last executing test programs:

6m8.021744679s ago: executing program 4 (id=190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000000)="801edf37d3b43ba337ae8a17f0e8fb17c7bf91b1793e2385bc7f99bb264a59a2b339d5a0890a6db5917d24dc7b88c60be058a0a37cb235f8442a0d24160ef3f3403691386ab58b49c1")
ptrace$cont(0x21, r3, 0x80000001, 0x4)

6m6.778584783s ago: executing program 4 (id=191):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f", 0x91}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x2e, 0x0, 0x5f]}}, 0x0, 0xfffffffffffffe60}, 0x28)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000080)=<r6=>0x0)
sendmsg$nfc_llcp(r5, &(0x7f0000000700)={&(0x7f0000000200)={0x27, r6, 0x6, 0x7, 0x9, 0x20, "5199bf6866be44e7f4f6308ec5663061d5a671e31c17bae59fe546dca4fab5a3a90271f9636cd178b57a5c97a34a42f2977dad8d953b9f8c513c19b40517ef", 0x19}, 0x60, &(0x7f0000000600)=[{&(0x7f00000002c0)="58a602256a9268f812d84e3344bdcfb8024762b86a9c209196ff4d37e44bc5b5378536b6ac52fc61ec3cff41948ba88ec5cb374403dbf8a3a5a7ad41d6ab47ac756c739762709b753282ff333be59605f2e52c8e45854790373d45ec443703605b508b6890", 0x65}, {&(0x7f0000000340)="68c9b4b74b5c5432c14a912eba7855c56299570f1d29cb0b34e8cb1e63674a747c006e7f0f62b5b04b9f999bdabc1b137abfad3052b0645a", 0x38}, {&(0x7f0000000380)="1844fa950dbb207e094bd80bd3d234e2c9210a190920494f35cca69cd40ce43ad9820adabfeec83565ebd7cd7c5642d428982f61ccd9170cb27f7a700b1d847cf5b94d722453fc44333aa393214066beaf5a056ce38455829534047cf703a60805490a667d882ae75d99a09dc77cd5efe6be2ae9b54fc7351d75d7919a6cb179135c733ff66a", 0x86}, {&(0x7f0000000440)="dfe62420293a8503bd1b607639c0f846225265f4096419d7868b893f241052990ae7122a30d186b66cd14b20e63633bfff5f6a2b9129dcbb0c127238a730", 0x3e}, {&(0x7f0000000500)="9800a5d867c0102d38b75f5f920baab2686de56cd1a4466ae11ca14016cb39c1218f6da0cf450fd8bed0c1ddb612f6daa55d11409bac0bbf504d1954b8bfe9df36be7c44bde95378eb70ed3335ce6b796c3c24fa0e047553863dacc3b294e073ce93b8c0c1998947504714c8491c5e9e66d67317f0ff797e72765d42ef8a1bad66c6416cbef720f7e2ed67620b1cfdf01df23836e8a0cc4fa5e1e23218e86fd76e6bb27c3681f6e3aa2fe0c9af1271b8656f9a946c953ceb7b3de7fc8fc7f7cd9791c6f473951ca7e4935d786ee1bb7a1f8c97d8798589ae8f83627ac4bf639aba58786a9471326a6694ff54a9a73aef60badfd2f4c220b0", 0xf8}], 0x5, &(0x7f0000000680)={0x68, 0x111, 0xfffffff9, "1ff0eda6f4697e1fdb281fbdfb99fce785eadc396ca02a7ef573f527e46e54ece006fb1b2cbc3bdbf18854d59c4f1bd022f574320ccc47f6fb0d8ce8607e8f49e68417922281fb1ed9ca03e85707cc798a8ff04cf75527"}, 0x68, 0x1}, 0x4000)
bind$nfc_llcp(r3, &(0x7f0000000640)={0x27, r6, 0x1, 0x3, 0x9, 0xb0, "c933809a05fea354333c7dfe372cb694b17ff0e18c2e1b623113bd2e82d5d898f098338a116c5b7f6f967d352adb8be48518ec758ad0163cb574b485b569f6", 0x34}, 0x60)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6m6.015682661s ago: executing program 4 (id=196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0x1, 0x4, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x43, 0x0, [{0x295, 0x0, 0x4}, {0x297, 0x0, 0x7}]})

6m5.265289096s ago: executing program 4 (id=197):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="fa0e9000000020"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0xe, 0x3, "d56d8b"}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r1)
waitid(0x0, r1, 0x0, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x24040800, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0)
r4 = syz_pidfd_open(r1, 0x0)
waitid$P_PIDFD(0x3, r4, 0x0, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"16f84dcd6511795300"}}, {0x2, 0x7, 0x7f, 0x8, @time={0x9, 0xa}, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x61}, {0x9, 0x4}}}], 0x38)

6m1.371427825s ago: executing program 4 (id=209):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cd7b3a28674f7b4269417a5c1dd69b9a71016453b5960afde31c03e0d62a56ae3ed2f9d468db1b05c4c4aaef352c8a8a46653001eb2747a67801558f058d1b086508c67fc9d9bbbdf451228047d43cc34d9c26191c80dcfa0bc8a543ba288b90f5f10fb49c5e86e51ab053dee23664d640436f084eb194acc4e78e828f50812e32a41456e88960a6e8be33e5d2af466e974eab53cf43a5caa27cfcd6f91f766c55c3cff6947f7260cda0c53d8004d01b249df3fda4a396ab460c367125db652a2ea2658674393d97a5942a1c0ab5224a9d0", @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf250d00000008000b000600000008002c00010000000500370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1, &(0x7f00000016c0))
sendfile(r7, r8, 0x0, 0x20000023896)

6m0.337491988s ago: executing program 4 (id=212):
r0 = socket(0x10, 0x6, 0x10000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
recvmmsg$unix(r0, &(0x7f00000043c0), 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xe, 0x4000, {<r1=>0xffffffffffffffff}, {}, 0xedce, 0x4000000000000})
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8000}]}}]}, 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f0000000480)=[@wrmsr={0x65, 0x20, {0x9ad, 0x80}}, @wr_drn={0x68, 0x20, {0x6, 0x800}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x668, 0x7425, 0x86, 0x7ff}}, @out_dx={0x6a, 0x28, {0xac30, 0x4, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa3, 0x0, 0xcbec, 0x2}}, @out_dx={0x6a, 0x28, {0x5f88, 0xc, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x7c14, 0x0, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xae95}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xb078, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2c, 0x5, 0x2, 0x80000001}}, @set_irq_handler={0xc8, 0x20, {0x4c, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x919, 0x3}}, @wrmsr={0x65, 0x20, {0x9da, 0x9}}, @out_dx={0x6a, 0x28, {0xb876, 0x7, 0xffffffffffff9bc3}}, @set_irq_handler={0xc8, 0x20, {0xb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x4400, 0x4, 0xfffffffffffffff8, 0x155}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0xe158}}, @cpuid={0x64, 0x18, {0x6, 0x9}}, @wr_crn={0x67, 0x20, {0x8, 0x32}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x11, 0x3, 0x2, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x22, 0x2, 0x4, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16=0x4, 0x2, 0x2, 0x64}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xfe, 0x7, 0x6, 0x3}}], 0x490})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000980)={[0x2, 0x9, 0x1000, 0x7, 0x7fffffff, 0x4, 0x5, 0x8, 0x100000001, 0x923b0eb, 0x8000000000000000, 0x8585, 0x5, 0x3ff, 0x10001, 0x3], 0xdddd1000, 0x240400})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff0500000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000697000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000699000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0)

5m45.086306584s ago: executing program 32 (id=212):
r0 = socket(0x10, 0x6, 0x10000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
recvmmsg$unix(r0, &(0x7f00000043c0), 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xe, 0x4000, {<r1=>0xffffffffffffffff}, {}, 0xedce, 0x4000000000000})
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8000}]}}]}, 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f0000000480)=[@wrmsr={0x65, 0x20, {0x9ad, 0x80}}, @wr_drn={0x68, 0x20, {0x6, 0x800}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x668, 0x7425, 0x86, 0x7ff}}, @out_dx={0x6a, 0x28, {0xac30, 0x4, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa3, 0x0, 0xcbec, 0x2}}, @out_dx={0x6a, 0x28, {0x5f88, 0xc, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x7c14, 0x0, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xae95}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xb078, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2c, 0x5, 0x2, 0x80000001}}, @set_irq_handler={0xc8, 0x20, {0x4c, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x919, 0x3}}, @wrmsr={0x65, 0x20, {0x9da, 0x9}}, @out_dx={0x6a, 0x28, {0xb876, 0x7, 0xffffffffffff9bc3}}, @set_irq_handler={0xc8, 0x20, {0xb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x4400, 0x4, 0xfffffffffffffff8, 0x155}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0xe158}}, @cpuid={0x64, 0x18, {0x6, 0x9}}, @wr_crn={0x67, 0x20, {0x8, 0x32}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x11, 0x3, 0x2, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x22, 0x2, 0x4, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16=0x4, 0x2, 0x2, 0x64}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xfe, 0x7, 0x6, 0x3}}], 0x490})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000980)={[0x2, 0x9, 0x1000, 0x7, 0x7fffffff, 0x4, 0x5, 0x8, 0x100000001, 0x923b0eb, 0x8000000000000000, 0x8585, 0x5, 0x3ff, 0x10001, 0x3], 0xdddd1000, 0x240400})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff0500000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000697000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000699000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0)

11.169408259s ago: executing program 0 (id=1121):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f00000000c0)={<r2=>0x0, 0x0}, 0x0)
tee(r2, r1, 0xff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}})

10.752040338s ago: executing program 0 (id=1124):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000100)={0x0, 0x2970, 0x1f480, 0x0, 0x399})
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x1c5001, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5)
r2 = semget$private(0x0, 0x6, 0x0)
semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r2, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semctl$GETZCNT(r2, 0x2, 0xf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)

9.481752077s ago: executing program 2 (id=1126):
r0 = socket$alg(0x26, 0x5, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x2, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x8}, [@NDA_VLAN={0x5, 0x5, 0xfffe}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x5, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2020, &(0x7f0000000280)={0x0, 0x989680})
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)

8.962024751s ago: executing program 2 (id=1128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000ffffffff850000000e000000180100002020702500000000002020207b1af80000000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94)

8.882153043s ago: executing program 1 (id=1129):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x2000c800)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3c8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x5, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"})
r6 = syz_open_pts(r5, 0x900)
r7 = dup3(r6, r5, 0x80000)
read(r7, &(0x7f00000000c0)=""/226, 0xe2)

8.837768219s ago: executing program 2 (id=1130):
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

7.874093277s ago: executing program 5 (id=1132):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x1, 0x1, 0xfffffffc, 0x1})
r1 = fsopen(&(0x7f00000001c0)='vfat\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setfsuid(0x0)
r2 = getpgid(0xffffffffffffffff)
syz_open_procfs(r2, &(0x7f0000000180)='clear_refs\x00')
r3 = geteuid()
setfsuid(r3)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x800000000000, 0x5})
mprotect(&(0x7f0000b11000/0x3000)=nil, 0x3000, 0x996936f3ffccc4e2)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r5 = fsmount(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=<r6=>0x0)
prlimit64(r6, 0x9, &(0x7f0000000140)={0x7, 0x3}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x4010, r5, 0xec373000)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0)
fchdir(r5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r8, 0x4, 0x1)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x65a600, 0x0)

7.593247627s ago: executing program 1 (id=1134):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f00000000c0)={<r2=>0x0, 0x0}, 0x0)
tee(r2, r1, 0xff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}})

7.493860587s ago: executing program 5 (id=1135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$inet6(0xa, 0x3, 0xff)
getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001000004000000060000000014000200fc0200"/36], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
socket$tipc(0x1e, 0x5, 0x0)
syz_emit_ethernet(0x16f, &(0x7f0000000400)={@random="b2f4a20f09c5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}], @ipv6=@udp={0xd, 0x6, "528241", 0x131, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@dstopts={0x5c, 0xf, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x2}}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0xdb3}, @calipso={0x7, 0x58, {0x1, 0x14, 0x83, 0x5, [0x0, 0x0, 0x2, 0x8001, 0xa, 0x8, 0x3ff, 0x100, 0x1, 0x5]}}, @enc_lim={0x4, 0x1, 0xde}]}], {0x4e23, 0x4e24, 0xa9, 0x0, @opaque="af33db941420ca84bbde5c962a7e10689c994a247002c3bb5670970710acd916d8f01c03f54388579386c0f5b7277bb1a5d7cbc368af0c8bcdae0ae9cb989b20984752128245011ebb4a94dfdca1a61b842187330ddd3a2a03944b5d0504c6ee2c49992ff387230c969a304395d7881b88bd24fdfe46d245170af323cb02e12839f0b23b9aee86af24e8818b03e2dc851cc7b09ae957c381ce28561a46394a8fce"}}}}}}}, &(0x7f00000005c0)={0xffffe85d, 0x3, [0x8b3, 0xfa4, 0xd47, 0xd5]})
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
syz_usb_connect(0x3, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015002a2329f20d112209cafe50102030109024600017805105e0904560000ff02760705"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)

6.948646905s ago: executing program 3 (id=1136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
keyctl$setperm(0x5, 0x0, 0x20008000)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$pptp(0x18, 0x1, 0x2)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
syz_usb_disconnect(r4)
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x550c, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892c87025048c9f40363cf916", "cfff3c66", "e2b70d9b00"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "3fbb48ae356238a4", "a9218a4fad88f7741832c4d31f7fc15ec43a3a2dd46663791b685fe08900e291", "155e77fd", "7ef183b74d8f7675"}, 0x38)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')

6.86548587s ago: executing program 1 (id=1137):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0xb6a0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x5460, 0x0)

6.430038659s ago: executing program 1 (id=1138):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0xb, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe63b, 0x0, 0x0, 0x0, 0x739}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x87, 0xfa, &(0x7f0000000340)=""/250, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0x2, 0x8}, {0x1, 0x3, 0x8, 0xc}, {0x5, 0x5, 0xd, 0xc}, {0x3, 0x4, 0xc, 0x3}, {0x0, 0x4, 0xe, 0x2}, {0x0, 0x2, 0x1, 0x2}, {0x4, 0x2, 0x4}, {0x3, 0x2, 0x7, 0xa}, {0x4, 0x5, 0x4, 0x1}, {0x1, 0x2, 0x10, 0xa}], 0x10, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x12, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41f73}, [@IFLA_MAP={0x24, 0xe, {0x8, 0x7fffffffffffffff, 0x52d, 0xaa7f, 0x3, 0x24}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0)

6.158904591s ago: executing program 1 (id=1139):
r0 = socket$alg(0x26, 0x5, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x2, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x8}, [@NDA_VLAN={0x5, 0x5, 0xfffe}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x5, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2020, &(0x7f0000000280)={0x0, 0x989680})
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)

5.543779351s ago: executing program 2 (id=1140):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001600)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x8, [{<r4=>0x0}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0, r3}, {r1}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}, {<r9=>0x0}, {}, {r1}, {}, {}, {r2}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {<r12=>r2}, {r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r15=>0x0}, {0x0, r3}, {}, {<r16=>0x0}, {0x0, r3}, {}, {}, {}, {}, {<r17=>0x0}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {<r19=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r20=>0x0}], 0x0, "fc7c37c78dba72"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003200)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r21=>0x0}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r9}], 0xb1, "cf637f009e94ac"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000020c0)={r13, r21, "bbbae8a0f443da337930165c90ab4d2bd2f65ce0405aaffdc21fb05e76955832c4f6079f4266c425b815157302860220aa9d9c84d0a7abe94b133bcca480ef9b4c45353f249013af5a787b077b4320a23b73b1d0707cb0819f3b557e8bf1adc07e641b6bb49a88aee7a0d2c8b773c997979fa08062ecd0b69f3e9de35320f2721978e3d999747cbf404698f54d5bcf80bbddba3786698950465c5882bd51d0b0c3ee772cad0ae55b6a0eb8b4329c770d84b2bc04fcaafbc225d49b6c52008bcfaed939109748ff02636093f8ee09bee66bf209c9da143b16e3da170f78d21987da2a7c61076a99efb97a15e22569024be8dd8e95610b80de00", "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"})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r22 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r22, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r23=>0xffffffffffffffff, <r24=>0xffffffffffffffff})
connect$unix(r24, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r24, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r22, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r23, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r25 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000020605000000000000000010000000000c00078005001500000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r26 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r26, &(0x7f0000000200), 0x0)
r27 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r27, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r28 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r28, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006)

5.218075239s ago: executing program 1 (id=1141):
syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc9700000000000000d3001ea89de2b7fb0000e60080a8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22de800b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000240), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xfbfbfbfb})
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x400001dd, r7, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), 0x0, &(0x7f0000000040), 0x0, 0x300})
socket$inet6(0xa, 0x6, 0xfffffffb)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)

5.142064484s ago: executing program 0 (id=1142):
syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = getpgid(0x0)
mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x8b101a, 0x0)
syz_pidfd_open(r1, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

4.261863659s ago: executing program 2 (id=1143):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000003480)=[{&(0x7f0000001080)="227d7a74d16e31590b6565", 0xb}], 0x1, 0x8)
io_setup(0xf, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}])
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(r1, &(0x7f00000000c0)='./bus\x00', 0x51)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008002c00070002fb060019c00364bc24eab556a705251e618218db677642109146a2378c877bddfcc1863b747ee3d5addad5eb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000095)
socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141800, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a24000000090201030000000027dad30d3000000000050000030800034000edffff07000c4000000005140000001180010000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32=r3], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

