvb-usb: error -19 while querying for an remote control event.
[  347.066974][ T5830] libceph: connect (1)[c::]:6789 error -101
[  347.135919][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  347.152779][ T9558] ceph: No mds server is up or the cluster is laggy
[  347.266735][ T9573] netlink: 'syz.0.958': attribute type 4 has an invalid length.
[  347.314374][ T9573] netlink: 'syz.0.958': attribute type 4 has an invalid length.
[  347.333448][   T78] m920x_read = error: -19
[  347.342125][   T78] dvb-usb: error -19 while querying for an remote control event.
[  347.476288][  T910] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  347.517678][ T5886] m920x_read = error: -19
[  347.537368][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  347.784254][  T910] usb 2-1: Using ep0 maxpacket: 32
[  347.986078][  T910] usb 2-1: device descriptor read/all, error -71
[  348.137160][ T5886] m920x_read = error: -19
[  348.142734][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  348.428372][ T9582] openvswitch: netlink: Duplicate or invalid key (type 0).
[  348.436016][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.935696][ T5886] m920x_read = error: -19
[  348.958888][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  349.132286][ T5933] m920x_read = error: -19
[  349.153897][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  349.405654][  T910] m920x_read = error: -19
[  349.526704][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'.
[  349.538714][  T910] dvb-usb: error -19 while querying for an remote control event.
[  349.573717][ T9597] veth0_to_bond: entered promiscuous mode
[  349.767682][  T910] m920x_read = error: -19
[  349.772098][  T910] dvb-usb: error -19 while querying for an remote control event.
[  349.815833][   T30] audit: type=1400 audit(1750008918.595:521): avc:  denied  { accept } for  pid=9612 comm="syz.3.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  349.838618][ T5830] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  349.954622][  T910] m920x_read = error: -19
[  349.978235][  T910] dvb-usb: error -19 while querying for an remote control event.
[  349.978597][ T9610] ceph: No mds server is up or the cluster is laggy
[  350.030730][ T5926] libceph: connect (1)[c::]:6789 error -101
[  350.050556][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  350.147905][ T5933] m920x_read = error: -19
[  350.172050][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  350.238646][ T9622] netlink: 168 bytes leftover after parsing attributes in process `syz.3.970'.
[  350.247949][ T5830] usb 1-1: config 0 has an invalid interface number: 181 but max is 0
[  350.257356][ T5830] usb 1-1: config 0 has no interface number 0
[  350.263447][ T5830] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  350.291598][ T9622] netlink: 168 bytes leftover after parsing attributes in process `syz.3.970'.
[  350.329559][ T5926] libceph: connect (1)[c::]:6789 error -101
[  350.343655][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  350.371177][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.400421][ T5830] usb 1-1: config 0 descriptor??
[  350.526708][ T5933] m920x_read = error: -19
[  351.167090][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  351.783695][ T5933] m920x_read = error: -19
[  351.805561][ T5926] usb 1-1: USB disconnect, device number 13
[  351.823957][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  352.031387][ T5933] m920x_read = error: -19
[  352.035752][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  352.076995][   T30] audit: type=1800 audit(1750008920.718:522): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.977" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  352.130129][   T30] audit: type=1804 audit(1750008920.765:523): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.976" name="/newroot/195/file0" dev="tmpfs" ino=1071 res=1 errno=0
[  352.181172][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.307624][ T5886] m920x_read = error: -19
[  352.374960][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  352.649986][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'.
[  353.251147][ T5886] m920x_read = error: -19
[  353.444852][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  353.548238][ T5830] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0
[  353.555708][ T5830] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0
[  353.569126][ T5830] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0
[  353.620535][ T5830] hid-generic 0000:0004:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  353.631795][ T5886] m920x_read = error: -19
[  353.636139][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  353.857252][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.878817][ T5886] m920x_read = error: -19
[  353.883471][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  353.972159][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.083055][ T5830] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  354.085618][ T9665] fido_id[9665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  354.098937][ T5830] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  354.213621][ T9664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.224033][ T5886] m920x_read = error: -19
[  354.228368][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  354.316006][   T36] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  354.412324][ T5886] m920x_read = error: -19
[  354.437119][ T5886] dvb-usb: error -19 while querying for an remote control event.
[  354.940819][  T910] m920x_read = error: -19
[  354.945215][  T910] dvb-usb: error -19 while querying for an remote control event.
[  354.954326][ T5987] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  354.965403][ T9682] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0
[  355.116382][ T5987] wlan1: authentication with 08:02:11:00:00:00 timed out
[  355.153802][  T910] m920x_read = error: -19
[  355.206000][ T9675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.227149][  T910] dvb-usb: error -19 while querying for an remote control event.
[  355.337622][ T9686] netlink: 168 bytes leftover after parsing attributes in process `syz.3.988'.
[  355.349191][ T9686] netlink: 168 bytes leftover after parsing attributes in process `syz.3.988'.
[  355.433591][   T78] m920x_read = error: -19
[  355.548478][ T9688] netlink: 'syz.0.987': attribute type 4 has an invalid length.
[  355.958043][   T78] dvb-usb: error -19 while querying for an remote control event.
[  356.346772][ T9691] netlink: 168 bytes leftover after parsing attributes in process `syz.0.989'.
