last executing test programs:

10.721379757s ago: executing program 0 (id=1022):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x2}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000d1bb9887d662ca4a37000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4800}, 0xc091)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x10000000)

9.587924321s ago: executing program 0 (id=1030):
socket$nl_generic(0x10, 0x3, 0x10)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket(0x2c, 0x800, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000440)=0x7ff, 0x4)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef)
read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef)
io_uring_enter(r4, 0x7156, 0xb2c6, 0x63, &(0x7f0000000500)={[0x8]}, 0x8)
sendmsg(r2, &(0x7f0000000c40)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth1_to_batadv\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="3e3882099c6cfae1d3c3e96e9ee81cd666feaa0b9b303aed9ba2fb5fc5c615c00c1a42ad0e156c4021f04fc6479e1cd797d33305caedc26739a152b34335153e984938395858fd7eae838366bd452cab7a421b762d", 0x55}, {&(0x7f0000000040)="c538229e5010adf85af32a718673e7c3af9df641", 0x14}, {&(0x7f00000003c0)="1479b556546407baecd4c72058a987a8b893cb9f73ca9e26a7230de2028f242b82e870ad558bc9739be0bac4d19d803b83ae0b9c2b8e05c3a5590ce2b8e13e070c9ccd5a22b5f114fc04253787d19ed44a388a37ee46f6cc3555983f606921e4904e360292dd732d78768453a9316ffa1a0a83fe4bb17bc1c37c2fde9e1b2e041baefd267151aa28b71944e4fd3655ba7b736b49f6af26fdd58239b1fe267c39f785c65dde8f80", 0xa7}, {&(0x7f0000000480)="967be7254e61dc2d5f41fa887fbab961350ccc46330d50b7041d9e3f5cec907bfe94034fb1ca73d566891a1750402e28595ece3f00000ce89f5900a8a5891fb434a6938edcc0a3d6415e9557db20e201a7640f600b33b4ff6238de40474f0d6fff03fccea633b293da5b0b", 0x6b}, {&(0x7f00000001c0)="94acb15c0ed64c5abf8420875e231c2d0dc4", 0x12}, {&(0x7f0000000c80)="870d237565727e844842bf0e8a57604f3220295cbdd34cafc82b0b2bacf8edfa5d5a65ad2b4058eb7f8d66d23a1503743268f238274386d865fb881a3bcc3522176d359306337f9ebdd060c16917576d6f1ef0032d4862f1b561deb76353a6b394299b68d0e34b61b9eb368161f5ca886428f600bbbd112d9975a889b5cd5af88c9aa35576789c194f4f2809f7cc34059014488f69a293f1041df7ee54263db0c785468243d08c61e373b2caea9919f4b8038e8d4a4d9f580b69ca8977962cef9e954ed0446ba8f66da2875ce39da3447babb226a1814cf9c592c9bc85fd062ad576cc40cf410f46f3ac", 0xea}], 0x6, &(0x7f0000000680)=[{0x108, 0x107, 0x59, "86364c35ff64a044ec8bf208bd59e0b7209adb9148860f30b4b99db780e9ab5cb0568447acf6b05fe0198350e845d222afeebac9a339422f056fde628195bcf2397a3a995a6dacfcdb208603c6b651768ba3ab271ecec54642f01e03b4880b67306c407b2ee8f4eeaba19e0fca73f1f7790638c3460b87f29b3638352b050053cde73ba6987c9b2738722e8bf3ac582465aafe21f42ec41a702af18b790b798c7cc89f8d4a7666748b2f531267ed446dc5e1731e33c558decca0f47f6a42dd0b0c2acc0ece97504a727f01f993444f7e093f4cc22894536bd88dd497a24a3776c891f3f35e85c893dc87df85e37bd5787f4b2af191ca4d5e"}, {0x50, 0x224, 0x1, "036e92c115fc655e52310ee2f67639b45fa693cda499d6f9739161bd028640404f1038db14ebf0578fdf151640867d92582bacbb57bc939419e588c7"}, {0xf8, 0x84, 0x5, "62b702b8be8c588a05ce27ecf66944f8569aa5a68b25da6da39967ca790956d269b856918139d14d263ff698db7e1b1517075e725b793c1c02a5b330b04069e2574961798d16858eb9a02250a90daf0319709a7211cb1153ac80e6cb57164631500330240a17c84aed3d31b6e5b7e584658e5c9b7558a3a54b7c44c6c4e659827a3571d8cacbfbc9418d8bc2d857fb7840733bbf0ac1dec42793f41a1d2120ed0f2d044d33bc99869fd188bf276315dddc6cf08118d47ff26f6ea0502f4292d2a4650a54d14ec4c255aa279d88877a198af2a8a0d167ee6040c22cf5d2826c3ae7a63edf39572aa5"}, {0x28, 0x118, 0x4, "f9112c0edbd25039185532d690cd88d4645bf5cfbb32"}, {0xe0, 0x104, 0x9a, "98e485dfc15203265196ad308349a362006bdcfa087f2ab051883a0a8c076fd77a2c9581a3ab86a28e8cdefb2f9a5847b72e9cec0bbc6e566af26f6e5136ace20e4909be09f43a7cbd560a8b239f74602962419cf658a805991c5d88226e07e5ad167ff9b62eb9609fdaa69025039e270f674f1dac843f8bd24bd9f4b8b36a9cddcb1fc9b17d33243f747e34eb6ffe2e6c62e6446e25b5e849e13c901800b97d58ac48164e3e5fd2358ed8a00c2f7e586f5c4145d3e28cd31687205f7399e57496af5ad0ec22b9f634d8"}, {0xa0, 0x88, 0xb4, "85558a25ee44c7bc3de02a71cef236019082727b1034477d9cdc8c01875b1e7a2ba920803573930b19513b44729b6fa6524ede95149f50b95d4bac8f5abe9320f897f4f630842af7da052002f21c3a588f628b65742a621be685edbbb31314fbd7325ee54871904880e00e3d490fa969763bf672dbd12554ef6a6f67d40e8c30e030e5014f6026c846ff8503cf"}, {0x58, 0x114, 0x7, "78ff881e7e63a638acc694debbefbd988475f9a14b8352c260b4f0cb3c2e313e192cf8b2635ad869d3cddd31ee7798a485e10ff97eb592c455f10cff8f138c9449"}, {0x58, 0x11, 0x8, "8a1b123d2f69cbf4b013028dc218a950ba6f0a9b94e472af4091789c5d77e4924d30511160d44cf6fec2e40d8a93a8a276aa13fd71cb09719cc3f86dc4bfc1b8e68859ec"}, {0x108, 0x0, 0x0, "c9bfcb5aebb253dad99e60ea9fff06c8469643dad558ae9e92f9592fb29aef9b81c016ca1a6030172b68d7145d4aa800b95e4542dfe22612415b2d1294c88e034c2c510a09efb3d145f4a475afc96fecf26485f653306441fe621f874ef4469560905731c79332d3a9c92b466b61fdd865600e74aa49fb7bcdb14f7ab5b4ff0651bf4f5521bcb71e58f0cc2d273e378f0f31b71ee33baa7f67eafc3b42bb2163cca34f8b333b7a9b3719e50b723b1baceb6d5b8a285c1835fb9b2ed2da141aad630ce1941e30ac3841cd91da5b0030af1101a47c9c9464c24efe81507b5f5b2919909c2306cc643c815f02b859e40653333f7cf184b3"}], 0x5b0}, 0x20000000)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00", 0xca, 0x1, 0x0, 0x0)