4.056593502s ago: executing program 0 (id=1144):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
close(0x3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
getrlimit(0xd, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x5)

3.882649368s ago: executing program 5 (id=1145):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x2000c800)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3c8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x5, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"})
r6 = syz_open_pts(r5, 0x900)
r7 = dup3(r6, r5, 0x80000)
read(r7, &(0x7f00000000c0)=""/226, 0xe2)

3.730125244s ago: executing program 3 (id=1146):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3)
get_mempolicy(0x0, 0x0, 0x208, &(0x7f0000394000/0x3000)=nil, 0x2)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)

3.586065785s ago: executing program 3 (id=1147):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x19, 0x1, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20282, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x2040000, &(0x7f0000000200)=ANY=[@ANYBLOB="74726162733d66642c72668e036f3d4e477b02ee7a04d76385399344d4ea6e3a5b2dfc9056080b685848c20d5dcac4b6260f4179076c2cc736d56109b2da15f1f67d636d396f8a74bb9bfb68899c9e159161ca52bdab009f5081518eb818dcda7c113906f182f64ebf0038db9ad68f42a7", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB=',\x00'])

3.373584001s ago: executing program 3 (id=1148):
write$nci(0xffffffffffffffff, 0x0, 0x10)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0, 0x0, 0x4})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000005380)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="fcc7cad2b873ff19a8bc84f4a25865b322be910557a6cbc33e7217add3c1168312df17a2ec9d2815155322f2d411b24bd63bdcee7ce1dbdba2f5ea1b3fd7ac59acb639500797d39a208ffb9df2a5c144697f21cf81af19fd6ac6a8", 0x5b}, {&(0x7f00000015c0)="4d09ec3f9a7f02aa034125de252f0a2d7545ecb3f3668db63bccb1bef2e646141cfbdc198844ca24820db0c037c9baffabd0dec833d67cef6a32eaa10bb1643fc679e7802a9ed2bc11c7ad857e5cef3ed974b293d405131858df73b3b577aacc2443cd5c20d07acb55523631e6415a177544577b71974d67bd4bf2211151", 0x7e}, {&(0x7f0000001640)="e94b48fd08f21b9e0fabb8f7cda140351dc055450fe68795f61b1de00448d69ff20c91ef33ca75f8b4d114047b9fe3fbbbfa8fde7b6b0c8f1d60d1c573806ba87810bf53592d65ac811a", 0x4a}, {&(0x7f00000016c0)="27d432a237e1969a2b08c8", 0xb}, {&(0x7f0000001700)="bd368bbc6df7073f4b6f7d502599c1ea46d18947ebbc8dd1b13dcc3fa5d70cdb0107037ae2abefe66b404502f6b31385219af3bd1a23899bf5c6a3a6371e2b8c318661d52d", 0x45}, {&(0x7f0000001780)="862a938eef2405df61ec44f9b3f2638394801fea54f704d25618e7f147aae46e7554eab43f3ba0be1eed23f8c4cf27c44377d7589a1ec264f73a448e708f788e54f3", 0x42}, {&(0x7f0000001800)="cf496c670dfa3c2c17beb3556d4246edb496cb3315b2972d7e022c1ece0e0edc71cec6f2bf24f688cf53d93f78fee8ac0728a30afa4aefd484ddf2b9dedf290360f23b7ad5778cb4d28d9eb506710f5e284234473075c9fb94fe6d5703b3b5ed3143eb0f517941fae6316277a6f8971c802e29dd4888c6ed9c41a0f64d286d29dbe3dcb2290812d7105cbc957dc648a7d79ff619cf6a4ca2e88458a36ab0cc584d9491d0a35f692d046980ecc3e610c634262b32f45c09412c03a03ee163cbbb4c724d7f0698132104ffa130030c6f69911aeffba0c3f0535fa99dd49c17f3857487ff6f49bea835b129053df60404b1aa024931336b7001b10fc2444521db9abffce7940268b9d45c426cf4e2aaff2c9f8d3c53ae221738093146f82092c4549e75cd95ee155e680b4635039bbe7941c612d97756feea6f6f507e77113510af5a8ca700fa3923648617b2f7cdf637087614a8b325a19cd0822ead6e30d1c76295592875a148eb0d530f6f04a56b7000e053543c8b51c42a462e2f6a69c196a6c73925f67f88bee4adf286b0dcd4bd6445f8c3e0faffa805e3a14cf05ff2befd78eca471b8b266089d7862d40f7640eab91e5a04510f08e13ec4bdda19289292e06be43759c98fab780d993a69ea2c82d3922f840ac3060b28434b11ae5331082b7c61c184e7afade1315adba1dbbccb9150880673c3a0532597954683f9fbb8c52f23e424f186948a4d0588e7eb59fac54c2e6ef5d8957e999ec99687719924317fef2998a7d5099b8dc6c6170be6bb5870cce67cdf5d084c7abb8aed50feb4e18430c79b4fc3ba963493f54f6acf2e71bf84e14588a9b2dd156ca6bb2ce50752e37cb6ad62ceb38e35841ab076bf7bf8618d3e283976690f802e3e13b448e1cfa645146181da947e206ea869526e9ece6b4320416e5c43c2a0ab649006d71e578073985886b47a92815652616f51e73fac33d5e782aefa060acf6687c464722da42dab7e920aef13a03b63d2b04413c00a492dbf20b62bec1904e762d7140865af44588c1d9a1668e5d9c8d7f7fb09a72195302bd18a973139d5c48b6e34096023212b65dcf1a5bca683582c94bf2fdef16218412e33b3972b8ce6ecb2a7a66c13cb340609f9997e3bcfcda3f6da2b3e217a8fed88fb35b2396162de0b905b4257df15a524150f3151b7b18ef101a9b62bb664330b5174c95978d8172a048f2b5953874aff5d06f549094e51ba5884948f372ad8c59ad7e5d52da4ac75ca5df0c6f67b5486a182af4583c9fd8cf50ff4a91d9c124cf04ae4fc987fdd7902c92b756b3d5964d3e35b7497795bc80e4e33ff34993af45636a93ff0872428d1e6416822d41ed28f0109750f75d2f8c444c582e1b9fd43bd501e430ba52569570c4ce600c8b67e04641e73cae0bb203b5a0029903f5834227db7b4d538bb96f474f54c934ee392d9270f940de43bcc58ed28ba28723a6ebe2f6a7a809d80bf269f9bc328bce1d0d9abc03065f6d119357a389b97d6f70c1422ddc94d7e21d4fe06a79fe2fe779c36dc660d14033d9ad722acca5d52d946783ba6c7973bab89aac7d8da0fdb55b99fdcc2cee160c47024cadb59c8495fe07df7a5bfe091bfebde8a0384b9cfd2adcf3664ab9b45b0933022cdbdad725bb28eedfc6bcf7119fb41d6942470b9ecd506877e77f2e7eaaca87388af57b1c60317b1f9c71b53a540cf6132afb5e2fb09a7e56c2e5aa0fee3a4c947cea64a0d953c9f8138b423291ada94ea0a96433ad7d73c718ceb74f7940825788f06413713c1c604cad75ae7933f93db74c2e9c50cafb4fe0e0637a70c7e332129217bd1918cdf32dffa95a9a03e85925566a605455dd1d0a5dd534dc5d2e7a9e5f0e8dc98fbc6c5c417c8cde6219a2a7df324f391227d07b69225751cdea6283dcf0ed0023467163cd2a07172a43845cdf6c32ecaeb35e12a20c4cf6ab988b83bf25009886c37074eb5ce136c1690dea78ece535979fc33758c83879a161cab7d14a658cde3816fc60d7a5140ef737aadd2529771c1c03fb41d5e631ba4f8024a88a3c43d4ad0e0f7500912ef3bd4cddc37a1b023090dfa02156c0dfec564f169d98ea795e08cba99d20716c840958f3e49fbd0ae17ece40502b1af1e2ace3d08a7a88f2b21bb39090bc9eef95d339be4cd5fa60bf71c3b9c433223f6e272920f0dfddd1c4359f4ef962b6078f3bf9b43fe404e619295554154cd8d6ee40307740e63eac3967b15db4a03bda4d21fcdaaada666e1fc1a3990a5d3e8094022c4bbbc4c59150fda31ddef4dbb6990d4f3bb8cb3a0a92944fb24210d6cc95fccf26d403131edfa56af62c7a084f509554ce0f7d421e3342d676d4487e848e64f2b767d86db687c57c680f3ae5886a0bebc8e7c8b438ea9498f84c94b1428629b3ed7ffab980fac6788d7efc8e80de27dd21226dd5c64190d9fc257147a37ba172e952696812e1aafccdb93d557ec88c9e8aa39ac3b76cb443855df829b46eb0d523cb1a5ad5f9c1357b4761cadf1f5bef2adc1937e96b2a0332bf1f676976de6e3f3959363bdbcf0e357efe873f257142148f108068501b0874e90940e04423b8d428d0bd58a0014cd09647de76702cf0e9db7493bc100070701504297c5ca4aaed4ebe5ba28a801e411ea8c67289c1b9787a4815908c90de93814965a3a9db2fd14375d442c895b23f5b9caaeaa4ff222591446768fbecafb8db5156657ddb33a3cc8d46c1da9f9f27f35126d09e311cc1f9a7117fee5830e58a568ca362dc9fc8b9d4d8d78f5c08661243bbdb960a869359b2e7684458d92a89cbe32a2969ab9c5632f66c99b215b55916a8091c798bfbc6479f0fb2a4d24595f1b6f6e093347fc50917a1ff83b0b46d030c38aba66bb258f49166e20dbc87413d93752eaf7097a5086d0c9669397833503e5b16b3ac31a9545b66dcab7f3f9c3fde63856487dfbd6989ee612bb495a56a65d4e9ad17ad73d5ebaec77e519cfbb149b12353fd8b64647745d7d391113ca3f3cf5f8662e7b3492f0b145e49d27440d82499a2f2aa484819e9d61bdfd7f63740f4ef938f5fb5485bed7c2de9d77c2463893ae566731bdfe090c0bd4a6469073b93876ab5ee8e32fb66937e28998531e1cad2ba8cc896cf38626d91761fda561d25b0a2084883e3df6b7bcf0e4a76f90051d865316a966cd1c71daf4ef594920b43cf7e27bb09984129af6038ea0dc79b367e0f30e3d4240e26c53f0ce1708b7a2102cc5c2c388941f246887bfd491e4592625f93dbbd12759c3d6a9b2b73dfbe61ad0bc092f58adebead60656ee98af3a9fc999d0e9b11774d11c979286ce1be96e013ff3b6a7120f6a2b4a1129dcf1ed485cec0e2b7ceabe5600ce9a8feb680690d028ed9a49c5dd27fdb065020940d6a9dbdb59c30f974fada1283b8c10b700da5dbb771bad8a079f4de80c8d1371795189867b83072910bfeb90e802f5aaae3a62bdf41e7af8c00a1412d5f68927388483257f4ace9d575f6b1bf47424ba46b8c8c22f710ac5fc4f34c24f7694009b6f0d0835bce6836a7f13e0e69d711d3b5410a8ac2af0dd5cda3cd681a56eaf7891f0321e448406a1bc94e883c4b24a829678ad13a8ae5a3ec7f062497380d2edcfd928515f11160c15e4efe9e3104f9eb9ce8f2ed9ea48ac9e5068514e766f9d7cb589826c5fbe76870c325be7591940023889563463a1139e1f40f1f1a23e89f3a2493c4448223107a53690e159a07ba7af17119d749358df32c843ad6923baf088d9a33e211a8f43bb95349a05eff242e49ef6ee09c6041a649422ff89f7f05623dbb74eb44c71195a9742623370c01323035eb8e2c21687a50560a31790bde47a3b733b65ef563d4325269f36c51c31eab1a1b4dcbe4f9c4308433882a703e0e8f367b3f3a8635e0d3242b3eaa44e95a803038a41a55a2d5eb058a9e4aab0eaab77d96929fae967aee31c111928e8ee3d4e1a02733b70d89f1d80d7e2cef7ae3e4536809c348117df515feed5522ef8f05eb1909d07cec906c8965874156d240de43994a606b9869240c19a6f2aac955f30391bf072596d8b9bd338600c8020f646c69874450e668fed58f9a9444fb6b8650dc5d868469a8f650b22c6b2c6a1a0ecd2e2c5cd562f88e48080a8503d8aad9109fbeb0c0566491184cc49408fbbdcb488a7057d9721b2f71bf11a7366f29616915f61c3b69d636cc01f5320b91d00322fdaa3a01916563f944c0c1d218d0c67d6bd01431754eea92730df0c6ef80d4374b04b2c6cf0c57f9453ef8282609c600f153efa48b04619bf562564f6d71b23860bb4526446bd47b34d5493e413a7a0965362ea04fd7a84daa63951ac6b13bc98e8a0cb9adbf49392a5912987c0716db741459884b6da2ec8f4ee71c13c00251a98130787e1a9ec660875af697dccba0f297103e0f65c13e6304ae7bc9cc77d74be22922eed560f5f8582e3a3f9ce0aee74f3b30dffc8d861d8cc961428df0ac41edbe57d2a8978491b71646c9530cfc6bc2a716ca797da33f6f046cdf2132ffe68ba62941199a5f8dee58a43c74532e9eb49181cb761a4e9be2fa366093bd25ada8192ca5cd3f44d19c0cec8693411d0a46efc804bdf9aecfe70c70ea967afa5f7d79086d2e923432d20d24f529703327e765046d085e87e1e4adfd9a63b53aec361b014a347897bf3c7e6771adb79dc68cecada0a4b1eebcade11775f4e1bdbfc43b8284823a123106b5683971db47074a7ef67dee437cb154d950a70b4d821aaeaa9f792e81de2b2983c066a3f04af5c3d6e34e69201964bb2259a15f5a62339235b6b8fd97925ff5833d6f9eae280e8f9936acd0bd7e641547a92e13e048a8ba974cbec5128c7362afb8e0487909a6225aaae83f320d0be31de89797a69636cc2e4f8fee85975a3209cdc2c234d4befdb14d01fac6cdd59ea66aa390d0bcb5d30577faca4ba9d92037f5a1f6e48973342c72d59c1df1613cb8670695607f49572c52b09305f1b954ead51bb3b71ab9104ddf7d0e36ef08d6db08e2b061faa38fb0e71f9c8a1d99892b0d270bccdb20f86174d780f07a9cf138103784c0b547f09e7e13049e06af7e8ff9f84c625d8dd3f5a0d16f14ad1031cda4e90db9265bca013df2d5d788aba97d0f5a6d0c3ee60a532593daba77408178e14228dc60f63aea2b4f22d454febde973841b58bfa86232759e613b31f5e51059fe9b683cb20b3936e5e609e7d776adc3a034ff645d0242e2aa61b191cb6a8ec378e2aa129ad69ad8b57705928456e9b5c55338a92d570a3da5512cf89c08add38a4aa980b6d810901262e0bf15f3d8d5f7843fc80be113d57488505926a2817a7392933667318c0f1b7d20bfb8878381ca0381cc41f07de6dc2e364550bdb1ca065ea3ada65f499ee9075dc4cd617b078d35def0af45118c5d39db15f093cf8b90d4217a834a25173216c5c21699edcea37891cafc37b8a33c0cb36dedabef6a906336c1db06ec62df73a3578f1d56c2ce5930e10db0ce7e46515db97d59a717631fa7e864f10b9d5a0c7279a3bee8fa8f09c6a2fdd2d88ac001018102dfc56f6875d91873d3f4b707c8737c38bb4d49dbd9e27f7720f1b7152962cb3cb0d754ceedc70a02f791bc012c3fdccb5f2af577792d9fe661c9e931d5907a5da6b08b051fc57c3b631db33b4ce37cfe2f360d723862a800500ecd70dfd144d46d9cf6f9e7dcd872932dc29a8704c3cbd65b71c2fcac3958c1ec643e4d7a2c92c6702b1960a9c898603ffdc551b580776a8b748c4b335", 0x1000}, {&(0x7f0000000340)="c4b89bfc5336373cc2ea86de284d3b4cd0c4698d3b43628896182855da4aeafbd0ab35008370edf00e45403f7eb22189a693631fe6cb2d8810b1e478defe228d659611652ac2e5a1639733053e460cea7ee1ad06ee7429866de133ffad8e0d665d31e4a871f7aebdf107f5fbf1e939c50eb9f6e07b10f82d9cda", 0x7a}], 0x9, &(0x7f0000002ac0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b18362e201b8e25c8866b93d4f5d30b18d2bedbe6e5963a030fc27d45e6dca4a6317c0cd49a4f50f365d08d9f70c1045dddb2c6157acfd020cf314aa9e5a07e2d7a4ca87c1ddcf4dfbd58b89425c15fb6572ec9139fbcf25da1a559065e9dbfc46b16ec7012d5cf465d94945d2bd54a1e8ec7474244820378163e358dee3834e39dc343af1e1262b7006980faa", @ANYBLOB="040000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4010}}, {{&(0x7f0000004b40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004bc0)="4957fdb710f8e3218f39f85c7f476b5f937d1fc663dd92b48927c8d33b7787b636460654df50f2b5b93d55f57abf877afde46e07c80f4d5deb1d62eafdfdb2a1d597a716e7de57544e43ff7f8987a60c9129222bbad076219de9711855f9b741122ead0987e927b0b4c08e1bb34826ff27962c2e403cfdf857eccf", 0x7b}, {&(0x7f0000004c40)="c4cb81b50d0ceeab0ed0e8354a072dcd95647c90db5b916184aef720849bf8f3c9075453196a2acd3661785d5fc4516bfb924602d012190132d6861b522aafc0e9be6649331196c674a1ea3ff21e46074a6b12dc2bfa882d77f1a2e257e67dcec14fc45ac4d6", 0x66}, {&(0x7f0000004cc0)="a631780fc600b3cc0a6bf9220ef180fe36c993603e975c40210c96b2327900f153234043285566f12846a86e9c605a8ad1b60d90d323882057e047b99d3f208fe2089b92867d21cb9382d69736ca887909707c85c5103d9b665fb557f8bcde44fdca4f62e5c4221af76d3856fe3a8013a864307922b52786279c6511f046fac184c5eef52921646446347ecd586bf489385f7ab95bf9cf7524250cb669e27f0ce1b9cf410ca250f13d17e110d274da284476e2e4d80f412b9e1d8348f357c5cdcd0a", 0xc2}], 0x3, 0x0, 0x0, 0x48040}}, {{&(0x7f0000004e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004e80)="29ad413acd930d5ff81fc6ae4a6722cc4a15ea782cfcf4b3ce38f53328ea96d468c5b799ecd551141044439fdbd5b81fde8e665dc82bfb86e24d0a18a79ac134a092e269daa771bc6e74e81ea7d628d46457b0b8374205a63e48a0ac23dcbd776116b4d893b3c1452ed0f5800a4e91bbf375d6e0a47d32c116f6e030079544f2b87090592934bc98e076579bcb4278b5cdc8bae7d909bab3e19e", 0x9a}, {&(0x7f0000004f40)="f066f71ea2a3e25d8cf96a21871aa5bc2b74ced8af4bac8ec231a0a81a9b8d3ad3ada85daa4375b56f331a804a720993137f782fdcf7fe1bba3f0a55f2c7d4bff7f7b0cb2f778875626d5fb64ebcc73faf02c4cee66bb67b870f7bc49069b17c0043992cce036a1d0153b0", 0x6b}, {&(0x7f0000004fc0)="616ff75bbe9721042d099a397323c3a07bbb5755cddb1afd20c3332ac14933b5850f837cf75816bcd71e87ce44dd179896b9450085563f07c4bd8c7c678175940ce8b9b3c3667719fdbc045631a62cda3252b96cee480641f0ab55890df1aa5b7cd81d65ebee53b89730793090067d954f44e15a347e99a64fef6b7ee68d2061da531586c5f1ee3a24b968cb18d90282ed4dfebb79a620ebfa2a015f21a509e40bbd0850c181ef59b07230b0818a7967625f596b955d", 0xb6}, {&(0x7f0000005080)="3e143f526c3c9d7225709d3622661ac0fa7b7f71b6e7a928608ccf5dbd2ca64661007e61244c5f002bbd3278c47494a702981795e6deea21d830f5fd8652ac5aaca5a873e00bc4e87fd56c3823642e7d2479fb2326632ac218d8d9daca79dad46f163c896560da828c8dcb30f51f91e0049c426bede75039ce03da42c525212b919f941d9b60e78e52684a1dd400ceed6425a482f64cb85c276b54dd70a7b1e691c9634e506cdb25997486b704337f6dec9f095846e6de83676ef2ceb0a5eda56d828e41d44a1d7125fd0038c3e5f76f7bebf161339838087514492757d35714cb2a253a8cc221", 0xe7}, {&(0x7f0000005180)="d320d056d9223d30a79d6945b607e87a7fb2d836c8ec633475de5280f972b0f0155e0a349b5d6471d655494d6ca407696256a7b2bf43f4b71360e80d82756ad9419c26781480501cb45f00879acbf092b5501b6756f134fb02381c0083a74d4dfecdadd1fe3b1ddd45518d7b99febb2d7ec9e266d9e3", 0x76}, {&(0x7f0000005200)="7c6d986cbdd5975109b6c178f68eae20917c2c359a7a843e975f6ca8064271fcf9b9a9ae90e8d1c7a92930dc9db3a11b59ae0412638f960276ecd76beceeb7d6e387acae28538229ecfe75d5bb81ca3c8711f1e8967cef4161d2025342a01761528bfb6bee07e4664ae56c7d0b2c3bc66b586ce1d6b625835777caaab4fcf75272d7c8a521c229d8b09e71d11319225ccb6667f4", 0x94}], 0x6, &(0x7f0000005340)=[@cred={{0x1c}}], 0x20, 0x20000000}}], 0x3, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x3, &(0x7f0000000100)={0x8, 0x6a, 0x6, 0x8000000000000002, 0x48c, 0x200000005, 0xd, 0x422, 0x2, 0x200, 0xf423c, 0xfffffffffffffff5, 0x20000006, 0x3fe, 0xfffffffffffffffe, 0x5, 0x4, 0x5, 0x0, 0x9220000000000000, 0x3, 0xfffffffffffffffc, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000036000701fcffffff00008100017c000003669ed1e674a476cd8199bbdf311e7eef175de72c346cc983bf85959a028644b5ada040c8f2f7e457bf40ecd64e21fb9183521b4ec5f197d1c2ca4b92757ea65875fa9fa33f2438391a65df42bd95d7cd3e47a243f92830a6c3980ad4087f1bac425bd51b5ad2b322086e6d263361a3c8bf59150d9ffea0a54dd16ebb81b2b835f7c71af144fcf4ab30202c6b746d0790c7c552b623d69e4122895ccef4d0279b2ea9dc37ae25a72913c16f2211bc4714ff9868175ea804352aab48eb472b11f2fa124f12d13da71ad81c202b6c012d656e484e4d6a970d394d65089052ef9e8879735a"], 0x100}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c0d4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r5)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