[  356.364217][ T9691] netlink: 168 bytes leftover after parsing attributes in process `syz.0.989'.
[  356.454627][   T78] m920x_read = error: -19
[  356.462409][   T78] dvb-usb: error -19 while querying for an remote control event.
[  356.721363][ T5830] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  356.889857][ T9698] overlayfs: missing 'lowerdir'
[  357.270510][   T78] m920x_read = error: -19
[  357.279352][   T78] dvb-usb: error -19 while querying for an remote control event.
[  357.301601][ T5830] usb 3-1: config 0 has an invalid interface number: 181 but max is 0
[  357.314337][ T5830] usb 3-1: config 0 has no interface number 0
[  357.321246][ T5830] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  357.330976][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.347835][ T5830] usb 3-1: config 0 descriptor??
[  357.493599][  T910] m920x_read = error: -19
[  357.498059][  T910] dvb-usb: error -19 while querying for an remote control event.
[  357.587366][    T9] usb 3-1: USB disconnect, device number 16
[  357.686477][  T910] m920x_read = error: -19
[  357.690867][  T910] dvb-usb: error -19 while querying for an remote control event.
[  357.748934][ T5830] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  357.899797][  T910] m920x_read = error: -19
[  357.910937][  T910] dvb-usb: error -19 while querying for an remote control event.
[  357.913188][    T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  357.950828][ T5830] usb 1-1: config 131 has an invalid interface number: 242 but max is 0
[  357.970430][ T5830] usb 1-1: config 131 has no interface number 0
[  357.980748][ T5830] usb 1-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  358.089839][    T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  358.108239][    T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  358.119091][ T5830] usb 1-1: config 131 interface 242 has no altsetting 0
[  358.137678][    T9] hid-generic 0000:0004:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  358.179779][  T910] m920x_read = error: -19
[  358.190454][ T5830] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  358.203953][  T910] dvb-usb: error -19 while querying for an remote control event.
[  358.216043][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.271195][ T5830] usb 1-1: Product: syz
[  358.276344][ T5830] usb 1-1: Manufacturer: syz
[  358.280921][ T5830] usb 1-1: SerialNumber: syz
[  358.316841][ T9714] fido_id[9714]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  358.355148][ T9704] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  358.500763][   T78] m920x_read = error: -19
[  358.668080][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.676685][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.874736][   T78] dvb-usb: error -19 while querying for an remote control event.
[  359.019849][  T910] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  359.287229][   T78] m920x_read = error: -19
[  359.291868][   T78] dvb-usb: error -19 while querying for an remote control event.
[  359.471930][  T910] usb 4-1: Using ep0 maxpacket: 8
[  359.501000][   T78] m920x_read = error: -19
[  359.656258][   T78] dvb-usb: error -19 while querying for an remote control event.
[  359.773489][  T910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  359.856767][  T910] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  359.866027][   T78] m920x_read = error: -19
[  359.870368][   T78] dvb-usb: error -19 while querying for an remote control event.
[  359.907140][  T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.928517][  T910] usb 4-1: Product: syz
[  359.932704][  T910] usb 4-1: Manufacturer: syz
[  359.950196][  T910] usb 4-1: SerialNumber: syz
[  359.971126][  T910] usb 4-1: config 0 descriptor??
[  359.986029][  T910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  360.000066][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'.
[  360.010266][  T910] usb 4-1: setting power ON
[  360.021398][  T910] dvb-usb: bulk message failed: -22 (2/0)
[  360.044607][  T910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  360.079921][  T910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  360.083607][ T9733] Process accounting resumed
[  360.089009][ T5933] m920x_read = error: -19
[  360.102234][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  360.128920][  T910] usb 4-1: media controller created
[  360.200961][  T910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  360.743596][ T5933] m920x_read = error: -19
[  360.747994][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  361.052145][ T5933] m920x_read = error: -19
[  361.102398][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  361.159999][  T910] usb 4-1: selecting invalid altsetting 6
[  361.197726][  T910] usb 4-1: digital interface selection failed (-22)
[  361.202105][   T30] audit: type=1400 audit(1750008929.240:524): avc:  denied  { accept } for  pid=9734 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  361.293119][ T5830] kvaser_usb 1-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  361.308526][  T910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  361.321267][  T910] usb 4-1: setting power OFF
[  361.326223][  T910] dvb-usb: bulk message failed: -22 (2/0)
[  361.344082][ T5830] usb 1-1: USB disconnect, device number 14
[  361.344130][  T910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  361.359508][ T5933] m920x_read = error: -19
[  361.364281][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  361.393393][  T910] (NULL device *): no alternate interface
[  361.481798][  T910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  361.514213][  T910] usb 4-1: USB disconnect, device number 28
[  361.553560][ T5933] m920x_read = error: -19
[  361.557936][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  361.760024][ T5933] m920x_read = error: -19
[  361.766959][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  362.213011][  T910] m920x_read = error: -19
[  362.223876][  T910] dvb-usb: error -19 while querying for an remote control event.
[  362.824513][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.869770][  T910] m920x_read = error: -19
[  362.874262][  T910] dvb-usb: error -19 while querying for an remote control event.
[  362.877299][ T9761] overlayfs: missing 'lowerdir'
[  362.906585][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.061717][  T910] m920x_read = error: -19
[  363.066440][  T910] dvb-usb: error -19 while querying for an remote control event.