2.858954107s ago: executing program 5 (id=1149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (fail_nth: 1)

2.789993612s ago: executing program 0 (id=1150):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f000001f6c0)=""/102400, 0x19000)
r2 = socket(0x10, 0x3, 0x0)
accept4$ax25(r2, 0x0, &(0x7f0000000300), 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x100004)
write$eventfd(r4, &(0x7f0000000240), 0xffffff14)

1.783839991s ago: executing program 5 (id=1151):
r0 = socket$alg(0x26, 0x5, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x2, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x8}, [@NDA_VLAN={0x5, 0x5, 0xfffe}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x5, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2020, &(0x7f0000000280)={0x0, 0x989680})
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)

1.265145937s ago: executing program 0 (id=1152):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4ad9, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16)

1.139280882s ago: executing program 5 (id=1153):
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
syz_io_uring_setup(0x266, &(0x7f0000000200)={0x0, 0x21ff, 0x0, 0x2, 0x47}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x98f905, 0xffffbeff, '\x00', @string=&(0x7f0000000300)=0xa3}})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x20000, 0x40, 0xd, 0x2, 0xfffffed8, 0x1, 0xfffffdc1, 0x40, 0xfffffffc, 0x4, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
ftruncate(r4, 0x5)

1.049911217s ago: executing program 2 (id=1154):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x1805}], 0x68000, 0xe000)
syz_usb_connect(0x0, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x210, 0x2c, 0xca, 0x20, 0x8, 0x61d, 0xc1a0, 0x4c13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf8, 0x5, 0x80, 0xd}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x87, 0x0}]})

1.003145693s ago: executing program 3 (id=1155):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0x625b3224, 0x121501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="60000000020603000000000000000000000000001400078008001140000000ba000008400000002b0500010006000000050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c69667f112587f6"], 0xff8b}, 0x1, 0x0, 0x0, 0x4}, 0xc044)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000170a06060000000000000000020000080800074000000001dd0abcdc8dbcbe"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

0s ago: executing program 3 (id=1156):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0x625b3224, 0x121501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="60000000020603000000000000000000000000001400078008001140000000ba000008400000002b0500010006000000050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c69667f112587f6"], 0xff8b}, 0x1, 0x0, 0x0, 0x4}, 0xc044)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000170a06060000000000000000020000080800074000000001dd0a"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

kernel console output (not intermixed with test programs):