[  363.122925][ T9761] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  363.379672][ T5933] m920x_read = error: -19
[  364.138149][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  364.189921][ T9753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.301327][  T910] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  364.529631][ T5933] m920x_read = error: -19
[  364.536752][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  364.652249][ T9775] 8021q: VLANs not supported on lo
[  364.673980][ T5933] IPVS: starting estimator thread 0...
[  364.694953][ T9775] 8021q: adding VLAN 0 to HW filter on device batadv1
[  364.702068][  T910] usb 5-1: Using ep0 maxpacket: 16
[  364.709392][  T910] usb 5-1: config 5 has an invalid interface number: 245 but max is 2
[  364.726270][  T910] usb 5-1: config 5 has an invalid interface number: 71 but max is 2
[  364.734708][ T5933] m920x_read = error: -19
[  364.740832][ T9775] team0: Port device batadv1 added
[  364.746455][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  364.754471][  T910] usb 5-1: config 5 has an invalid interface number: 198 but max is 2
[  364.769867][  T910] usb 5-1: config 5 has 4 interfaces, different from the descriptor's value: 3
[  364.782221][ T9778] IPVS: using max 50 ests per chain, 120000 per kthread
[  364.783946][  T910] usb 5-1: config 5 has no interface number 0
[  364.795911][  T910] usb 5-1: config 5 has no interface number 2
[  364.801989][  T910] usb 5-1: config 5 has no interface number 3
[  364.815965][  T910] usb 5-1: config 5 interface 245 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  364.831723][  T910] usb 5-1: config 5 interface 71 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  364.848657][  T910] usb 5-1: too many endpoints for config 5 interface 1 altsetting 5: 220, using maximum allowed: 30
[  364.862297][  T910] usb 5-1: config 5 interface 1 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  364.874718][  T910] usb 5-1: config 5 interface 1 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  364.932582][ T5933] m920x_read = error: -19
[  364.937161][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  365.012638][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  365.174880][  T910] usb 5-1: config 5 interface 1 altsetting 5 has an endpoint descriptor with address 0xC6, changing to 0x86
[  365.216155][  T910] usb 5-1: config 5 interface 1 altsetting 5 endpoint 0x86 has an invalid bInterval 202, changing to 7
[  365.232205][  T910] usb 5-1: config 5 interface 1 altsetting 5 endpoint 0x86 has invalid maxpacket 58740, setting to 1024
[  365.254018][  T910] usb 5-1: config 5 interface 1 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[  365.283937][  T910] usb 5-1: config 5 interface 1 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  365.284537][ T5830] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  365.295652][  T910] usb 5-1: config 5 interface 1 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  365.314359][  T910] usb 5-1: config 5 interface 1 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 220
[  365.327668][ T5933] m920x_read = error: -19
[  365.331996][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  365.416305][  T910] usb 5-1: config 5 interface 198 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  365.536405][  T910] usb 5-1: config 5 interface 198 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  365.565504][  T910] usb 5-1: config 5 interface 245 has no altsetting 0
[  365.572335][  T910] usb 5-1: config 5 interface 71 has no altsetting 0
[  365.579072][  T910] usb 5-1: config 5 interface 1 has no altsetting 0
[  365.585734][  T910] usb 5-1: config 5 interface 198 has no altsetting 0
[  365.603241][  T910] usb 5-1: New USB device found, idVendor=12d1, idProduct=be92, bcdDevice=d0.3f
[  365.632237][  T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.650220][  T910] usb 5-1: Product: syz
[  365.659493][  T910] usb 5-1: Manufacturer: syz
[  365.664129][  T910] usb 5-1: SerialNumber: syz
[  365.701670][   T78] m920x_read = error: -19
[  365.706051][   T78] dvb-usb: error -19 while querying for an remote control event.
[  365.783743][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  365.893978][   T78] m920x_read = error: -19
[  365.898352][   T78] dvb-usb: error -19 while querying for an remote control event.
[  365.925903][ T5830] usb 4-1: config 0 has an invalid interface number: 181 but max is 0
[  365.935291][ T5830] usb 4-1: config 0 has no interface number 0
[  365.947395][ T5830] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  365.956509][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.603634][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'.
[  366.641820][  T910] option 5-1:5.245: GSM modem (1-port) converter detected
[  366.641899][ T5830] usb 4-1: config 0 descriptor??
[  366.902545][   T78] m920x_read = error: -19
[  366.906922][   T78] dvb-usb: error -19 while querying for an remote control event.
[  366.924712][  T910] usb-storage 5-1:5.198: USB Mass Storage device detected
[  366.960654][   T78] usb 4-1: USB disconnect, device number 29
[  367.041394][  T910] usb 5-1: USB disconnect, device number 19
[  367.072004][  T910] option 5-1:5.245: device disconnected
[  367.177144][ T5933] m920x_read = error: -19
[  367.181521][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  367.363177][   T78] m920x_read = error: -19
[  367.380278][   T78] dvb-usb: error -19 while querying for an remote control event.
[  367.562223][  T910] m920x_read = error: -19
[  367.572043][  T910] dvb-usb: error -19 while querying for an remote control event.
[  367.808527][ T9825] openvswitch: netlink: Duplicate or invalid key (type 0).
[  367.815979][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.936752][ T9825] geneve2: entered promiscuous mode
[  368.031698][   T78] m920x_read = error: -19
[  368.034331][ T9824] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  368.046569][   T78] dvb-usb: error -19 while querying for an remote control event.
[  368.102477][ T9823] [U] 
[  368.105390][ T9823] [U] 
[  368.108073][ T9823] [U] 
[  368.110739][ T9823] [U] 
[  368.113400][ T9823] [U] 
[  368.116061][ T9823] [U] 
[  368.118732][ T9823] [U] 
[  368.121415][ T9823] [U] 
[  368.124295][ T9823] [U] 
[  368.126986][ T9823] [U] 
[  368.129664][ T9823] [U] 
[  368.136968][ T9821] [U] 
[  368.225672][  T910] m920x_read = error: -19
[  368.230209][  T910] dvb-usb: error -19 while querying for an remote control event.
[  368.861912][  T910] m920x_read = error: -19
[  368.880211][  T910] dvb-usb: error -19 while querying for an remote control event.
[  369.043688][ T9841] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  369.059229][  T910] m920x_read = error: -19
[  369.260854][  T910] dvb-usb: error -19 while querying for an remote control event.
[  369.813732][   T30] audit: type=1800 audit(1750008936.891:525): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1029" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  369.881515][ T9844] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1032'.
[  369.890683][ T9844] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1032'.
[  370.009990][  T910] m920x_read = error: -19
[  370.014368][  T910] dvb-usb: error -19 while querying for an remote control event.
[  370.223826][  T910] m920x_read = error: -19
[  370.228227][  T910] dvb-usb: error -19 while querying for an remote control event.
[  370.471340][  T910] m920x_read = error: -19
[  370.475715][  T910] dvb-usb: error -19 while querying for an remote control event.
[  370.769173][ T5926] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  371.090930][ T5926] usb 1-1: config 0 has an invalid interface number: 181 but max is 0
[  371.117162][ T5926] usb 1-1: config 0 has no interface number 0
[  371.139321][ T5926] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  371.170201][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.280549][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  371.355669][ T5926] usb 1-1: config 0 descriptor??
[  371.367630][  T910] m920x_read = error: -19
[  371.374304][  T910] dvb-usb: error -19 while querying for an remote control event.
[  371.560011][ T5933] m920x_read = error: -19
[  371.564584][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  371.581437][    T9] usb 5-1: Using ep0 maxpacket: 16
[  371.587939][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.602946][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.623377][ T5926] usb 1-1: USB disconnect, device number 15
[  371.632482][    T9] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  371.642664][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.659398][    T9] usb 5-1: config 0 descriptor??
[  371.741831][ T5933] m920x_read = error: -19
[  371.746226][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  371.764337][  T910] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  371.889460][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.897359][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.908323][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.916759][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.923541][  T910] usb 3-1: Using ep0 maxpacket: 32
[  371.930665][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.932336][  T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.949357][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.949464][ T5933] m920x_read = error: -19
[  371.961552][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.961903][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  371.969256][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.986035][  T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.986123][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  371.996059][  T910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  372.005791][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  372.020621][  T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.025136][    T9] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  372.046955][  T910] usb 3-1: config 0 descriptor??
[  372.049257][    T9] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  372.102975][   T78] usb 5-1: USB disconnect, device number 20
[  372.190828][ T5933] m920x_read = error: -19
[  372.195258][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  372.373690][ T5933] m920x_read = error: -19
[  372.401881][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'.
[  372.500931][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  372.615783][  T910] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  372.641086][  T910] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  372.672290][ T5933] m920x_read = error: -19
[  372.676659][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  372.700736][  T910] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  372.721899][  T910] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  372.733276][  T910] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  372.756348][  T910] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[  372.980654][ T5933] m920x_read = error: -19
[  372.987213][  T910] koneplus 0003:1E7D:2D51.0011: couldn't init struct koneplus_device
[  372.995388][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  373.111080][ T9906] hub 8-0:1.0: USB hub found
[  373.117128][ T9906] hub 8-0:1.0: 1 port detected
[  373.145599][  T910] koneplus 0003:1E7D:2D51.0011: couldn't install mouse
[  373.161227][   T30] audit: type=1400 audit(1750008940.436:526): avc:  denied  { write } for  pid=9905 comm="syz.4.1050" name="file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  373.191876][  T910] koneplus 0003:1E7D:2D51.0011: probe with driver koneplus failed with error -71
[  373.300152][ T9910] netlink: 'syz.0.1049': attribute type 4 has an invalid length.
[  373.816546][  T910] usb 3-1: USB disconnect, device number 17
[  373.825558][ T5933] m920x_read = error: -19
[  373.832150][   T30] audit: type=1400 audit(1750008940.436:527): avc:  denied  { open } for  pid=9905 comm="syz.4.1050" path="/204/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  373.855080][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  374.029779][ T5933] m920x_read = error: -19
[  374.034338][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  374.400913][ T9922] lo speed is unknown, defaulting to 1000
[  374.682849][  T910] m920x_read = error: -19
[  374.687228][  T910] dvb-usb: error -19 while querying for an remote control event.