.517598][  T804] usb 4-1: Using ep0 maxpacket: 16
[  405.692789][ T5911] uvcvideo 2-1:8.196: No valid video chain found.
[  405.702693][  T804] usb 4-1: device descriptor read/all, error -71
[  405.715059][ T5911] usb 2-1: USB disconnect, device number 51
[  405.836128][   T29] audit: type=1400 audit(2000000003.100:751): avc:  denied  { ioctl } for  pid=9203 comm="syz.0.827" path="socket:[22272]" dev="sockfs" ino=22272 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  406.051048][ T5939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  406.075528][  T804] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  406.098226][ T7140] usb 3-1: USB disconnect, device number 44
[  406.232413][   T29] audit: type=1400 audit(2000000003.490:752): avc:  denied  { map } for  pid=9207 comm="syz.0.828" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  406.270986][ T5911] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  406.284858][  T804] usb 4-1: Using ep0 maxpacket: 16
[  406.298457][ T9195] Scaler: =================  START STATUS  =================
[  406.307297][  T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.317793][ T9195] Scaler: ==================  END STATUS  ==================
[  406.329074][  T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  406.340467][  T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  406.390112][ T9195] qnx4: unable to read the superblock
[  406.418178][  T804] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  406.439485][  T804] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  406.447664][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  406.457344][ T5911] usb 2-1: no configurations
[  406.463646][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  406.472678][ T5911] usb 2-1: can't read configurations, error -22
[  406.481061][  T804] usb 4-1: Manufacturer: syz
[  406.498626][  T804] usb 4-1: config 0 descriptor??
[  406.534958][ T9195] 8021q: adding VLAN 0 to HW filter on device bond2
[  406.615385][ T5911] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  406.777715][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  406.790235][  T804] usb 4-1: USB disconnect, device number 41
[  406.799868][   T29] audit: type=1400 audit(2000000004.050:753): avc:  denied  { read write } for  pid=9201 comm="syz.3.825" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  406.834082][ T5911] usb 2-1: no configurations
[  406.842363][ T5911] usb 2-1: can't read configurations, error -22
[  406.860501][ T5911] usb usb2-port1: attempt power cycle
[  406.864091][ T9220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  406.900614][   T29] audit: type=1400 audit(2000000004.050:754): avc:  denied  { open } for  pid=9201 comm="syz.3.825" path="/177/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  407.215270][ T5939] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  407.235386][ T5911] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  407.255904][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  407.261892][ T5911] usb 2-1: no configurations
[  407.267340][ T5911] usb 2-1: can't read configurations, error -22
[  407.355309][ T5939] usb 6-1: device descriptor read/64, error -71
[  407.515409][ T5911] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  407.598877][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.832'.
[  407.611265][ T5939] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  407.958202][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  407.964075][ T5911] usb 2-1: no configurations
[  407.988675][ T5911] usb 2-1: can't read configurations, error -22
[  408.013243][ T9226] ./file0: Can't lookup blockdev
[  408.021099][ T5911] usb usb2-port1: unable to enumerate USB device
[  408.154421][ T5939] usb 6-1: device descriptor read/64, error -71
[  408.312970][ T5941] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  408.335478][ T5939] usb usb6-port1: attempt power cycle
[  408.540015][ T5941] usb 4-1: Using ep0 maxpacket: 8
[  408.825109][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  408.835437][ T5941] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  408.846019][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.885553][ T5941] usb 4-1: config 0 descriptor??
[  408.906200][ T5941] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  409.016387][ T5939] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  409.070930][ T5939] usb 6-1: device descriptor read/8, error -71
[  409.075307][ T5911] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  409.371784][ T5912] usb 4-1: USB disconnect, device number 42
[  409.515877][ T5911] usb 3-1: no configurations
[  409.520592][ T5911] usb 3-1: can't read configurations, error -22
[  409.556509][   T29] audit: type=1400 audit(2000000006.820:755): avc:  denied  { accept } for  pid=9241 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  409.645431][ T5939] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  409.666527][ T5911] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  409.695821][ T5939] usb 6-1: device descriptor read/8, error -71
[  409.805586][ T5939] usb usb6-port1: unable to enumerate USB device
[  409.825770][ T5911] usb 3-1: no configurations
[  409.830869][ T5911] usb 3-1: can't read configurations, error -22
[  409.838605][ T5911] usb usb3-port1: attempt power cycle
[  409.845265][ T5912] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  409.925275][ T5941] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  409.995524][ T5912] usb 2-1: Using ep0 maxpacket: 8
[  410.002383][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.023236][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  410.054407][ T5912] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  410.064483][ T9250] comedi comedi0: No hardware detected at I/O base 0x8001
[  410.081281][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.095424][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  410.106640][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.118434][ T5941] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  410.140091][ T5912] usb 2-1: config 0 descriptor??
[  410.170352][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.205734][ T5911] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  410.245363][ T5941] usb 1-1: config 0 descriptor??
[  410.249232][ T5911] usb 3-1: no configurations
[  410.256081][ T5911] usb 3-1: can't read configurations, error -22
[  410.501770][ T9260] kAFS: unable to lookup cell '(,c��L'
[  410.516819][ T9260] Failed to initialize the IGMP autojoin socket (err -2)
[  410.545275][  T804] usb 4-1: new low-speed USB device number 43 using dummy_hcd
[  410.555481][ T5911] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  410.598660][ T5911] usb 3-1: no configurations
[  410.604121][ T5911] usb 3-1: can't read configurations, error -22
[  410.616024][ T5911] usb usb3-port1: unable to enumerate USB device
[  410.631383][ T5912] belkin 0003:050D:3201.000C: ignoring exceeding usage max
[  410.648683][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.658064][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.665283][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.674488][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.683029][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.690772][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.692388][ T5941] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  410.699096][ T5912] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  410.723989][  T804] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt
[  410.737207][  T804] usb 4-1: config 1 interface 0 has no altsetting 0
[  410.743967][ T5912] belkin 0003:050D:3201.000C: item fetching failed at offset 24/40
[  410.760724][  T804] usb 4-1: string descriptor 0 read error: -22
[  410.767777][ T5912] belkin 0003:050D:3201.000C: parse failed
[  410.773973][  T804] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  410.783567][ T5912] belkin 0003:050D:3201.000C: probe with driver belkin failed with error -22
[  410.792799][  T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.823182][ T9257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  411.040815][ T5912] usb 4-1: USB disconnect, device number 43
[  411.245538][ T5941] usb 1-1: USB disconnect, device number 47
[  411.775612][ T5939] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  412.135508][ T5912] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  412.245486][ T5939] usb 6-1: Using ep0 maxpacket: 32
[  412.430671][ T5939] usb 6-1: unable to get BOS descriptor or descriptor too short
[  412.444354][ T5939] usb 6-1: config 120 has an invalid interface number: 86 but max is 0
[  412.455236][ T5939] usb 6-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[  412.477775][ T5939] usb 6-1: config 120 has no interface number 0
[  412.519139][ T5939] usb 6-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  412.538304][ T7140] usb 2-1: USB disconnect, device number 56
[  412.591227][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.613997][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  412.802080][ T5912] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  412.805411][ T5939] usb 6-1: Product: syz
[  412.852126][ T5912] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  412.857789][ T9280] netlink: 'syz.3.849': attribute type 1 has an invalid length.
[  412.874584][ T9280] netlink: 'syz.3.849': attribute type 4 has an invalid length.
[  412.882810][ T9280] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.849'.
[  412.914037][ T5912] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  412.914854][ T9280] netlink: 'syz.3.849': attribute type 1 has an invalid length.
[  412.931954][ T9280] netlink: 'syz.3.849': attribute type 4 has an invalid length.
[  412.940433][ T9280] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.849'.
[  412.949846][ T5912] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  413.031649][   T29] audit: type=1400 audit(2000000010.220:756): avc:  denied  { accept } for  pid=9279 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  413.059207][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  413.084017][ T5912] usb 3-1: config 0 has no interface number 0
[  413.092718][ T5939] usb 6-1: Manufacturer: syz
[  413.098171][ T5939] usb 6-1: SerialNumber: syz
[  413.108041][ T5912] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  413.148090][ T5912] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  413.188976][ T5912] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  413.208615][   T29] audit: type=1400 audit(2000000010.470:757): avc:  denied  { write } for  pid=9279 comm="syz.1.851" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  413.236744][  T803] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  413.244240][ T5912] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  413.277235][ T5912] usb 3-1: config 0 interface 125 has no altsetting 0
[  413.290991][ T5912] usb 3-1: config 0 interface 125 has no altsetting 2
[  413.408518][ T5939] huawei_cdc_ncm 6-1:120.86: skipping garbage
[  413.414790][ T5939] huawei_cdc_ncm 6-1:120.86: CDC Union missing and no IAD found
[  413.417484][ T5912] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  413.423181][ T5939] huawei_cdc_ncm 6-1:120.86: bind() failure
[  413.468026][  T803] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  413.895463][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.900778][   T29] audit: type=1400 audit(2000000010.870:758): avc:  denied  { watch } for  pid=9286 comm="syz.3.852" path="/183/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  413.903538][ T5912] usb 3-1: Product: syz
[  413.931548][ T5939] usb 6-1: USB disconnect, device number 32
[  413.943909][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  413.947509][ T5912] usb 3-1: Manufacturer: syz
[  413.957923][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  413.988698][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.008809][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.018382][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.020597][ T5912] usb 3-1: SerialNumber: syz
[  414.029650][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.045111][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.054820][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.075333][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.077361][ T5912] usb 3-1: config 0 descriptor??
[  414.083126][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.097051][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.114151][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.150599][ T5912] usb 3-1: selecting invalid altsetting 2
[  414.179973][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.191238][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.218929][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.234900][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.244015][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.276662][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.294368][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.307321][   T29] audit: type=1400 audit(2000000011.560:759): avc:  denied  { bind } for  pid=9290 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  414.351367][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.397743][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.422878][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.854'.
[  414.436766][  T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  414.453691][  T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  414.473995][  T803] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.494385][  T803] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  414.518634][ T9290] delete_channel: no stack
[  414.537842][  T803] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  414.573749][  T803] usb 1-1: Product: syz
[  414.620066][  T803] usb 1-1: Manufacturer: syz
[  414.652093][  T803] usb 1-1: SerialNumber: syz
[  414.925289][ T9302] /dev/nullb0: Can't open blockdev
[  415.220622][ T5912] get_1284_register timeout
[  416.128151][  T803] usb 1-1: config 0 descriptor??
[  416.185513][    C1] usb 3-1: async_complete: urb error -104
[  416.265972][  T803] usb 1-1: can't set config #0, error -71
[  416.288584][   T10] usb 3-1: USB disconnect, device number 49
[  416.746311][  T803] usb 1-1: USB disconnect, device number 48
[  416.850394][ T5912] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[  417.030218][ T5912] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt
[  417.467563][ T5912] usb 4-1: config 1 interface 0 has no altsetting 0
[  417.480887][ T5912] usb 4-1: string descriptor 0 read error: -22
[  417.488737][ T5912] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  417.499021][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.518141][ T9313] /dev/nullb0: Can't open blockdev
[  417.525053][ T9306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  417.616033][   T29] audit: type=1400 audit(2000000014.880:760): avc:  denied  { ioctl } for  pid=9320 comm="syz.2.861" path="socket:[23188]" dev="sockfs" ino=23188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  417.741476][ T5912] usb 4-1: USB disconnect, device number 44
[  417.919422][ T9329] /dev/nullb0: Can't open blockdev
[  418.680637][ T9332] netlink: 136 bytes leftover after parsing attributes in process `syz.5.865'.
[  418.747362][ T9332] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  418.785515][   T29] audit: type=1400 audit(2000000016.040:761): avc:  denied  { mount } for  pid=9334 comm="syz.0.866" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  418.809906][ T9332] Bluetooth: MGMT ver 1.23
[  418.888031][   T29] audit: type=1400 audit(2000000016.040:762): avc:  denied  { search } for  pid=9334 comm="syz.0.866" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  418.899145][  T803] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  418.911106][   T29] audit: type=1400 audit(2000000016.040:763): avc:  denied  { search } for  pid=9334 comm="syz.0.866" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  419.488741][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.868'.
[  419.539245][ T9340] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  419.671215][  T803] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  420.152559][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  420.521245][   T29] audit: type=1400 audit(2000000016.040:764): avc:  denied  { read open } for  pid=9334 comm="syz.0.866" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  420.580002][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  420.866909][   T10] usb 4-1: Using ep0 maxpacket: 16
[  420.879070][   T29] audit: type=1400 audit(2000000018.140:765): avc:  denied  { append } for  pid=9349 comm="syz.5.870" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  420.895659][ T9351] ubi16: attaching mtd0
[  420.934947][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  420.958616][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  421.030124][   T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  421.075366][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.124270][   T10] usb 4-1: Product: syz
[  421.186133][ T9359] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  421.195306][   T10] usb 4-1: Manufacturer: syz
[  421.232721][   T10] usb 4-1: SerialNumber: syz
[  421.375388][  T804] usb 2-1: new low-speed USB device number 57 using dummy_hcd
[  422.230380][  T804] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  422.239638][  T804] usb 2-1: config 179 has no interface number 0
[  422.257477][  T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  422.527223][  T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  422.904965][  T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  422.932616][  T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  422.960410][  T804] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  422.988641][  T804] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  422.999983][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.027828][ T9357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  423.050598][  T804] xpad 2-1:179.65: probe with driver xpad failed with error -5
[  423.231861][ T9351] ubi16: scanning is finished
[  423.856337][ T9351] ubi16: empty MTD device detected
[  424.008481][   T29] audit: type=1400 audit(2000000021.270:766): avc:  denied  { ioctl } for  pid=9355 comm="syz.1.857" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  424.285886][   T10] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  424.309942][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  424.680250][ T5911] usb 1-1: new low-speed USB device number 49 using dummy_hcd
[  425.441287][   T29] audit: type=1400 audit(2000000021.820:767): avc:  denied  { setopt } for  pid=9381 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  425.750431][ T5911] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt
[  425.961609][ T9351] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[  425.977040][   T10] usb 4-1: USB disconnect, device number 45
[  426.100700][ T5911] usb 1-1: config 1 interface 0 has no altsetting 0
[  426.136095][ T5911] usb 1-1: string descriptor 0 read error: -22
[  426.162953][ T5911] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  426.201479][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.403573][ T9380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  426.824128][ T5911] usb 1-1: USB disconnect, device number 49
[  426.867267][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  426.990788][   T29] audit: type=1400 audit(2000000024.250:768): avc:  denied  { append } for  pid=9397 comm="syz.5.882" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  427.695248][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  427.754260][ T5911] usb 2-1: USB disconnect, device number 57
[  427.876294][   T10] usb 4-1: Using ep0 maxpacket: 32
[  427.931413][   T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  427.950795][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.175532][ T5911] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  428.176122][ T9410] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  428.191219][ T9410] netlink: 'syz.2.883': attribute type 4 has an invalid length.
[  428.199354][ T9410] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.883'.
[  428.327760][   T10] usb 4-1: config 0 descriptor??
[  428.701652][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  428.710190][ T5911] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  428.719864][ T5911] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  428.728508][ T5911] usb 2-1: Product: syz
[  428.732713][ T5911] usb 2-1: Manufacturer: syz
[  428.737819][ T5911] usb 2-1: SerialNumber: syz
[  429.259098][ T5911] usb 2-1: config 0 descriptor??
[  429.412875][   T29] audit: type=1400 audit(2000000026.660:769): avc:  denied  { mount } for  pid=9390 comm="syz.3.880" name="/" dev="autofs" ino=24094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  429.726098][ T5911] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  429.910323][ T5911] peak_usb 2-1:0.0 can0: sending command failure: -8
[  429.930125][ T5911] peak_usb 2-1:0.0 can0: sending command failure: -8
[  429.961833][ T5911] peak_usb 2-1:0.0 can0: sending command failure: -8
[  430.019302][   T29] audit: type=1400 audit(2000000027.270:770): avc:  denied  { read write } for  pid=9390 comm="syz.3.880" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  430.088104][ T5911] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8
[  430.143821][   T29] audit: type=1400 audit(2000000027.270:771): avc:  denied  { open } for  pid=9390 comm="syz.3.880" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  430.171163][ T5911] usb 2-1: USB disconnect, device number 58
[  431.239896][ T5898] kernel read not supported for file /vcs (pid: 5898 comm: kworker/0:4)
[  431.266045][ T5939] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  431.465520][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  432.081735][ T5939] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  432.091138][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.102414][ T5939] usb 1-1: Product: syz
[  432.108570][ T9437] Failed to initialize the IGMP autojoin socket (err -2)
[  432.138521][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'.
[  432.166950][ T5939] usb 1-1: Manufacturer: syz
[  432.269745][ T5939] usb 1-1: SerialNumber: syz
[  432.441181][ T9444] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  432.704514][ T5939] usb 1-1: config 0 descriptor??
[  433.034131][ T5939] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 050
[  433.111093][   T29] audit: type=1400 audit(2000000030.370:772): avc:  denied  { unmount } for  pid=6949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  433.147624][ T9457] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers
[  433.581879][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  433.677422][   T10] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  433.720017][   T10] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  433.720044][   T29] audit: type=1400 audit(2000000030.980:773): avc:  denied  { firmware_load } for  pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  433.735240][ T5939] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  433.886273][   T29] audit: type=1400 audit(2000000031.030:774): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  433.981015][ T9466] netlink: 468 bytes leftover after parsing attributes in process `syz.3.900'.
[  434.724519][ T7140] usb 1-1: USB disconnect, device number 50
[  434.955767][ T5939] usb 2-1: no configurations
[  434.971305][ T5939] usb 2-1: can't read configurations, error -22
[  436.038783][ T5939] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  436.561094][ T9505] kAFS: unable to lookup cell '�'
[  437.197980][ T9517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.249367][ T9510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9510 comm=syz.2.911
[  437.294179][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.911'.
[  437.317753][ T9502] block device autoloading is deprecated and will be removed.
[  437.353090][ T9515] macvlan2: entered promiscuous mode
[  437.372008][ T9515] macvlan2: entered allmulticast mode
[  437.385334][ T7140] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  437.585436][ T7140] usb 6-1: Using ep0 maxpacket: 32
[  437.858191][ T7140] usb 6-1: unable to get BOS descriptor or descriptor too short
[  437.888591][ T7140] usb 6-1: config 120 has an invalid interface number: 86 but max is 0
[  437.924453][ T7140] usb 6-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[  437.977778][ T7140] usb 6-1: config 120 has no interface number 0
[  438.082373][ T7140] usb 6-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  438.172357][ T7140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.389677][ T7140] usb 6-1: Product: syz
[  438.626731][ T7140] usb 6-1: Manufacturer: syz
[  438.727608][ T7140] usb 6-1: SerialNumber: syz
[  439.008728][ T9529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.915'.
[  439.018400][ T9529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.915'.
[  439.363755][ T7140] huawei_cdc_ncm 6-1:120.86: skipping garbage
[  439.397256][ T7140] huawei_cdc_ncm 6-1:120.86: CDC Union missing and no IAD found
[  439.422600][ T7140] huawei_cdc_ncm 6-1:120.86: bind() failure
[  439.450787][ T7140] usb 6-1: USB disconnect, device number 33
[  439.595327][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'.
[  439.764822][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  439.789228][   T29] audit: type=1400 audit(2000000037.050:775): avc:  denied  { setopt } for  pid=9538 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  439.820847][   T29] audit: type=1400 audit(2000000037.070:776): avc:  denied  { ioctl } for  pid=9538 comm="syz.2.920" path="socket:[24471]" dev="sockfs" ino=24471 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  439.943423][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  439.965423][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  440.526829][ T9551] trusted_key: syz.0.924 sent an empty control message without MSG_MORE.
[  440.848229][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'.
[  441.044073][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'.
[  441.135943][  T803] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  441.215270][ T7140] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  441.355365][  T803] usb 6-1: Using ep0 maxpacket: 16
[  441.534515][  T803] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  441.612636][  T803] usb 6-1: config 0 has no interface number 0
[  442.087739][  T803] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  442.138534][  T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.161664][  T803] usb 6-1: Product: syz
[  442.177386][  T803] usb 6-1: Manufacturer: syz
[  442.192198][  T803] usb 6-1: SerialNumber: syz
[  442.224552][  T803] usb 6-1: config 0 descriptor??
[  442.247067][ T7140] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  442.258800][ T7140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.269652][ T7140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  442.279514][ T7140] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.293123][ T7140] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  442.302773][ T7140] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  442.317073][ T7140] usb 3-1: Product: syz
[  442.334793][ T7140] usb 3-1: Manufacturer: syz
[  442.355814][ T7140] cdc_wdm 3-1:1.0: skipping garbage
[  442.368026][ T7140] cdc_wdm 3-1:1.0: skipping garbage
[  442.393700][ T7140] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  442.407698][ T7140] cdc_wdm 3-1:1.0: Unknown control protocol
[  443.481038][   T29] audit: type=1400 audit(2000000039.810:777): avc:  denied  { read } for  pid=9566 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  443.586915][   T29] audit: type=1400 audit(2000000040.770:778): avc:  denied  { read write } for  pid=9559 comm="syz.2.929" name="cdc-wdm0" dev="devtmpfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  443.615454][   T29] audit: type=1400 audit(2000000040.770:779): avc:  denied  { open } for  pid=9559 comm="syz.2.929" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  443.671853][   T29] audit: type=1400 audit(2000000040.930:780): avc:  denied  { map } for  pid=9559 comm="syz.2.929" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  443.697132][   T29] audit: type=1400 audit(2000000040.930:781): avc:  denied  { execute } for  pid=9559 comm="syz.2.929" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  444.225372][ T9582] block nbd3: shutting down sockets
[  444.232177][  T803] usb 6-1: selecting invalid altsetting 1
[  444.269842][  T803] speedtch 6-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  444.330385][  T803] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22!
[  444.387975][  T803] speedtch 6-1:0.1: probe with driver speedtch failed with error -22
[  444.618020][  T803] usb 6-1: USB disconnect, device number 34
[  444.685453][ T9560] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  445.132239][  T804] usb 3-1: USB disconnect, device number 50
[  445.235708][   T29] audit: type=1400 audit(2000000042.490:782): avc:  denied  { map } for  pid=9593 comm="syz.2.939" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  445.405319][  T803] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  445.554393][ T9600] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  445.807722][   T29] audit: type=1400 audit(2000000042.490:783): avc:  denied  { execute } for  pid=9593 comm="syz.2.939" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  446.000168][  T803] usb 6-1: Using ep0 maxpacket: 32
[  446.017667][  T803] usb 6-1: unable to get BOS descriptor or descriptor too short
[  446.031878][  T803] usb 6-1: config 120 has an invalid interface number: 86 but max is 0
[  446.040848][ T9604] FAULT_INJECTION: forcing a failure.
[  446.040848][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.064916][  T803] usb 6-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[  446.168758][  T803] usb 6-1: config 120 has no interface number 0
[  446.195368][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.0.943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  446.195402][ T9604] Tainted: [L]=SOFTLOCKUP
[  446.195410][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  446.195421][ T9604] Call Trace:
[  446.195427][ T9604]  <TASK>
[  446.195435][ T9604]  dump_stack_lvl+0x100/0x190
[  446.195470][ T9604]  should_fail_ex.cold+0x5/0xa
[  446.195499][ T9604]  _copy_from_user+0x2e/0xd0
[  446.195526][ T9604]  copy_msghdr_from_user+0x9f/0x4f0
[  446.195558][ T9604]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  446.195594][ T9604]  ___sys_sendmsg+0x106/0x1e0
[  446.195619][ T9604]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.195676][ T9604]  __sys_sendmsg+0x170/0x220
[  446.195706][ T9604]  ? __pfx___sys_sendmsg+0x10/0x10
[  446.195746][ T9604]  ? rcu_is_watching+0x12/0xc0
[  446.195779][ T9604]  do_syscall_64+0x10b/0xf80
[  446.195804][ T9604]  ? clear_bhb_loop+0x40/0x90
[  446.195829][ T9604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.195853][ T9604] RIP: 0033:0x7f0958d9c819
[  446.195871][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.195890][ T9604] RSP: 002b:00007f0959bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.195908][ T9604] RAX: ffffffffffffffda RBX: 00007f0959015fa0 RCX: 00007f0958d9c819
[  446.195919][ T9604] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000003
[  446.195931][ T9604] RBP: 00007f0959bd1090 R08: 0000000000000000 R09: 0000000000000000
[  446.195944][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.195955][ T9604] R13: 00007f0959016038 R14: 00007f0959015fa0 R15: 00007ffda54c2b08
[  446.195981][ T9604]  </TASK>
[  446.203948][  T803] usb 6-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  446.483863][  T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.492989][  T803] usb 6-1: Product: syz
[  446.498595][  T803] usb 6-1: Manufacturer: syz
[  446.503290][  T803] usb 6-1: SerialNumber: syz
[  447.226169][  T803] huawei_cdc_ncm 6-1:120.86: skipping garbage
[  447.233346][  T803] huawei_cdc_ncm 6-1:120.86: CDC Union missing and no IAD found
[  447.235461][  T804] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  447.241499][  T803] huawei_cdc_ncm 6-1:120.86: bind() failure
[  447.267509][  T803] usb 6-1: USB disconnect, device number 35
[  447.316907][ T5898] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  447.386552][ T9616] netlink: 'syz.2.947': attribute type 58 has an invalid length.
[  447.405289][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'.
[  447.416880][  T804] usb 1-1: Using ep0 maxpacket: 16
[  447.423982][  T804] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  447.432565][  T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.446723][  T804] usb 1-1: config 0 has no interface number 0
[  447.457803][  T804] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  447.474056][  T804] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  447.485326][ T5898] usb 2-1: Using ep0 maxpacket: 16
[  447.485676][  T804] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  447.500288][  T804] usb 1-1: Product: syz
[  447.524741][  T804] usb 1-1: SerialNumber: syz
[  447.526146][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.556058][  T804] usb 1-1: config 0 descriptor??
[  447.652863][  T804] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  447.663851][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  447.695573][ T5898] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  447.775481][ T9621] dummy0: entered allmulticast mode
[  448.146510][ T5898] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  448.165322][  T803] usb 1-1: USB disconnect, device number 51
[  448.186571][ T5898] usb 2-1: Product: syz
[  448.209963][ T5898] usb 2-1: Manufacturer: syz
[  448.228740][ T5898] usb 2-1: SerialNumber: syz
[  448.255904][ T5898] usb 2-1: config 0 descriptor??
[  448.271091][ T5911] hid (null): global environment stack underflow
[  448.316698][ T5911] hid-generic 616F:20C2607D:F72986D9.000F: global environment stack underflow
[  448.333358][ T5911] hid-generic 616F:20C2607D:F72986D9.000F: item 0 1 1 11 parsing failed
[  448.365647][ T5911] hid-generic 616F:20C2607D:F72986D9.000F: probe with driver hid-generic failed with error -22
[  448.385350][ T9618] dummy0: left allmulticast mode
[  448.734185][ T9632] FAULT_INJECTION: forcing a failure.
[  448.734185][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.791711][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.2.953 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.791742][ T9632] Tainted: [L]=SOFTLOCKUP
[  448.791749][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  448.791760][ T9632] Call Trace:
[  448.791766][ T9632]  <TASK>
[  448.791772][ T9632]  dump_stack_lvl+0x100/0x190
[  448.791802][ T9632]  should_fail_ex.cold+0x5/0xa
[  448.791830][ T9632]  _copy_to_user+0x32/0xd0
[  448.791856][ T9632]  drm_ioctl+0x608/0xc60
[  448.791878][ T9632]  ? __pfx_drm_wait_vblank_ioctl+0x10/0x10
[  448.791910][ T9632]  ? __pfx_drm_ioctl+0x10/0x10
[  448.791942][ T9632]  ? selinux_file_ioctl+0x13b/0x290
[  448.791965][ T9632]  ? selinux_file_ioctl+0xb6/0x290
[  448.791989][ T9632]  ? __pfx_drm_ioctl+0x10/0x10
[  448.792012][ T9632]  __x64_sys_ioctl+0x18e/0x210
[  448.792034][ T9632]  do_syscall_64+0x10b/0xf80
[  448.792059][ T9632]  ? clear_bhb_loop+0x40/0x90
[  448.792082][ T9632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.792103][ T9632] RIP: 0033:0x7f78b4f9c819
[  448.792120][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.792137][ T9632] RSP: 002b:00007f78b5def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  448.792155][ T9632] RAX: ffffffffffffffda RBX: 00007f78b5215fa0 RCX: 00007f78b4f9c819
[  448.792167][ T9632] RDX: 0000200000001100 RSI: 00000000c018643a RDI: 0000000000000003
[  448.792178][ T9632] RBP: 00007f78b5def090 R08: 0000000000000000 R09: 0000000000000000
[  448.792188][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.792199][ T9632] R13: 00007f78b5216038 R14: 00007f78b5215fa0 R15: 00007ffecbef1808
[  448.792221][ T9632]  </TASK>
[  449.782842][ T9648] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.957'.
[  450.037670][  T804] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  450.068983][ T5911] usb 2-1: USB disconnect, device number 61
[  450.198110][ T9654] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  450.207507][  T804] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  450.238524][ T9654] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  450.266382][  T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.332682][  T804] usb 3-1: config 0 descriptor??
[  450.560120][  T804] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  450.560412][ T9661] FAULT_INJECTION: forcing a failure.
[  450.560412][ T9661] name failslab, interval 1, probability 0, space 0, times 0
[  450.682830][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.3.962 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  450.682865][ T9661] Tainted: [L]=SOFTLOCKUP
[  450.682872][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  450.682883][ T9661] Call Trace:
[  450.682890][ T9661]  <TASK>
[  450.682898][ T9661]  dump_stack_lvl+0x100/0x190
[  450.682929][ T9661]  should_fail_ex.cold+0x5/0xa
[  450.682959][ T9661]  should_failslab+0xc2/0x120
[  450.682981][ T9661]  __kmalloc_cache_noprof+0x7a/0x6f0
[  450.683008][ T9661]  ? tcx_link_attach+0x734/0xbc0
[  450.683038][ T9661]  tcx_link_attach+0x734/0xbc0
[  450.683063][ T9661]  ? __pfx_tcx_link_attach+0x10/0x10
[  450.683091][ T9661]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  450.683122][ T9661]  __sys_bpf+0x42c7/0x4b90
[  450.683158][ T9661]  ? __pfx___sys_bpf+0x10/0x10
[  450.683184][ T9661]  ? proc_fail_nth_write+0x9f/0x220
[  450.683206][ T9661]  ? find_held_lock+0x2b/0x80
[  450.683231][ T9661]  ? find_held_lock+0x2b/0x80
[  450.683250][ T9661]  ? ksys_write+0x190/0x250
[  450.683270][ T9661]  ? ksys_write+0x190/0x250
[  450.683297][ T9661]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  450.683325][ T9661]  ? kernel_write+0x6a3/0x6c0
[  450.683345][ T9661]  ? __fget_files+0x215/0x3d0
[  450.683382][ T9661]  ? fput+0x79/0x100
[  450.683408][ T9661]  ? ksys_write+0x1ac/0x250
[  450.683434][ T9661]  ? __pfx_ksys_write+0x10/0x10
[  450.683462][ T9661]  __x64_sys_bpf+0x7b/0xc0
[  450.683481][ T9661]  ? lockdep_hardirqs_on+0x78/0x100
[  450.683507][ T9661]  do_syscall_64+0x10b/0xf80
[  450.683532][ T9661]  ? clear_bhb_loop+0x40/0x90
[  450.683557][ T9661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.683577][ T9661] RIP: 0033:0x7f8a7ef9c819
[  450.683594][ T9661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.683613][ T9661] RSP: 002b:00007f8a7fdcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  450.683629][ T9661] RAX: ffffffffffffffda RBX: 00007f8a7f215fa0 RCX: 00007f8a7ef9c819
[  450.683640][ T9661] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c
[  450.683653][ T9661] RBP: 00007f8a7fdcf090 R08: 0000000000000000 R09: 0000000000000000
[  450.683664][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.683677][ T9661] R13: 00007f8a7f216038 R14: 00007f8a7f215fa0 R15: 00007ffcba5cad08
[  450.683707][ T9661]  </TASK>
[  451.171317][   T29] audit: type=1400 audit(2000000048.430:784): avc:  denied  { read } for  pid=9674 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  451.199556][ T9677] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  451.248855][  T804] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  451.308355][  T804] [drm] Initialized udl on minor 2
[  451.360866][  T804] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  451.396622][   T29] audit: type=1400 audit(2000000048.650:785): avc:  denied  { setattr } for  pid=9670 comm="syz.3.967" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  451.498125][  T804] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  451.729578][  T804] usb 3-1: USB disconnect, device number 51
[  451.738538][ T5911] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  451.770967][ T5911] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  451.944742][ T9685] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.969'.
[  451.985648][ T9685] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.969'.
[  453.305601][   T29] audit: type=1400 audit(2000000050.560:786): avc:  denied  { map } for  pid=9692 comm="syz.5.972" path="socket:[24799]" dev="sockfs" ino=24799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  453.436649][ T9696] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  453.525333][   T29] audit: type=1400 audit(2000000050.570:787): avc:  denied  { read accept } for  pid=9692 comm="syz.5.972" path="socket:[24799]" dev="sockfs" ino=24799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  453.536975][ T9697] binder: 9695:9697 ioctl c0306201 200000000640 returned -22
[  453.634863][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[  453.809965][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv1
[  454.795323][ T5911] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  455.439905][ T5911] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  455.499412][ T5911] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  455.524773][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  455.688716][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.732781][ T9713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  455.779023][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  456.062162][ T9729] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  456.069002][ T5911] usb 1-1: USB disconnect, device number 52
[  456.179347][ T9733] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  456.212941][ T9733] netlink: 'syz.1.983': attribute type 11 has an invalid length.
[  456.240464][ T9733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.983'.
[  456.636197][   T29] audit: type=1400 audit(2000000053.890:788): avc:  denied  { map } for  pid=9726 comm="syz.3.981" path="socket:[26285]" dev="sockfs" ino=26285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  456.700507][ T5911] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  456.725587][  T803] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  456.901378][ T5911] usb 6-1: Using ep0 maxpacket: 16
[  456.938622][ T5911] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  456.968315][ T5911] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  456.990023][  T803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  457.012843][ T5911] usb 6-1: Product: syz
[  457.029921][ T5911] usb 6-1: Manufacturer: syz
[  457.038934][ T5911] usb 6-1: SerialNumber: syz
[  457.059647][ T5911] usb 6-1: config 0 descriptor??
[  457.112964][  T803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  457.156058][  T803] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  457.173063][ T9748] ubi31: attaching mtd0
[  457.192042][ T9748] ubi31: scanning is finished
[  457.261742][  T803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  457.293785][  T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  457.305304][ T5911] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  457.334607][  T803] usb 2-1: Product: syz
[  457.358331][  T803] usb 2-1: Manufacturer: syz
[  457.371176][ T9748] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  457.397356][ T9748] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  457.420718][ T9748] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  457.444094][ T9748] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  457.457387][  T803] usb 2-1: SerialNumber: syz
[  457.476211][ T9748] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  457.499581][ T9748] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  457.520234][ T5911] peak_usb 6-1:0.0 can0: sending command failure: -8
[  457.533059][ T9748] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4226701142
[  457.548502][ T5911] peak_usb 6-1:0.0 can0: sending command failure: -8
[  457.577144][ T9748] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  457.588008][ T5911] peak_usb 6-1:0.0 can0: sending command failure: -8
[  457.629189][ T9753] ubi31: background thread "ubi_bgt31d" started, PID 9753
[  457.715934][ T5911] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -8
[  457.760387][ T5911] usb 6-1: USB disconnect, device number 36
[  457.887254][  T803] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  458.896578][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.920818][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.942090][   T29] audit: type=1400 audit(2000000056.200:789): avc:  denied  { read } for  pid=9767 comm="syz.0.994" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  458.985838][   T29] audit: type=1400 audit(2000000056.200:790): avc:  denied  { open } for  pid=9767 comm="syz.0.994" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.084270][   T29] audit: type=1400 audit(2000000056.230:791): avc:  denied  { ioctl } for  pid=9767 comm="syz.0.994" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.235644][ T5911] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  459.341770][   T29] audit: type=1400 audit(2000000056.600:792): avc:  denied  { read write } for  pid=9736 comm="syz.1.984" name="lp0" dev="devtmpfs" ino=3509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  459.387096][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  459.399796][ T5911] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  459.407979][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'.