[  374.722237][   T10] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  374.729901][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  374.852950][ T5933] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  374.898980][  T910] m920x_read = error: -19
[  374.931003][  T910] dvb-usb: error -19 while querying for an remote control event.
[  374.976750][   T10] usb 1-1: config 0 has an invalid interface number: 181 but max is 0
[  374.986909][    T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  375.012720][   T10] usb 1-1: config 0 has no interface number 0
[  375.159432][   T78] m920x_read = error: -19
[  375.167916][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.203748][   T78] dvb-usb: error -19 while querying for an remote control event.
[  375.205701][   T10] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  375.220843][ T5933] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  375.231404][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.399861][    T9] usb 5-1: config 0 descriptor??
[  375.401074][   T78] m920x_read = error: -19
[  375.429283][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  375.430579][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  375.438724][   T78] dvb-usb: error -19 while querying for an remote control event.
[  375.452523][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'.
[  375.462991][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.477817][ T5933] usb 4-1: config 1 has no interface number 0
[  375.488392][ T5933] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  375.494484][   T10] usb 1-1: config 0 descriptor??
[  375.519758][ T5933] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  375.553480][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  375.564077][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.573523][ T5933] usb 4-1: Product: syz
[  375.577696][ T5933] usb 4-1: Manufacturer: syz
[  375.583692][ T5933] usb 4-1: SerialNumber: syz
[  375.676138][   T78] m920x_read = error: -19
[  375.681210][   T78] dvb-usb: error -19 while querying for an remote control event.
[  375.845815][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.859139][ T5935] m920x_read = error: -19
[  375.859353][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.863500][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  375.871659][    T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  375.895545][ T5935] usb 1-1: USB disconnect, device number 16
[  376.077820][   T78] m920x_read = error: -19
[  376.114964][   T78] dvb-usb: error -19 while querying for an remote control event.
[  376.312358][    T9] gspca_cpia1: usb_control_msg 02, error -71
[  376.660341][ T5935] m920x_read = error: -19
[  376.664748][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  376.694485][    T9] gspca_cpia1: usb_control_msg 05, error -71
[  376.701758][    T9] cpia1 5-1:0.0: unexpected systemstate: 00
[  376.712826][    T9] usb 5-1: USB disconnect, device number 21
[  376.768570][   T30] audit: type=1400 audit(1750008943.804:528): avc:  denied  { ioctl } for  pid=9905 comm="syz.4.1050" path="/204/file0" dev="tmpfs" ino=1097 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  377.015012][ T5935] m920x_read = error: -19
[  377.027198][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  377.056478][ T9950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.205086][ T5935] m920x_read = error: -19
[  377.210631][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  377.398007][ T5935] m920x_read = error: -19
[  377.441785][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  377.876735][ T5935] m920x_read = error: -19
[  377.882551][ T5933] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  377.895161][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  377.973600][ T5933] usb 4-1: USB disconnect, device number 30
[  378.426628][ T5935] m920x_read = error: -19
[  378.432599][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  378.780112][ T5935] m920x_read = error: -19
[  378.807123][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  379.176497][  T910] m920x_read = error: -19
[  379.180984][  T910] dvb-usb: error -19 while querying for an remote control event.
[  379.237849][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  379.377043][  T910] m920x_read = error: -19
[  379.413657][  T910] dvb-usb: error -19 while querying for an remote control event.
[  379.481473][   T30] audit: type=1804 audit(1750008946.348:529): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1068" name="/newroot/205/file0" dev="tmpfs" ino=1103 res=1 errno=0
[  379.813613][  T910] m920x_read = error: -19
[  379.836007][  T910] dvb-usb: error -19 while querying for an remote control event.
[  380.199212][ T5933] m920x_read = error: -19
[  380.203778][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  380.388455][ T5935] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  380.388522][   T30] audit: type=1400 audit(1750008947.190:530): avc:  denied  { connect } for  pid=9992 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  380.436563][ T9993] siw: device registration error -23
[  380.463671][   T30] audit: type=1400 audit(1750008947.190:531): avc:  denied  { bind } for  pid=9992 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  380.574129][ T5933] m920x_read = error: -19
[  380.638911][ T5935] usb 2-1: config 0 has an invalid interface number: 181 but max is 0
[  380.648727][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  380.758567][ T5935] usb 2-1: config 0 has no interface number 0
[  380.788752][ T5935] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  380.807715][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.828961][ T5933] m920x_read = error: -19
[  380.847778][ T5933] dvb-usb: error -19 while querying for an remote control event.
[  380.867386][ T5935] usb 2-1: config 0 descriptor??
[  381.078272][ T5935] m920x_read = error: -19
[  381.100750][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  381.131644][    T9] usb 2-1: USB disconnect, device number 23
[  381.325065][ T5935] m920x_read = error: -19
[  381.336999][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  381.555831][ T5935] m920x_read = error: -19
[  381.561307][T10016] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004
[  381.568205][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  381.645922][T10018] xt_nat: multiple ranges no longer supported
[  381.748442][   T78] m920x_read = error: -19
[  381.752876][   T78] dvb-usb: error -19 while querying for an remote control event.
[  382.198347][T10022] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1078'.
[  382.218363][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  382.237998][T10022] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1078'.
[  382.247453][   T78] m920x_read = error: -19
[  382.528798][   T78] dvb-usb: error -19 while querying for an remote control event.