[  459.418886][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.421195][ T5911] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  459.441898][   T29] audit: type=1400 audit(2000000056.600:793): avc:  denied  { open } for  pid=9736 comm="syz.1.984" path="/dev/usb/lp0" dev="devtmpfs" ino=3509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  459.477290][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.495798][ T5911] usb 3-1: Product: syz
[  459.515589][ T5911] usb 3-1: Manufacturer: syz
[  459.525543][  T804] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  459.546881][ T5911] usb 3-1: SerialNumber: syz
[  459.635227][  T803] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  459.685359][  T804] usb 6-1: Using ep0 maxpacket: 16
[  459.698389][  T804] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  459.712748][  T804] usb 6-1: config 0 has no interface number 0
[  459.733723][  T804] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  459.760877][  T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.813570][  T803] usb 1-1: unable to get BOS descriptor or descriptor too short
[  459.836906][  T804] usb 6-1: config 0 descriptor??
[  459.864891][  T804] gspca_main: sonixj-2.14.0 probing 0471:0327
[  459.880687][  T803] usb 1-1: not running at top speed; connect to a high speed hub
[  459.909153][  T803] usb 1-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config
[  459.982773][  T803] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  460.049263][  T803] usb 1-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  460.079572][  T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.127786][ T5911] usb 3-1: USB disconnect, device number 52
[  460.159910][  T803] usb 1-1: Product: syz
[  460.180061][  T803] usb 1-1: Manufacturer: syz
[  460.205425][  T803] usb 1-1: SerialNumber: syz
[  460.268083][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  460.287266][  T804] gspca_sonixj: reg_r err -71
[  460.299040][  T804] sonixj 6-1:0.8: probe with driver sonixj failed with error -71
[  460.337818][  T804] usb 6-1: USB disconnect, device number 37
[  460.591652][ T9783] ./file0: Can't lookup blockdev
[  460.616617][ T9770] delete_channel: no stack
[  460.630908][  T803] usb 1-1: USB disconnect, device number 53
[  461.068142][  T804] usb 2-1: USB disconnect, device number 62
[  461.118892][  T804] usblp0: removed
[  461.160232][   T29] audit: type=1400 audit(2000000058.420:794): avc:  denied  { open } for  pid=9789 comm="syz.5.1001" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  461.189331][   T29] audit: type=1400 audit(2000000058.450:795): avc:  denied  { ioctl } for  pid=9789 comm="syz.5.1001" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  462.065861][  T804] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[  462.556702][  T804] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  462.567952][  T804] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  462.579829][  T804] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  462.590076][  T804] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  462.607341][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.865255][ T5898] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  463.037622][ T5898] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  463.055331][ T5898] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  463.079298][  T804] usb 2-1: string descriptor 0 read error: -71
[  463.092194][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  463.142717][ T5898] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  463.214231][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  463.223292][  T804] usb 2-1: USB disconnect, device number 63
[  463.277315][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  463.406946][ T5898] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  463.460550][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.504355][ T9822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9822 comm=syz.2.1008
[  463.995100][ T5898] usb 6-1: config 0 descriptor??
[  464.085321][ T5939] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  464.242196][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1012'.
[  464.253175][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  464.266153][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short
[  464.276094][ T5939] usb 1-1: config 120 has an invalid interface number: 86 but max is 0
[  464.284645][ T5939] usb 1-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[  464.285193][ T9833] openvswitch: netlink: Flow key attr not present in new flow.
[  464.304440][ T5939] usb 1-1: config 120 has no interface number 0
[  464.320169][ T5939] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  464.340860][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.360851][ T5939] usb 1-1: Product: syz
[  464.371773][ T5939] usb 1-1: Manufacturer: syz
[  464.382396][ T5939] usb 1-1: SerialNumber: syz
[  464.649361][ T5939] huawei_cdc_ncm 1-1:120.86: skipping garbage
[  464.665343][ T5939] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found
[  464.688001][ T5939] huawei_cdc_ncm 1-1:120.86: bind() failure
[  464.716397][ T5939] usb 1-1: USB disconnect, device number 54
[  465.059543][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1005'.
[  465.075950][ T9840] veth1_macvtap: left promiscuous mode
[  465.115415][ T5912] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  465.276687][ T5912] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  465.299634][ T5912] usb 2-1: config 1 has no interface number 0
[  465.313168][ T5912] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  465.333736][ T5912] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  465.372382][ T5912] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.400800][ T5912] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  465.419533][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.433296][ T5912] usb 2-1: Product: syz
[  465.443473][ T5912] usb 2-1: Manufacturer: syz
[  465.453601][ T5912] usb 2-1: SerialNumber: syz
[  465.477896][ T9839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  465.760770][ T9845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  465.913509][ T9841] delete_channel: no stack
[  466.054816][ T5912] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  466.161335][ T5939] usb 6-1: USB disconnect, device number 38
[  466.466690][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.485910][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.722552][   T29] audit: type=1400 audit(2000000063.850:796): avc:  denied  { mount } for  pid=9850 comm="syz.5.1017" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  466.952900][ T5941] usb 2-1: USB disconnect, device number 64
[  466.959353][   T29] audit: type=1400 audit(2000000063.880:797): avc:  denied  { remount } for  pid=9850 comm="syz.5.1017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  466.996510][ T5941] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem
[  467.149950][ T5941] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  467.239609][   T29] audit: type=1400 audit(2000000064.500:798): avc:  denied  { unmount } for  pid=6949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  467.657398][   T29] audit: type=1400 audit(2000000064.920:799): avc:  denied  { connect } for  pid=9865 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  467.796404][   T29] audit: type=1326 audit(2000000064.970:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  467.937678][   T29] audit: type=1326 audit(2000000064.970:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  468.032160][   T29] audit: type=1326 audit(2000000064.980:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  468.125903][ T5941] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  468.143289][   T29] audit: type=1326 audit(2000000064.980:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  468.249032][   T29] audit: type=1326 audit(2000000064.980:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  468.334738][   T29] audit: type=1326 audit(2000000064.980:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0958d9c819 code=0x7ffc0000
[  468.438193][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  468.462438][ T5941] usb 2-1: too many configurations: 148, using maximum allowed: 8
[  468.536317][ T5941] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 145
[  468.565198][ T5941] usb 2-1: can't read configurations, error -22
[  468.756385][ T5941] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  468.935641][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  468.986984][ T5941] usb 2-1: too many configurations: 148, using maximum allowed: 8
[  469.036151][ T5941] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 145
[  469.075824][ T5941] usb 2-1: can't read configurations, error -22
[  469.110989][ T5941] usb usb2-port1: attempt power cycle
[  469.115319][ T5880] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  469.275897][ T5880] usb 3-1: Using ep0 maxpacket: 8
[  469.292200][ T5880] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  469.311165][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  469.336404][ T5880] usb 3-1: config 0 has no interface number 0
[  469.362636][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  469.391446][ T9899] delete_channel: no stack
[  469.397099][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.411449][ T5880] usb 3-1: Product: syz
[  469.423065][ T5880] usb 3-1: Manufacturer: syz
[  469.432241][ T5880] usb 3-1: SerialNumber: syz
[  469.469609][ T5880] usb 3-1: config 0 descriptor??
[  469.495440][ T5941] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  469.497523][ T5880] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  469.517747][ T5880] uvcvideo 3-1:0.31: No valid video chain found.
[  469.568762][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  469.584680][ T5941] usb 2-1: too many configurations: 148, using maximum allowed: 8
[  469.634925][ T5941] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 145
[  469.693557][ T5941] usb 2-1: can't read configurations, error -22
[  469.728609][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.758086][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.781887][ T9904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1028'.
[  469.806646][ T5880] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  469.830576][ T9904] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  469.846919][ T9904] bond1 (unregistering): Released all slaves
[  469.905359][ T5941] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  469.918974][ T5912] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  469.950640][  T804] usb 3-1: USB disconnect, device number 53
[  469.965321][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  469.975892][ T5941] usb 2-1: Using ep0 maxpacket: 16
[  469.976947][ T5880] usb 6-1: config 0 has an invalid interface number: 98 but max is 3
[  469.994286][ T5880] usb 6-1: config 0 has an invalid interface number: 47 but max is 3
[  469.996946][ T5941] usb 2-1: too many configurations: 148, using maximum allowed: 8
[  470.004642][ T5880] usb 6-1: config 0 has an invalid interface number: 81 but max is 3
[  470.020563][ T5880] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  470.034404][ T5880] usb 6-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config
[  470.045942][ T5941] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 145
[  470.054944][ T5880] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  470.055180][ T5941] usb 2-1: can't read configurations, error -22
[  470.065497][ T5880] usb 6-1: config 0 has no interface number 0
[  470.080752][ T5880] usb 6-1: config 0 has no interface number 1
[  470.088801][ T5880] usb 6-1: config 0 has no interface number 2
[  470.089038][ T5941] usb usb2-port1: unable to enumerate USB device
[  470.095093][ T5880] usb 6-1: config 0 interface 98 altsetting 7 endpoint 0xF has an invalid bInterval 128, changing to 11
[  470.113164][ T5912] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  470.125434][ T5912] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.138059][ T5912] usb 1-1: config 2 interface 0 has no altsetting 0
[  470.144846][ T5880] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  470.156375][ T5912] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  470.166319][ T5880] usb 6-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  470.177944][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.187040][ T5880] usb 6-1: config 0 interface 47 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024
[  470.211468][ T5880] usb 6-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  470.225197][ T5880] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  470.236739][ T5880] usb 6-1: config 0 interface 47 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  470.249742][ T5880] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  470.261378][ T5880] usb 6-1: config 0 interface 47 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  470.272175][ T5880] usb 6-1: config 0 interface 81 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  470.283545][ T5880] usb 6-1: config 0 interface 81 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  470.297573][ T5880] usb 6-1: config 0 interface 98 has no altsetting 0
[  470.304288][ T5880] usb 6-1: config 0 interface 47 has no altsetting 0
[  470.313627][ T5880] usb 6-1: New USB device found, idVendor=1410, idProduct=8000, bcdDevice=c7.fe
[  470.323143][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.331527][ T5880] usb 6-1: Product: syz
[  470.336130][ T5880] usb 6-1: Manufacturer: 䐊
[  470.340762][ T5880] usb 6-1: SerialNumber: syz
[  470.354812][ T5880] usb 6-1: config 0 descriptor??
[  470.565998][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.620236][ T5912] elo 0003:04E7:0009.0010: ignoring exceeding usage max
[  470.631777][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.650525][ T9927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  470.656679][ T5912] elo 0003:04E7:0009.0010: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0
[  470.712032][ T5880] option 6-1:0.98: GSM modem (1-port) converter detected
[  470.758216][ T5880] option 6-1:0.47: GSM modem (1-port) converter detected
[  470.811028][ T5880] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB1
[  470.880781][ T5880] option 6-1:0.81: GSM modem (1-port) converter detected
[  470.925877][ T5880] usb 6-1: USB disconnect, device number 39
[  470.960115][ T5880] option 6-1:0.98: device disconnected
[  470.986818][ T5880] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
[  471.001310][ T5880] option 6-1:0.47: device disconnected
[  471.033684][ T5880] option 6-1:0.81: device disconnected
[  471.182624][ T9937] netlink: 'syz.1.1036': attribute type 1 has an invalid length.
[  471.190836][ T9937] netlink: 'syz.1.1036': attribute type 4 has an invalid length.
[  471.198851][ T9937] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1036'.
[  471.864686][ T5912] usb 1-1: USB disconnect, device number 55
[  472.854858][ T9976] FAULT_INJECTION: forcing a failure.
[  472.854858][ T9976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.880645][ T5912] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  472.933046][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.5.1043 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  472.933079][ T9976] Tainted: [L]=SOFTLOCKUP
[  472.933086][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  472.933097][ T9976] Call Trace:
[  472.933103][ T9976]  <TASK>
[  472.933110][ T9976]  dump_stack_lvl+0x100/0x190
[  472.933141][ T9976]  should_fail_ex.cold+0x5/0xa
[  472.933168][ T9976]  _copy_to_user+0x32/0xd0
[  472.933195][ T9976]  simple_read_from_buffer+0xcb/0x170
[  472.933221][ T9976]  proc_fail_nth_read+0x1af/0x230
[  472.933263][ T9976]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  472.933295][ T9976]  ? rw_verify_area+0xce/0x6d0
[  472.933324][ T9976]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  472.933357][ T9976]  vfs_read+0x1e4/0xb30
[  472.933381][ T9976]  ? __pfx_vfs_read+0x10/0x10
[  472.933400][ T9976]  ? __fget_files+0x215/0x3d0
[  472.933430][ T9976]  ? __fget_files+0x21f/0x3d0
[  472.933463][ T9976]  ksys_read+0x12a/0x250
[  472.933484][ T9976]  ? __pfx_ksys_read+0x10/0x10
[  472.933507][ T9976]  ? rcu_is_watching+0x12/0xc0
[  472.933541][ T9976]  do_syscall_64+0x10b/0xf80
[  472.933567][ T9976]  ? clear_bhb_loop+0x40/0x90
[  472.933593][ T9976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.933612][ T9976] RIP: 0033:0x7feff015d04e
[  472.933628][ T9976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  472.933646][ T9976] RSP: 002b:00007feff1100fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  472.933663][ T9976] RAX: ffffffffffffffda RBX: 00007feff11016c0 RCX: 00007feff015d04e
[  472.933671][ T9976] RDX: 000000000000000f RSI: 00007feff11010a0 RDI: 0000000000000004
[  472.933678][ T9976] RBP: 00007feff1101090 R08: 0000000000000000 R09: 0000000000000000
[  472.933684][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.933690][ T9976] R13: 00007feff0416038 R14: 00007feff0415fa0 R15: 00007ffe2be74018
[  472.933706][ T9976]  </TASK>
[  473.326748][ T9946] delete_channel: no stack
[  473.348712][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  473.359059][ T5912] usb 3-1: config 6 has an invalid interface number: 220 but max is 0
[  473.375477][ T5912] usb 3-1: config 6 has no interface number 0
[  473.381887][ T5912] usb 3-1: config 6 interface 220 has no altsetting 0
[  473.453361][ T5912] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[  473.479037][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.571909][ T9983] netlink: 'syz.5.1044': attribute type 1 has an invalid length.
[  473.579906][ T9983] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1044'.
[  473.653685][ T9983] netlink: 'syz.5.1044': attribute type 1 has an invalid length.
[  473.661699][ T9983] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1044'.
[  473.876639][ T5912] usb 3-1: Product: syz
[  473.893629][ T5912] usb 3-1: Manufacturer: syz
[  473.921085][ T5912] usb 3-1: SerialNumber: syz
[  475.024331][ T5912] uvcvideo 3-1:6.220: Found multiple Units with ID 4
[  475.127487][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  475.127506][   T29] audit: type=1400 audit(2000000072.280:824): avc:  denied  { create } for  pid=9987 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  475.659930][ T5912] uvcvideo 3-1:6.220: Found Unit with invalid ID 0
[  475.697433][ T5912] uvcvideo 3-1:6.220: Found UVC 7.ff device syz (174f:5212)
[  475.768929][ T5912] uvcvideo 3-1:6.220: Entity type for entity Output 4 was not initialized!
[  475.790663][   T29] audit: type=1400 audit(2000000072.560:825): avc:  denied  { ioctl } for  pid=9987 comm="syz.1.1046" path="socket:[26993]" dev="sockfs" ino=26993 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  475.874506][ T5912] uvcvideo 3-1:6.220: Failed to create links for entity 4
[  475.922686][ T5912] uvcvideo 3-1:6.220: Failed to register entities (-22).
[  476.027820][ T5912] usb 3-1: USB disconnect, device number 54
[  476.036558][   T29] audit: type=1400 audit(2000000072.560:826): avc:  denied  { accept } for  pid=9987 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  476.184844][   T29] audit: type=1400 audit(2000000073.080:827): avc:  denied  { read write } for  pid=6949 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  476.276556][  T804] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  476.324698][   T29] audit: type=1400 audit(2000000073.080:828): avc:  denied  { open } for  pid=6949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  476.448417][  T804] usb 6-1: Using ep0 maxpacket: 32
[  476.484522][   T29] audit: type=1400 audit(2000000073.080:829): avc:  denied  { ioctl } for  pid=6949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  476.533417][  T804] usb 6-1: config 0 has an invalid interface number: 98 but max is 3
[  476.560942][  T804] usb 6-1: config 0 has an invalid interface number: 47 but max is 3
[  476.595090][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'.
[  476.609052][  T804] usb 6-1: config 0 has an invalid interface number: 81 but max is 3
[  476.622469][   T29] audit: type=1400 audit(2000000073.210:830): avc:  denied  { create } for  pid=10011 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.656654][  T804] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  476.692788][  T804] usb 6-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config
[  476.736729][   T29] audit: type=1400 audit(2000000073.220:831): avc:  denied  { write } for  pid=10011 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.769688][  T804] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  476.814135][  T804] usb 6-1: config 0 has no interface number 0
[  476.837030][  T804] usb 6-1: config 0 has no interface number 1
[  476.849513][   T29] audit: type=1400 audit(2000000073.220:832): avc:  denied  { read } for  pid=10011 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.879984][  T804] usb 6-1: config 0 has no interface number 2
[  476.909995][  T804] usb 6-1: config 0 interface 98 altsetting 7 endpoint 0xF has an invalid bInterval 128, changing to 11
[  476.959293][   T29] audit: type=1400 audit(2000000073.260:833): avc:  denied  { read write } for  pid=10011 comm="syz.5.1048" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  476.984697][  T804] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  477.029811][  T804] usb 6-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  477.091800][  T804] usb 6-1: config 0 interface 47 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024
[  477.138285][  T804] usb 6-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  477.175867][ T5941] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  477.180664][  T804] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  477.236324][  T804] usb 6-1: config 0 interface 47 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  477.279583][  T804] usb 6-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  477.311703][  T804] usb 6-1: config 0 interface 47 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  477.354102][  T804] usb 6-1: config 0 interface 81 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  477.354434][T10031] 9p: Bad value for 'dfltgid'
[  477.388202][  T804] usb 6-1: config 0 interface 81 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  477.405234][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  477.434443][  T804] usb 6-1: config 0 interface 98 has no altsetting 0
[  477.487544][  T804] usb 6-1: config 0 interface 47 has no altsetting 0
[  477.668992][T10031] 9p: Bad value for 'dfltgid'
[  477.819219][  T804] usb 6-1: New USB device found, idVendor=1410, idProduct=8000, bcdDevice=c7.fe
[  477.847906][  T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.859613][  T804] usb 6-1: Product: syz
[  477.864330][ T5941] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  477.869674][  T804] usb 6-1: Manufacturer: 䐊
[  477.901246][  T804] usb 6-1: SerialNumber: syz
[  477.930685][  T804] usb 6-1: config 0 descriptor??
[  477.938836][ T5941] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  477.952368][ T5941] usb 1-1: Product: syz
[  477.957178][ T5941] usb 1-1: Manufacturer: syz
[  477.991692][ T5941] usb 1-1: SerialNumber: syz
[  478.028393][ T5941] usb 1-1: config 0 descriptor??
[  478.163816][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.228897][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.283417][ T5941] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  478.343589][  T804] option 6-1:0.98: GSM modem (1-port) converter detected
[  478.430941][  T804] option 6-1:0.47: GSM modem (1-port) converter detected
[  478.470140][ T5941] peak_usb 1-1:0.0 can0: sending command failure: -8
[  478.504253][  T804] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB1
[  478.564915][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'.
[  478.589263][  T804] option 6-1:0.81: GSM modem (1-port) converter detected
[  478.591301][ T5941] peak_usb 1-1:0.0 can0: sending command failure: -8
[  478.670606][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'.
[  478.683586][  T804] usb 6-1: USB disconnect, device number 40
[  478.728102][ T5941] peak_usb 1-1:0.0 can0: sending command failure: -8
[  478.759363][  T804] option 6-1:0.98: device disconnected
[  478.801394][  T804] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
[  478.842755][  T804] option 6-1:0.47: device disconnected
[  478.853281][T10057] vti0: entered promiscuous mode
[  478.867521][ T5941] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8
[  478.881134][  T804] option 6-1:0.81: device disconnected
[  478.958756][ T5941] usb 1-1: USB disconnect, device number 56
[  479.179457][T10065] binder: binder_mmap: 10061 2000003d3000-2000003d7000 bad vm_flags failed -1
[  479.197232][ T5912] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  479.281074][T10065] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1058'.
[  479.401698][ T5912] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  479.529100][ T5912] usb 2-1: config 1 has no interface number 0
[  479.556746][ T5912] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  479.606080][ T5912] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  479.690920][ T5912] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.747474][ T5912] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  479.772628][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.802026][ T5912] usb 2-1: Product: syz
[  479.813999][ T5912] usb 2-1: Manufacturer: syz
[  479.824811][ T5912] usb 2-1: SerialNumber: syz
[  479.846745][T10057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  480.214827][   T29] kauditd_printk_skb: 205 callbacks suppressed
[  480.214920][   T29] audit: type=1400 audit(2000000077.470:1039): avc:  denied  { read } for  pid=10074 comm="syz.2.1060" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  480.574848][   T29] audit: type=1400 audit(2000000077.470:1040): avc:  denied  { mounton } for  pid=10056 comm="syz.1.1056" path="/207/file0" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  480.626151][   T29] audit: type=1400 audit(2000000077.480:1041): avc:  denied  { read open } for  pid=10074 comm="syz.2.1060" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  480.723008][   T29] audit: type=1400 audit(2000000077.480:1042): avc:  denied  { ioctl } for  pid=10074 comm="syz.2.1060" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  480.863935][   T29] audit: type=1400 audit(2000000077.480:1043): avc:  denied  { create } for  pid=10074 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  480.897737][T10058] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  480.929581][ T5912] usb 2-1: Error in usbnet_get_endpoints (-71)
[  480.967738][ T5912] usb 2-1: USB disconnect, device number 69
[  481.028217][   T29] audit: type=1400 audit(2000000077.480:1044): avc:  denied  { read append } for  pid=10074 comm="syz.2.1060" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  481.145284][ T5941] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  481.390854][   T29] audit: type=1400 audit(2000000077.480:1045): avc:  denied  { read append open } for  pid=10074 comm="syz.2.1060" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  481.597010][   T29] audit: type=1400 audit(2000000077.480:1046): avc:  denied  { write } for  pid=10074 comm="syz.2.1060" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  481.851518][   T29] audit: type=1400 audit(2000000077.480:1047): avc:  denied  { create } for  pid=10074 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  482.050559][   T29] audit: type=1400 audit(2000000077.480:1048): avc:  denied  { write } for  pid=10074 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  482.786182][ T5941] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  482.794577][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.805224][ T5941] usb 3-1: config 0 has no interface number 0
[  482.817490][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  482.827581][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.851076][ T5941] usb 3-1: Product: syz
[  482.870940][ T5941] usb 3-1: Manufacturer: syz
[  482.892549][ T5941] usb 3-1: SerialNumber: syz
[  482.954073][ T5941] usb 3-1: config 0 descriptor??
[  483.375889][T10101] No source specified
[  483.595228][ T5912] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  483.905651][ T5912] usb 6-1: Using ep0 maxpacket: 16
[  484.366749][ T5941] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22
[  484.369258][ T5941] usb 3-1: USB disconnect, device number 55
[  484.429544][ T5912] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  484.429577][ T5912] usb 6-1: config 1 has no interface number 0
[  484.429615][ T5912] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  484.429645][ T5912] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  484.429672][ T5912] usb 6-1: config 1 interface 105 has no altsetting 0
[  484.432946][ T5912] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  484.432979][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  484.433000][ T5912] usb 6-1: Product: syz
[  484.433016][ T5912] usb 6-1: Manufacturer: syz
[  484.433033][ T5912] usb 6-1: SerialNumber: syz
[  484.544072][T10091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  484.551423][T10091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.164176][T10091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.171543][T10091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.309146][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  485.309190][   T29] audit: type=1400 audit(2000000082.570:1173): avc:  denied  { read write } for  pid=10121 comm="syz.0.1068" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  485.575430][ T7140] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  485.793357][   T29] audit: type=1400 audit(2000000082.570:1174): avc:  denied  { open } for  pid=10121 comm="syz.0.1068" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  485.842505][ T5912] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  485.895760][ T5912] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  485.915038][   T29] audit: type=1400 audit(2000000082.570:1175): avc:  denied  { ioctl } for  pid=10121 comm="syz.0.1068" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  485.940392][ T7140] usb 1-1: Using ep0 maxpacket: 16
[  485.959223][ T5912] usb 6-1: USB disconnect, device number 41
[  485.978280][ T7140] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  486.002025][ T7140] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  486.056518][ T7140] usb 1-1: Product: syz
[  486.063062][   T29] audit: type=1400 audit(2000000082.600:1176): avc:  denied  { create } for  pid=10122 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  486.089154][ T7140] usb 1-1: Manufacturer: syz
[  486.108315][ T7140] usb 1-1: SerialNumber: syz
[  486.157364][   T29] audit: type=1400 audit(2000000082.610:1177): avc:  denied  { map_create } for  pid=10122 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  486.203000][ T7140] usb 1-1: config 0 descriptor??
[  486.247841][   T29] audit: type=1400 audit(2000000082.610:1178): avc:  denied  { perfmon } for  pid=10122 comm="syz.2.1069" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  486.314026][   T29] audit: type=1400 audit(2000000082.610:1179): avc:  denied  { map_read map_write } for  pid=10122 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  486.582231][   T29] audit: type=1400 audit(2000000082.610:1180): avc:  denied  { prog_load } for  pid=10122 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  486.680686][   T29] audit: type=1400 audit(2000000082.610:1181): avc:  denied  { bpf } for  pid=10122 comm="syz.2.1069" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  486.858493][ T7140] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  487.554992][ T7140] peak_usb 1-1:0.0 can0: sending command failure: -8
[  487.572898][ T7140] peak_usb 1-1:0.0 can0: sending command failure: -8
[  487.573370][   T29] audit: type=1400 audit(2000000082.610:1182): avc:  denied  { create } for  pid=10122 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  487.620770][ T7140] peak_usb 1-1:0.0 can0: sending command failure: -8
[  487.829040][T10145] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  488.362857][ T7140] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8
[  488.386617][ T7140] usb 1-1: USB disconnect, device number 57
[  488.859938][T10157] netlink: 'syz.1.1075': attribute type 15 has an invalid length.
[  489.687034][T10158] /dev/nullb0: Can't open blockdev
[  489.788784][T10159] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  489.797006][T10159] netlink: 'syz.3.1076': attribute type 4 has an invalid length.
[  489.805188][T10159] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1076'.
[  490.364983][T10168] No source specified
[  490.374009][   T29] kauditd_printk_skb: 154 callbacks suppressed
[  490.374046][   T29] audit: type=1400 audit(2000000087.620:1331): avc:  denied  { mounton } for  pid=10165 comm="syz.0.1080" path="/227" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  490.779636][   T29] audit: type=1400 audit(2000000088.010:1332): avc:  denied  { read write } for  pid=5821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  490.821807][T10170] tmpfs: Unknown parameter 'asrquot��/a'
[  490.853934][   T29] audit: type=1400 audit(2000000088.010:1333): avc:  denied  { open } for  pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  490.937332][   T29] audit: type=1400 audit(2000000088.020:1334): avc:  denied  { unlink } for  pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  491.042190][   T29] audit: type=1400 audit(2000000088.020:1335): avc:  denied  { ioctl } for  pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  491.215015][   T29] audit: type=1400 audit(2000000088.040:1336): avc:  denied  { read write } for  pid=5820 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  491.471497][   T29] audit: type=1400 audit(2000000088.040:1337): avc:  denied  { open } for  pid=5820 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  491.663503][   T29] audit: type=1400 audit(2000000088.040:1338): avc:  denied  { ioctl } for  pid=5820 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  492.016978][   T29] audit: type=1400 audit(2000000088.080:1339): avc:  denied  { mounton } for  pid=10169 comm="syz.2.1081" path="/216/file1" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  492.270223][   T29] audit: type=1400 audit(2000000088.090:1340): avc:  denied  { create } for  pid=10171 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  492.628948][  T804] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  493.226127][  T804] usb 3-1: Using ep0 maxpacket: 32
[  493.244637][  T804] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  493.263508][  T804] usb 3-1: config 0 has no interface number 0
[  493.284538][  T804] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  493.319412][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.345339][  T804] usb 3-1: Product: syz
[  493.366999][  T804] usb 3-1: Manufacturer: syz
[  493.401065][  T804] usb 3-1: SerialNumber: syz
[  493.421782][  T804] usb 3-1: config 0 descriptor??
[  494.151251][T10219] /dev/nullb0: Can't open blockdev
[  495.412379][T10235] netlink: 'syz.1.1091': attribute type 4 has an invalid length.
[  495.420340][T10235] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1091'.
[  495.452661][T10235] .`: renamed from bond0 (while UP)
[  495.595728][   T29] kauditd_printk_skb: 157 callbacks suppressed
[  495.595747][   T29] audit: type=1400 audit(2000000092.830:1471): avc:  denied  { read write } for  pid=6949 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  495.711961][T10234] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1091'.
[  495.995722][T10240] netlink: 'syz.5.1093': attribute type 1 has an invalid length.
[  496.003740][T10240] netlink: 'syz.5.1093': attribute type 4 has an invalid length.
[  496.011707][T10240] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1093'.
[  496.110672][   T29] audit: type=1400 audit(2000000092.830:1472): avc:  denied  { open } for  pid=6949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  496.200941][  T804] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  496.419268][  T804] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  496.490388][  T804] usb 3-1: USB disconnect, device number 56
[  496.498562][   T29] audit: type=1400 audit(2000000092.830:1473): avc:  denied  { ioctl } for  pid=6949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  496.677593][   T29] audit: type=1400 audit(2000000092.840:1474): avc:  denied  { write } for  pid=10231 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  496.798090][   T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  496.899109][   T10] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  496.974090][   T29] audit: type=1400 audit(2000000092.930:1475): avc:  denied  { read } for  pid=10231 comm="syz.1.1091" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  496.975596][   T10] usb 4-1: USB disconnect, device number 46
[  497.040836][T10254] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64
[  497.057802][T10254] audit: out of memory in audit_log_start
[  497.092990][T10253] audit: audit_backlog=65 > audit_backlog_limit=64
[  497.120034][T10250] audit: audit_backlog=65 > audit_backlog_limit=64
[  497.129426][T10253] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64
[  497.289255][T10250] netlink: 'syz.2.1094': attribute type 15 has an invalid length.
[  497.360806][T10247] netlink: 'syz.0.1092': attribute type 23 has an invalid length.
[  497.575263][ T5912] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  497.605674][T10263] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  497.805375][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  497.849663][ T5912] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[  497.881381][ T5912] usb 2-1: config 254 has no interface number 0
[  497.898147][ T5912] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  497.924235][ T5912] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0x25, changing to 0x5
[  498.069990][ T5912] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  498.085561][  T804] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  498.118571][ T5912] usb 2-1: config 254 interface 235 has no altsetting 0
[  498.163621][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  498.212707][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  498.242138][ T5912] usb 2-1: Product: syz
[  498.384605][ T5912] usb 2-1: Manufacturer: syz
[  498.428103][ T5912] usb 2-1: SerialNumber: syz
[  498.440170][  T804] usb 3-1: no configurations
[  498.448426][  T804] usb 3-1: can't read configurations, error -22
[  498.457734][T10259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  498.595292][  T804] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  498.721723][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.744402][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.807888][  T804] usb 3-1: no configurations
[  498.827512][  T804] usb 3-1: can't read configurations, error -22
[  498.856438][  T804] usb usb3-port1: attempt power cycle
[  498.920735][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.957479][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.993429][T10259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  499.008088][ T5912] usbtest 2-1:254.235: Linux gadget zero
[  499.016210][ T5912] usbtest 2-1:254.235: high-speed {control in/out bulk-out iso-out} tests (+alt)
[  499.215711][  T804] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  499.256102][  T804] usb 3-1: no configurations
[  499.270841][T10285] binder: 10282:10285 ioctl 4018620d 0 returned -22
[  499.280513][  T804] usb 3-1: can't read configurations, error -22
[  499.320832][ T5912] usb 2-1: USB disconnect, device number 70
[  499.426661][  T804] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  499.471086][  T804] usb 3-1: no configurations
[  499.492476][  T804] usb 3-1: can't read configurations, error -22
[  499.510125][  T804] usb usb3-port1: unable to enumerate USB device
[  499.754337][T10284] evm: overlay not supported
[  500.707353][T10294] /dev/nullb0: Can't open blockdev
[  500.757712][   T29] kauditd_printk_skb: 260 callbacks suppressed
[  500.757731][   T29] audit: type=1400 audit(2000000097.460:1727): avc:  denied  { read } for  pid=10293 comm="syz.1.1106" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  500.823507][   T29] audit: type=1400 audit(2000000097.460:1728): avc:  denied  { read open } for  pid=10293 comm="syz.1.1106" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  500.849926][   T29] audit: type=1400 audit(2000000097.970:1729): avc:  denied  { mounton } for  pid=10293 comm="syz.1.1106" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  500.915246][   T29] audit: type=1400 audit(2000000098.120:1730): avc:  denied  { create } for  pid=10295 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  501.014276][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'.
[  501.175418][   T29] audit: type=1400 audit(2000000098.140:1731): avc:  denied  { allowed } for  pid=10295 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  501.306919][   T29] audit: type=1400 audit(2000000098.150:1732): avc:  denied  { sqpoll } for  pid=10295 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  501.306970][   T29] audit: type=1400 audit(2000000098.160:1733): avc:  denied  { create } for  pid=10295 comm="syz.0.1107" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  501.306998][   T29] audit: type=1400 audit(2000000098.180:1734): avc:  denied  { read } for  pid=10295 comm="syz.0.1107" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  501.307021][   T29] audit: type=1400 audit(2000000098.180:1735): avc:  denied  { open } for  pid=10295 comm="syz.0.1107" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  501.307046][   T29] audit: type=1400 audit(2000000098.180:1736): avc:  denied  { create } for  pid=10295 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  501.380071][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  501.380125][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  502.666018][T10314] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  502.673982][T10314] netlink: 'syz.0.1112': attribute type 4 has an invalid length.
[  502.681997][T10314] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1112'.
[  503.945168][T10325] netlink: 'syz.3.1113': attribute type 1 has an invalid length.
[  503.953224][T10325] netlink: 'syz.3.1113': attribute type 4 has an invalid length.
[  503.961308][T10325] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1113'.
[  504.533071][T10333] FAULT_INJECTION: forcing a failure.
[  504.533071][T10333] name failslab, interval 1, probability 0, space 0, times 0
[  504.573467][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.1.1117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.573501][T10333] Tainted: [L]=SOFTLOCKUP
[  504.573509][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  504.573521][T10333] Call Trace:
[  504.573529][T10333]  <TASK>
[  504.573538][T10333]  dump_stack_lvl+0x100/0x190
[  504.573568][T10333]  should_fail_ex.cold+0x5/0xa
[  504.573596][T10333]  ? tomoyo_realpath_from_path+0xb6/0x690
[  504.573621][T10333]  should_failslab+0xc2/0x120
[  504.573643][T10333]  __kmalloc_noprof+0xe0/0x850
[  504.573670][T10333]  ? kfree+0x1dd/0x6c0
[  504.573700][T10333]  tomoyo_realpath_from_path+0xb6/0x690
[  504.573732][T10333]  tomoyo_path_number_perm+0x23c/0x580
[  504.573753][T10333]  ? tomoyo_path_number_perm+0x22e/0x580
[  504.573776][T10333]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  504.573828][T10333]  ? find_held_lock+0x2b/0x80
[  504.573847][T10333]  ? __fget_files+0x215/0x3d0
[  504.573870][T10333]  ? hook_file_ioctl_common+0x149/0x410
[  504.573897][T10333]  ? __fget_files+0x215/0x3d0
[  504.573932][T10333]  ? __fget_files+0x21f/0x3d0
[  504.573962][T10333]  security_file_ioctl+0xd3/0x230
[  504.573986][T10333]  __x64_sys_ioctl+0xb7/0x210
[  504.574010][T10333]  do_syscall_64+0x10b/0xf80
[  504.574036][T10333]  ? clear_bhb_loop+0x40/0x90
[  504.574062][T10333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.574083][T10333] RIP: 0033:0x7f769399c819
[  504.574102][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.574122][T10333] RSP: 002b:00007f7694828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  504.574142][T10333] RAX: ffffffffffffffda RBX: 00007f7693c15fa0 RCX: 00007f769399c819
[  504.574156][T10333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  504.574169][T10333] RBP: 00007f7694828090 R08: 0000000000000000 R09: 0000000000000000
[  504.574180][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.574192][T10333] R13: 00007f7693c16038 R14: 00007f7693c15fa0 R15: 00007fff41d9aa78
[  504.574222][T10333]  </TASK>
[  504.574322][T10333] ERROR: Out of memory at tomoyo_realpath_from_path.
[  505.450865][T10342] netlink: 'syz.3.1119': attribute type 15 has an invalid length.
[  505.767081][   T29] kauditd_printk_skb: 177 callbacks suppressed