[  382.536924][ T5935] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  382.546242][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.555121][ T5935] usb 1-1: Product: syz
[  382.559448][ T5935] usb 1-1: Manufacturer: syz
[  382.564163][ T5935] usb 1-1: SerialNumber: syz
[  382.583834][ T5935] usb 1-1: config 0 descriptor??
[  382.721011][   T78] m920x_read = error: -19
[  382.735449][   T78] dvb-usb: error -19 while querying for an remote control event.
[  382.735691][T10029] netlink: 'syz.3.1081': attribute type 4 has an invalid length.
[  382.985722][ T5830] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  383.077598][   T78] m920x_read = error: -19
[  383.082278][   T78] dvb-usb: error -19 while querying for an remote control event.
[  383.653777][ T5830] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  383.663395][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.688076][ T5830] usb 5-1: config 0 descriptor??
[  383.797138][   T78] m920x_read = error: -19
[  384.006888][   T78] dvb-usb: error -19 while querying for an remote control event.
[  384.351832][   T78] m920x_read = error: -19
[  384.373303][   T78] dvb-usb: error -19 while querying for an remote control event.
[  384.557879][T10055] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37648 sclass=netlink_xfrm_socket pid=10055 comm=syz.1.1086
[  384.725241][   T78] m920x_read = error: -19
[  384.888658][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  384.902828][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  384.917167][ T5935] int51x1 1-1:0.0: probe with driver int51x1 failed with error -71
[  384.946754][   T30] audit: type=1400 audit(1750008951.072:532): avc:  denied  { listen } for  pid=10052 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  384.990800][   T78] dvb-usb: error -19 while querying for an remote control event.
[  385.005788][ T5935] usb 1-1: USB disconnect, device number 17
[  385.175554][ T5830] ath6kl: Failed to submit usb control message: -71
[  385.190839][ T5830] ath6kl: unable to send the bmi data to the device: -71
[  385.192588][   T78] m920x_read = error: -19
[  385.198479][ T5830] ath6kl: Unable to send get target info: -71
[  385.218665][ T5830] ath6kl: Failed to init ath6kl core: -71
[  385.226162][ T5830] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  385.235634][   T78] dvb-usb: error -19 while querying for an remote control event.
[  385.253883][   T30] audit: type=1400 audit(1750008951.745:533): avc:  denied  { name_bind } for  pid=10062 comm="syz.2.1091" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  385.255437][ T5830] usb 5-1: USB disconnect, device number 22
[  385.415036][  T910] m920x_read = error: -19
[  385.419590][  T910] dvb-usb: error -19 while querying for an remote control event.
[  385.577132][ T5935] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  385.626636][  T910] m920x_read = error: -19
[  385.634614][  T910] dvb-usb: error -19 while querying for an remote control event.
[  385.792716][ T5935] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  385.802204][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.815466][  T910] m920x_read = error: -19
[  385.819833][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  385.829799][  T910] dvb-usb: error -19 while querying for an remote control event.
[  385.841989][ T5935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11
[  385.854921][ T5935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50778, setting to 1024
[  385.869980][ T5935] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  385.881882][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  385.890241][ T5935] usb 1-1: Product: syz
[  385.895177][ T5935] usb 1-1: Manufacturer: syz
[  385.908346][T10059] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  385.917840][ T5935] cdc_wdm 1-1:1.0: skipping garbage
[  385.938841][ T5935] cdc_wdm 1-1:1.0: skipping garbage
[  385.946984][ T5935] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  385.960822][ T5935] cdc_wdm 1-1:1.0: Unknown control protocol
[  385.965365][T10070] ------------[ cut here ]------------
[  385.970876][   T30] audit: type=1400 audit(1750008952.409:534): avc:  denied  { load_policy } for  pid=10069 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  385.972520][T10070] WARNING: CPU: 0 PID: 10070 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.002853][T10070] Modules linked in:
[  386.007088][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.3.1092 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  386.019229][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  386.029339][T10070] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.036093][T10070] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  386.036578][ T5935] m920x_read = error: -19
[  386.055924][T10070] RSP: 0018:ffffc9000396f438 EFLAGS: 00010246
[  386.066589][T10070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  386.074960][T10070] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040dc0
[  386.079525][ T5935] dvb-usb: error -19 while querying for an remote control event.
[  386.083231][T10070] RBP: 0000000010000000 R08: 0000000000000005 R09: 0000000000000000
[  386.098693][T10070] R10: 0000000002000000 R11: 0110000000000000 R12: 0000000000000010
[  386.106926][T10070] R13: 1ffff9200072de9c R14: 0000000010000000 R15: 0000000000000010
[  386.114993][T10070] FS:  00007f9258d8a6c0(0000) GS:ffff888124753000(0000) knlGS:0000000000000000
[  386.124148][T10070] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  386.130752][T10070] CR2: 0000200000004000 CR3: 000000007dfd5000 CR4: 00000000003526f0
[  386.138861][T10070] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007
[  386.147390][T10070] DR3: 00000000000002d5 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  386.155479][T10070] Call Trace:
[  386.158763][T10070]  <TASK>
[  386.161708][T10070]  ? stack_trace_save+0x8e/0xc0
[  386.166690][T10070]  ? __pfx_stack_trace_save+0x10/0x10
[  386.172083][T10070]  ? stack_depot_save_flags+0x28/0xa40
[  386.177628][T10070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  386.184315][T10070]  ? kasan_save_stack+0x42/0x60
[  386.189497][T10070]  ? kasan_save_stack+0x33/0x60
[  386.194366][T10070]  ? kasan_save_track+0x14/0x30
[  386.199272][T10070]  ? __kasan_kmalloc+0xaa/0xb0
[  386.204047][T10070]  ? common_read+0xc1/0x3d0
[  386.208599][T10070]  ? policydb_read+0x874/0x3220
[  386.213457][T10070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.219571][T10070]  ? hashtab_init+0x1b1/0x290
[  386.224256][T10070]  __alloc_pages_noprof+0xb/0x1b0
[  386.229451][T10070]  ___kmalloc_large_node+0x84/0x1e0
[  386.234656][T10070]  ? hashtab_init+0x1b1/0x290
[  386.239369][T10070]  __kmalloc_large_node_noprof+0x1c/0x70
[  386.245036][T10070]  __kmalloc_noprof.cold+0xc/0x61
[  386.250125][T10070]  hashtab_init+0x1b1/0x290
[  386.254641][T10070]  ? __asan_memcpy+0x3c/0x60
[  386.259246][T10070]  common_read+0x1c2/0x3d0
[  386.263703][T10070]  ? __pfx_common_read+0x10/0x10
[  386.268639][T10070]  ? __kmalloc_noprof+0x242/0x510
[  386.270305][  T910] m920x_read = error: -19
[  386.273716][T10070]  ? __pfx_common_read+0x10/0x10
[  386.282975][T10070]  policydb_read+0x874/0x3220
[  386.283319][  T910] dvb-usb: error -19 while querying for an remote control event.
[  386.287661][T10070]  ? __pfx_policydb_read+0x10/0x10
[  386.301134][T10070]  security_load_policy+0x15c/0x12c0
[  386.306485][T10070]  ? lockdep_hardirqs_on+0x7c/0x110
[  386.311696][T10070]  ? __pfx_security_load_policy+0x10/0x10
[  386.317525][T10070]  ? rep_movs_alternative+0x4a/0x90
[  386.322745][T10070]  sel_write_load+0x332/0x1bd0
[  386.327552][T10070]  ? save_trace+0x1ad/0x380
[  386.332070][T10070]  ? add_lock_to_list+0x9d/0x130
[  386.337087][T10070]  ? lockdep_unlock+0x64/0xe0
[  386.341775][T10070]  ? __lock_acquire+0x1053/0x1c90
[  386.345491][   T30] audit: type=1400 audit(1750008952.765:535): avc:  denied  { read write } for  pid=10058 comm="syz.0.1089" name="cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  386.346837][T10070]  ? __pfx_sel_write_load+0x10/0x10
[  386.370703][    C1] vkms_vblank_simulate: vblank timer overrun
[  386.374602][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.375959][T10070]  ? __pfx_sel_write_load+0x10/0x10
[  386.381983][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.388601][T10070]  vfs_write+0x2a0/0x1150
[  386.394741][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.399777][T10070]  ? __pfx___mutex_lock+0x10/0x10
[  386.404035][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.404561][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.411210][T10070]  ? __pfx_vfs_write+0x10/0x10
[  386.415947][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.422019][T10070]  ? __fget_files+0x20e/0x3c0
[  386.429032][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.433320][T10070]  ksys_write+0x12a/0x250
[  386.439312][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.444005][T10070]  ? __pfx_ksys_write+0x10/0x10
[  386.451858][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.454857][T10070]  do_syscall_64+0xcd/0x4c0
[  386.460849][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.461062][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.465733][T10070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.472266][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.476785][T10070] RIP: 0033:0x7f9257f8e929
[  386.483009][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.489503][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.495186][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.495384][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.501257][T10070] RSP: 002b:00007f9258d8a038 EFLAGS: 00000246
[  386.505647][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.505860][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.512650][T10070]  ORIG_RAX: 0000000000000001
[  386.531905][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.531952][    C1] vkms_vblank_simulate: vblank timer overrun
[  386.532031][  T910] m920x_read = error: -19
[  386.532050][  T910] dvb-usb: error -19 while querying for an remote control event.