[  505.767098][   T29] audit: type=1400 audit(2000000103.030:1914): avc:  denied  { ioctl } for  pid=10343 comm="syz.1.1120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  505.814999][   T29] audit: type=1400 audit(2000000103.070:1915): avc:  denied  { read write } for  pid=10351 comm="syz.2.1123" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  505.821372][T10352] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1123'.
[  505.838847][   T29] audit: type=1400 audit(2000000103.070:1916): avc:  denied  { open } for  pid=10351 comm="syz.2.1123" path="/dev/vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  505.871922][  T804] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  505.892347][   T29] audit: type=1400 audit(2000000103.070:1917): avc:  denied  { write } for  pid=10351 comm="syz.2.1123" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  505.933918][   T29] audit: type=1400 audit(2000000103.070:1918): avc:  denied  { open } for  pid=10351 comm="syz.2.1123" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  505.963300][   T29] audit: type=1400 audit(2000000103.070:1919): avc:  denied  { create } for  pid=10351 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  505.988848][   T29] audit: type=1400 audit(2000000103.070:1920): avc:  denied  { create } for  pid=10351 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  506.010375][   T29] audit: type=1400 audit(2000000103.070:1921): avc:  denied  { write } for  pid=10351 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  506.041664][T10353] FAULT_INJECTION: forcing a failure.
[  506.041664][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  506.055321][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.2.1123 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  506.055357][T10353] Tainted: [L]=SOFTLOCKUP
[  506.055364][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  506.055377][T10353] Call Trace:
[  506.055383][T10353]  <TASK>
[  506.055396][T10353]  dump_stack_lvl+0x100/0x190
[  506.055428][T10353]  should_fail_ex.cold+0x5/0xa
[  506.055458][T10353]  _copy_from_iter+0x1f4/0x1690
[  506.055490][T10353]  ? __asan_memset+0x23/0x50
[  506.055520][T10353]  ? __pfx__copy_from_iter+0x10/0x10
[  506.055548][T10353]  ? __pfx___alloc_skb+0x10/0x10
[  506.055588][T10353]  netlink_sendmsg+0x808/0xda0
[  506.055616][T10353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.055639][T10353]  ? __might_fault+0x30/0x140
[  506.055678][T10353]  ____sys_sendmsg+0x9e1/0xb70
[  506.055701][T10353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.055727][T10353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  506.055755][T10353]  ? __pfx__kstrtoull+0x10/0x10
[  506.055791][T10353]  ___sys_sendmsg+0x190/0x1e0
[  506.055814][T10353]  ? __pfx____sys_sendmsg+0x10/0x10
[  506.055852][T10353]  ? find_held_lock+0x2b/0x80
[  506.055892][T10353]  __sys_sendmmsg+0x205/0x430
[  506.055938][T10353]  ? __pfx___sys_sendmmsg+0x10/0x10
[  506.055979][T10353]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  506.056013][T10353]  ? fput+0x79/0x100
[  506.056044][T10353]  ? ksys_write+0x1ac/0x250
[  506.056066][T10353]  ? __pfx_ksys_write+0x10/0x10
[  506.056093][T10353]  __x64_sys_sendmmsg+0x9c/0x100
[  506.056121][T10353]  ? lockdep_hardirqs_on+0x78/0x100
[  506.056148][T10353]  do_syscall_64+0x10b/0xf80
[  506.056173][T10353]  ? clear_bhb_loop+0x40/0x90
[  506.056199][T10353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.056221][T10353] RIP: 0033:0x7f78b4f9c819
[  506.056240][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.056260][T10353] RSP: 002b:00007f78b5dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  506.056281][T10353] RAX: ffffffffffffffda RBX: 00007f78b5216090 RCX: 00007f78b4f9c819
[  506.056296][T10353] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000005
[  506.056309][T10353] RBP: 00007f78b5dce090 R08: 0000000000000000 R09: 0000000000000000
[  506.056322][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.056334][T10353] R13: 00007f78b5216128 R14: 00007f78b5216090 R15: 00007ffecbef1808
[  506.056364][T10353]  </TASK>
[  506.510015][  T804] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt
[  506.521745][  T804] usb 2-1: config 1 interface 0 has no altsetting 0
[  506.536778][  T804] usb 2-1: string descriptor 0 read error: -22
[  506.543110][  T804] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  506.553617][  T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.587705][T10344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  506.619403][   T29] audit: type=1400 audit(2000000103.150:1922): avc:  denied  { ioctl } for  pid=10343 comm="syz.1.1120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  506.776971][   T29] audit: type=1400 audit(2000000103.150:1923): avc:  denied  { ioctl } for  pid=10343 comm="syz.1.1120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  507.205898][ T5939] usb 2-1: USB disconnect, device number 71
[  507.245409][ T5941] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  507.370662][T10364] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1126'.
[  507.658128][ T5941] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  507.683092][ T5941] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  507.791983][ T5941] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  507.912060][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.956638][T10358] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  507.995794][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  508.267978][ T5880] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  508.806204][ T5880] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  508.858907][ T5880] usb 3-1: config 1 has no interface number 0
[  508.865715][ T5880] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  508.878998][ T5880] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  508.892543][ T5880] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.908609][ T5880] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  508.918476][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.928051][ T5880] usb 3-1: Product: syz
[  508.933056][ T5880] usb 3-1: Manufacturer: syz
[  508.973261][ T5880] usb 3-1: SerialNumber: syz
[  509.009630][T10371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  509.201046][T10379] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  509.201046][T10379] The task syz.0.1124 (10379) triggered the difference, watch for misbehavior.
[  509.742594][T10390] mkiss: ax0: crc mode is auto.
[  510.045210][ T5941] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  510.173312][ T5880] usb 3-1: Error in usbnet_get_endpoints (-71)
[  510.200790][ T5880] usb 3-1: USB disconnect, device number 61
[  510.215230][ T5941] usb 6-1: Using ep0 maxpacket: 32
[  510.247992][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short
[  510.290114][ T5941] usb 6-1: config 120 has an invalid interface number: 86 but max is 0
[  510.431438][ T5941] usb 6-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config
[  510.449057][T10397] /dev/nullb0: Can't open blockdev
[  510.522865][ T5941] usb 6-1: config 120 has no interface number 0
[  510.555442][ T5941] usb 6-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  510.581368][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.595876][ T5941] usb 6-1: Product: syz
[  510.615202][ T5941] usb 6-1: Manufacturer: syz
[  510.736450][ T5941] usb 6-1: SerialNumber: syz
[  510.780579][T10401] netlink: 'syz.1.1139': attribute type 1 has an invalid length.
[  510.788603][T10401] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1139'.
[  510.895311][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  510.895360][   T29] audit: type=1400 audit(2000000108.080:2136): avc:  denied  { bind } for  pid=10398 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  510.931305][   T29] audit: type=1400 audit(2000000108.090:2137): avc:  denied  { setopt } for  pid=10398 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  511.079668][   T29] audit: type=1400 audit(2000000108.300:2138): avc:  denied  { ioctl } for  pid=10386 comm="syz.5.1135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  511.129132][ T5880] usb 1-1: USB disconnect, device number 58
[  511.177814][   T29] audit: type=1400 audit(2000000108.390:2139): avc:  denied  { read write } for  pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  511.277359][   T29] audit: type=1400 audit(2000000108.390:2140): avc:  denied  { open } for  pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  511.409433][   T29] audit: type=1400 audit(2000000108.540:2141): avc:  denied  { ioctl } for  pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  511.505427][ T5941] huawei_cdc_ncm 6-1:120.86: skipping garbage
[  511.533287][ T5941] huawei_cdc_ncm 6-1:120.86: CDC Union missing and no IAD found
[  511.766015][T10403] random: crng reseeded on system resumption
[  511.780195][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'.
[  511.840609][ T5941] huawei_cdc_ncm 6-1:120.86: bind() failure
[  511.847417][   T29] audit: type=1400 audit(2000000108.710:2142): avc:  denied  { read write } for  pid=5820 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  511.907627][ T5941] usb 6-1: USB disconnect, device number 42
[  512.349085][ T5880] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  512.374348][   T29] audit: type=1400 audit(2000000108.710:2143): avc:  denied  { open } for  pid=5820 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  512.492486][   T29] audit: type=1400 audit(2000000108.710:2144): avc:  denied  { ioctl } for  pid=5820 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  512.555214][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.583731][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  512.613106][ T5880] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  512.644206][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.657139][   T29] audit: type=1400 audit(2000000108.740:2145): avc:  denied  { read append } for  pid=10386 comm="syz.5.1135" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  512.669645][ T5880] usb 2-1: config 0 descriptor??
[  512.884000][ T7140] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  513.026151][ T7140] usb 3-1: device descriptor read/64, error -71
[  513.296790][ T7140] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  513.441794][T10431] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  513.495843][ T7140] usb 3-1: device descriptor read/64, error -71
[  513.615908][ T7140] usb usb3-port1: attempt power cycle
[  513.876723][T10428] loop2: detected capacity change from 0 to 7
[  513.988965][T10450] FAULT_INJECTION: forcing a failure.
[  513.988965][T10450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.002348][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.5.1149 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.002377][T10450] Tainted: [L]=SOFTLOCKUP
[  514.002384][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  514.002395][T10450] Call Trace:
[  514.002401][T10450]  <TASK>
[  514.002407][T10450]  dump_stack_lvl+0x100/0x190
[  514.002434][T10450]  should_fail_ex.cold+0x5/0xa
[  514.002458][T10450]  _copy_from_user+0x2e/0xd0
[  514.002481][T10450]  copy_msghdr_from_user+0x9f/0x4f0
[  514.002501][T10450]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  514.002530][T10450]  ___sys_sendmsg+0x106/0x1e0
[  514.002550][T10450]  ? __pfx____sys_sendmsg+0x10/0x10
[  514.002598][T10450]  __sys_sendmsg+0x170/0x220
[  514.002624][T10450]  ? __pfx___sys_sendmsg+0x10/0x10
[  514.002660][T10450]  ? rcu_is_watching+0x12/0xc0
[  514.002689][T10450]  do_syscall_64+0x10b/0xf80
[  514.002711][T10450]  ? clear_bhb_loop+0x40/0x90
[  514.002734][T10450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.002753][T10450] RIP: 0033:0x7feff019c819
[  514.002768][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.002786][T10450] RSP: 002b:00007feff1101028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  514.002804][T10450] RAX: ffffffffffffffda RBX: 00007feff0415fa0 RCX: 00007feff019c819
[  514.002816][T10450] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  514.002829][T10450] RBP: 00007feff1101090 R08: 0000000000000000 R09: 0000000000000000
[  514.002839][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.002850][T10450] R13: 00007feff0416038 R14: 00007feff0415fa0 R15: 00007ffe2be74018
[  514.002875][T10450]  </TASK>
[  514.178061][ T7140] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  514.325687][T10428] Dev loop2: unable to read RDB block 7
[  514.518444][T10428]  loop2: AHDI p2 p3
[  514.527700][ T7140] usb 3-1: device descriptor read/8, error -71
[  514.737516][T10428] loop2: partition table partially beyond EOD, truncated
[  515.035364][ T7140] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  515.098372][T10456] netlink: 'syz.5.1151': attribute type 1 has an invalid length.
[  515.106347][T10456] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1151'.
[  515.378427][ T7140] usb 3-1: device descriptor read/8, error -71
[  515.531549][ T7140] usb usb3-port1: unable to enumerate USB device
[  515.647108][ T5195] Dev loop2: unable to read RDB block 7
[  515.669156][ T5195]  loop2: AHDI p2 p3
[  515.693472][ T5195] loop2: partition table partially beyond EOD, truncated
[  516.085891][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  516.085907][   T29] audit: type=1400 audit(2000000113.350:2305): avc:  denied  { bind } for  pid=10457 comm="syz.0.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  516.588285][   T29] audit: type=1400 audit(2000000113.370:2306): avc:  denied  { listen } for  pid=10457 comm="syz.0.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  516.730781][   T29] audit: type=1400 audit(2000000113.370:2307): avc:  denied  { create } for  pid=10457 comm="syz.0.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  516.754694][ T6778] ------------[ cut here ]------------
[  516.760272][ T6778] time_after(jiffies, warn_timeout)
[  516.760287][ T6778] WARNING: io_uring/io-wq.c:1369 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.4.212/6778
[  516.775617][ T6778] Modules linked in:
[  516.779533][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.4.212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  516.790589][ T6778] Tainted: [L]=SOFTLOCKUP
[  516.795188][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  516.805489][ T6778] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0
[  516.811847][ T6778] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 6f 3f 4c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 9f c2 14 fd 4d 85 ff 79 aa e8 b5 c7 14 fd 90 <0f> 0b 90 eb 9f e8 aa c7 14 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc
[  516.831645][ T6778] RSP: 0018:ffffc9000d47f8d0 EFLAGS: 00010293
[  516.837795][ T6778] RAX: 0000000000000000 RBX: ffff888022286000 RCX: ffffffff84f4b321
[  516.845986][ T6778] RDX: ffff8880303e8000 RSI: ffffffff84f4b32b RDI: ffff8880303e8000
[  516.854003][ T6778] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000
[  516.862047][ T6778] R10: ffffffffffffe8e1 R11: 0000000000000000 R12: 0000000100003ce2
[  516.870046][ T6778] R13: 0000000000001b58 R14: ffff888022286018 R15: ffffffffffffe8e1
[  516.878126][ T6778] FS:  00007efddda496c0(0000) GS:ffff8881243de000(0000) knlGS:0000000000000000
[  516.887156][ T6778] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  516.893789][ T6778] CR2: 00007f8a7efad480 CR3: 000000007b2ac000 CR4: 00000000003526f0
[  516.901817][ T6778] Call Trace:
[  516.905082][ T6778]  <TASK>
[  516.908049][ T6778]  ? __pfx_io_wq_put_and_exit+0x10/0x10
[  516.913593][ T6778]  ? io_uring_clean_tctx+0xb7/0x180
[  516.918867][ T6778]  io_uring_clean_tctx+0x114/0x180
[  516.923991][ T6778]  ? __pfx_io_uring_clean_tctx+0x10/0x10
[  516.929697][ T6778]  ? percpu_counter_add_batch+0xb9/0x230
[  516.935356][ T6778]  ? __refcount_sub_and_test.constprop.0+0x82/0x90
[  516.941849][ T6778]  io_uring_cancel_generic+0x7b9/0x810
[  516.947351][ T6778]  ? __pfx_io_uring_cancel_generic+0x10/0x10
[  516.953401][ T6778]  ? __pfx___file_ref_put+0x10/0x10
[  516.958622][ T6778]  ? __pfx_autoremove_wake_function+0x10/0x10
[  516.964686][ T6778]  ? fput+0xd9/0x100
[  516.968653][ T6778]  ? io_uring_unreg_ringfd+0xca/0x140
[  516.974017][ T6778]  do_exit+0x344/0x2a60
[  516.978272][ T6778]  ? __pfx___schedule+0x10/0x10
[  516.983139][ T6778]  ? __pfx_do_exit+0x10/0x10
[  516.987797][ T6778]  ? preempt_schedule_thunk+0x16/0x30
[  516.993278][ T6778]  ? preempt_schedule_common+0x42/0xc0
[  516.998805][ T6778]  do_group_exit+0xd5/0x2a0
[  517.003319][ T6778]  get_signal+0x1ec7/0x21e0
[  517.008000][ T6778]  ? irqentry_exit+0x246/0x790
[  517.012882][ T6778]  ? __pfx_get_signal+0x10/0x10
[  517.017819][ T6778]  ? do_futex+0x192/0x350
[  517.022180][ T6778]  arch_do_signal_or_restart+0x91/0x7a0
[  517.027829][ T6778]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  517.034023][ T6778]  ? __pfx___x64_sys_futex+0x10/0x10
[  517.039485][ T6778]  ? rcu_is_watching+0x12/0xc0
[  517.044300][ T6778]  exit_to_user_mode_loop+0x86/0x4a0
[  517.049783][ T6778]  ? do_syscall_64+0x52d/0xf80
[  517.054674][ T6778]  do_syscall_64+0x706/0xf80
[  517.059384][ T6778]  ? clear_bhb_loop+0x40/0x90
[  517.064088][ T6778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.070099][ T6778] RIP: 0033:0x7efddcb9c819
[  517.074529][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.094250][ T6778] RSP: 002b:00007efddda490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  517.102752][ T6778] RAX: fffffffffffffe00 RBX: 00007efddce16098 RCX: 00007efddcb9c819
[  517.111223][ T6778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efddce16098
[  517.119349][ T6778] RBP: 00007efddce16090 R08: 0000000000000000 R09: 0000000000000000
[  517.127477][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.135580][ T6778] R13: 00007efddce16128 R14: 00007ffcb2527870 R15: 00007ffcb2527958
[  517.143581][ T6778]  </TASK>
[  517.146692][ T6778] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  517.153975][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.4.212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  517.164749][ T6778] Tainted: [L]=SOFTLOCKUP
[  517.169070][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  517.179210][ T6778] Call Trace:
[  517.182491][ T6778]  <TASK>
[  517.185425][ T6778]  dump_stack_lvl+0x100/0x190
[  517.190128][ T6778]  vpanic+0x552/0x970
[  517.194203][ T6778]  ? __pfx_vpanic+0x10/0x10
[  517.198720][ T6778]  panic+0xd1/0xe0
[  517.202446][ T6778]  ? __pfx_panic+0x10/0x10
[  517.206888][ T6778]  ? check_panic_on_warn+0x1f/0x90
[  517.212023][ T6778]  check_panic_on_warn.cold+0x19/0x34
[  517.217415][ T6778]  ? io_wq_put_and_exit+0x36c/0x9d0
[  517.222635][ T6778]  __warn.cold+0x191/0x328
[  517.227071][ T6778]  __report_bug+0x296/0x3d0
[  517.231625][ T6778]  ? io_wq_put_and_exit+0x36c/0x9d0
[  517.236961][ T6778]  ? __pfx___report_bug+0x10/0x10
[  517.242007][ T6778]  ? do_raw_spin_lock+0x128/0x260
[  517.247048][ T6778]  ? find_held_lock+0x2b/0x80
[  517.251738][ T6778]  ? __wait_for_common+0x1f3/0x4c0
[  517.256882][ T6778]  ? rcu_is_watching+0x12/0xc0
[  517.261755][ T6778]  ? io_wq_put_and_exit+0x36c/0x9d0
[  517.266970][ T6778]  report_bug+0xb2/0x220
[  517.271353][ T6778]  ? io_wq_put_and_exit+0x36c/0x9d0
[  517.276566][ T6778]  handle_bug+0x16a/0x2a0
[  517.280926][ T6778]  exc_invalid_op+0x17/0x50
[  517.285450][ T6778]  asm_exc_invalid_op+0x1a/0x20
[  517.290293][ T6778] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0
[  517.296103][ T6778] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 6f 3f 4c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 9f c2 14 fd 4d 85 ff 79 aa e8 b5 c7 14 fd 90 <0f> 0b 90 eb 9f e8 aa c7 14 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc
[  517.315781][ T6778] RSP: 0018:ffffc9000d47f8d0 EFLAGS: 00010293
[  517.322035][ T6778] RAX: 0000000000000000 RBX: ffff888022286000 RCX: ffffffff84f4b321
[  517.330012][ T6778] RDX: ffff8880303e8000 RSI: ffffffff84f4b32b RDI: ffff8880303e8000
[  517.337975][ T6778] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000
[  517.345938][ T6778] R10: ffffffffffffe8e1 R11: 0000000000000000 R12: 0000000100003ce2
[  517.353927][ T6778] R13: 0000000000001b58 R14: ffff888022286018 R15: ffffffffffffe8e1
[  517.361892][ T6778]  ? io_wq_put_and_exit+0x361/0x9d0
[  517.367086][ T6778]  ? io_wq_put_and_exit+0x36b/0x9d0
[  517.372278][ T6778]  ? __pfx_io_wq_put_and_exit+0x10/0x10
[  517.377837][ T6778]  ? io_uring_clean_tctx+0xb7/0x180
[  517.383019][ T6778]  io_uring_clean_tctx+0x114/0x180
[  517.388122][ T6778]  ? __pfx_io_uring_clean_tctx+0x10/0x10
[  517.393734][ T6778]  ? percpu_counter_add_batch+0xb9/0x230
[  517.399357][ T6778]  ? __refcount_sub_and_test.constprop.0+0x82/0x90
[  517.405851][ T6778]  io_uring_cancel_generic+0x7b9/0x810
[  517.411304][ T6778]  ? __pfx_io_uring_cancel_generic+0x10/0x10
[  517.417269][ T6778]  ? __pfx___file_ref_put+0x10/0x10
[  517.422464][ T6778]  ? __pfx_autoremove_wake_function+0x10/0x10
[  517.428517][ T6778]  ? fput+0xd9/0x100
[  517.432394][ T6778]  ? io_uring_unreg_ringfd+0xca/0x140
[  517.437762][ T6778]  do_exit+0x344/0x2a60
[  517.441896][ T6778]  ? __pfx___schedule+0x10/0x10
[  517.446743][ T6778]  ? __pfx_do_exit+0x10/0x10
[  517.451330][ T6778]  ? preempt_schedule_thunk+0x16/0x30
[  517.456783][ T6778]  ? preempt_schedule_common+0x42/0xc0
[  517.462245][ T6778]  do_group_exit+0xd5/0x2a0
[  517.466733][ T6778]  get_signal+0x1ec7/0x21e0
[  517.471224][ T6778]  ? irqentry_exit+0x246/0x790
[  517.475975][ T6778]  ? __pfx_get_signal+0x10/0x10
[  517.480809][ T6778]  ? do_futex+0x192/0x350
[  517.485235][ T6778]  arch_do_signal_or_restart+0x91/0x7a0
[  517.490773][ T6778]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  517.496918][ T6778]  ? __pfx___x64_sys_futex+0x10/0x10
[  517.502194][ T6778]  ? rcu_is_watching+0x12/0xc0
[  517.506948][ T6778]  exit_to_user_mode_loop+0x86/0x4a0
[  517.512234][ T6778]  ? do_syscall_64+0x52d/0xf80
[  517.517072][ T6778]  do_syscall_64+0x706/0xf80
[  517.521646][ T6778]  ? clear_bhb_loop+0x40/0x90
[  517.526310][ T6778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.532179][ T6778] RIP: 0033:0x7efddcb9c819
[  517.536567][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.556154][ T6778] RSP: 002b:00007efddda490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  517.564554][ T6778] RAX: fffffffffffffe00 RBX: 00007efddce16098 RCX: 00007efddcb9c819
[  517.572526][ T6778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efddce16098
[  517.580648][ T6778] RBP: 00007efddce16090 R08: 0000000000000000 R09: 0000000000000000
[  517.588606][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.596555][ T6778] R13: 00007efddce16128 R14: 00007ffcb2527870 R15: 00007ffcb2527958
[  517.604522][ T6778]  </TASK>
[  517.607968][ T6778] Kernel Offset: disabled
[  517.612277][ T6778] Rebooting in 86400 seconds..