[  386.532279][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  386.538283][T10070] RAX: ffffffffffffffda RBX: 00007f92581b5fa0 RCX: 00007f9257f8e929
[  386.544805][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  386.550879][T10070] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003
[  386.557122][   T30] audit: type=1400 audit(1750008952.802:536): avc:  denied  { open } for  pid=10058 comm="syz.0.1089" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  386.563446][T10070] RBP: 00007f9258010b39 R08: 0000000000000000 R09: 0000000000000000
[  386.563460][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.563473][T10070] R13: 0000000000000000 R14: 00007f92581b5fa0 R15: 00007fff2be2f2c8
[  386.563501][T10070]  </TASK>
[  386.672628][T10070] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  386.679917][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.3.1092 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  386.692002][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  386.702062][T10070] Call Trace:
[  386.705344][T10070]  <TASK>
[  386.708275][T10070]  dump_stack_lvl+0x3d/0x1f0
[  386.712879][T10070]  panic+0x71c/0x800
[  386.716789][T10070]  ? __pfx_panic+0x10/0x10
[  386.721220][T10070]  ? show_trace_log_lvl+0x29b/0x3e0
[  386.726445][T10070]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.732523][T10070]  check_panic_on_warn+0xab/0xb0
[  386.737474][T10070]  __warn+0xf6/0x3c0
[  386.741368][T10070]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.747432][T10070]  report_bug+0x3c3/0x580
[  386.751758][T10070]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.757824][T10070]  handle_bug+0x184/0x210
[  386.762147][T10070]  exc_invalid_op+0x17/0x50
[  386.766638][T10070]  asm_exc_invalid_op+0x1a/0x20
[  386.771481][T10070] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  386.778151][T10070] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  386.797757][T10070] RSP: 0018:ffffc9000396f438 EFLAGS: 00010246
[  386.803819][T10070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  386.811783][T10070] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040dc0
[  386.819746][T10070] RBP: 0000000010000000 R08: 0000000000000005 R09: 0000000000000000
[  386.827713][T10070] R10: 0000000002000000 R11: 0110000000000000 R12: 0000000000000010
[  386.835667][T10070] R13: 1ffff9200072de9c R14: 0000000010000000 R15: 0000000000000010
[  386.843641][T10070]  ? stack_trace_save+0x8e/0xc0
[  386.848488][T10070]  ? __pfx_stack_trace_save+0x10/0x10
[  386.853855][T10070]  ? stack_depot_save_flags+0x28/0xa40
[  386.859309][T10070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  386.865631][T10070]  ? kasan_save_stack+0x42/0x60
[  386.870479][T10070]  ? kasan_save_stack+0x33/0x60
[  386.875321][T10070]  ? kasan_save_track+0x14/0x30
[  386.880164][T10070]  ? __kasan_kmalloc+0xaa/0xb0
[  386.884914][T10070]  ? common_read+0xc1/0x3d0
[  386.889405][T10070]  ? policydb_read+0x874/0x3220
[  386.894252][T10070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.900326][T10070]  ? hashtab_init+0x1b1/0x290
[  386.904997][T10070]  __alloc_pages_noprof+0xb/0x1b0
[  386.910015][T10070]  ___kmalloc_large_node+0x84/0x1e0
[  386.915207][T10070]  ? hashtab_init+0x1b1/0x290
[  386.919874][T10070]  __kmalloc_large_node_noprof+0x1c/0x70
[  386.925499][T10070]  __kmalloc_noprof.cold+0xc/0x61
[  386.930523][T10070]  hashtab_init+0x1b1/0x290
[  386.935021][T10070]  ? __asan_memcpy+0x3c/0x60
[  386.939600][T10070]  common_read+0x1c2/0x3d0
[  386.944010][T10070]  ? __pfx_common_read+0x10/0x10
[  386.948937][T10070]  ? __kmalloc_noprof+0x242/0x510
[  386.953963][T10070]  ? __pfx_common_read+0x10/0x10
[  386.958895][T10070]  policydb_read+0x874/0x3220
[  386.963578][T10070]  ? __pfx_policydb_read+0x10/0x10
[  386.968701][T10070]  security_load_policy+0x15c/0x12c0
[  386.973990][T10070]  ? lockdep_hardirqs_on+0x7c/0x110
[  386.979186][T10070]  ? __pfx_security_load_policy+0x10/0x10
[  386.984911][T10070]  ? rep_movs_alternative+0x4a/0x90
[  386.990109][T10070]  sel_write_load+0x332/0x1bd0
[  386.994867][T10070]  ? save_trace+0x1ad/0x380
[  386.999369][T10070]  ? add_lock_to_list+0x9d/0x130
[  387.004297][T10070]  ? lockdep_unlock+0x64/0xe0
[  387.008960][T10070]  ? __lock_acquire+0x1053/0x1c90
[  387.013992][T10070]  ? __pfx_sel_write_load+0x10/0x10
[  387.019193][T10070]  ? __pfx_sel_write_load+0x10/0x10
[  387.024381][T10070]  vfs_write+0x2a0/0x1150
[  387.028705][T10070]  ? __pfx___mutex_lock+0x10/0x10
[  387.033727][T10070]  ? __pfx_vfs_write+0x10/0x10
[  387.038489][T10070]  ? __fget_files+0x20e/0x3c0
[  387.043177][T10070]  ksys_write+0x12a/0x250
[  387.047515][T10070]  ? __pfx_ksys_write+0x10/0x10
[  387.052375][T10070]  do_syscall_64+0xcd/0x4c0
[  387.056885][T10070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.062785][T10070] RIP: 0033:0x7f9257f8e929
[  387.067199][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.086813][T10070] RSP: 002b:00007f9258d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  387.095225][T10070] RAX: ffffffffffffffda RBX: 00007f92581b5fa0 RCX: 00007f9257f8e929
[  387.103194][T10070] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003
[  387.111165][T10070] RBP: 00007f9258010b39 R08: 0000000000000000 R09: 0000000000000000
[  387.119136][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.127103][T10070] R13: 0000000000000000 R14: 00007f92581b5fa0 R15: 00007fff2be2f2c8
[  387.135086][T10070]  </TASK>
[  387.138299][T10070] Kernel Offset: disabled
[  387.142607][T10070] Rebooting in 86400 seconds..