9.552503334s ago: executing program 4 (id=1031):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000040)=0x4, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="64946eddc37d438f5fa8"]}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)

6.892114826s ago: executing program 3 (id=1033):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r5, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r6 = accept4$alg(r2, 0x0, 0x0, 0x80000)
io_submit(0x0, 0x3, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000440)="8ada8718c54ed14cb0c52bb0fa42af797131b0da28ea2ecef0f876bd29ef3d542f818fec1c75f345539f760f4372058603290bcc29dd54c56b8fc366844a19b62c5a414e1d88a08c53fa809454c081e8e2d4adb22f58a5abf68bd8e615ccb5d826de30", 0x63, 0x20000000000, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f00000006c0)="5b41cc1b32c2adfe338fdb1586e4775384fb34f1108a4b256ff3c31170f6007a2856419bec76219d804e9e063e4c53f38749b6e8022d2e27d483445eebf11eadb181cb0068c8b77e4fb3e4ee102db17c3f78ab6de4a7e16e7a86a072259ab1611226555f266f6a4b1ed9bd254360c94eb31ce4a213db2d94ecc9d2115404fe48b43b42587ec8f3acdd836eca8596822f19e44435b99e5d3e6eef145a5cc0fb24fb1de6ff900f6278d272", 0xaa, 0x80000001, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3ff, r5, &(0x7f0000000500)="00680e94f3c42779603e944016763b48c24fd9008a69b4a173ec2e746a1b829d65009228fb2b71f6540dc3458c729bbf01ac43deaea1e0cd8c81eaf18432a4ab9595932ce5901d94ae28be50c6a1eb8829055cd899d93f8e474b99e515b9055dc47d15d95f37ad4f08403f4940a4ebf1e4cff96ef99ee37fde3c31e3e255746d968610d754d541647c5a16850086a648288fa0e8e6add2c4e41bc9e51f", 0x9d, 0x3, 0x0, 0x1}])
write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x23, 0x2, 0xffffffff)

6.884899823s ago: executing program 1 (id=1034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008cc0)={0x2c, 0x2c, 0x107, 0x70fd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x11, 0xfa, 0x0, 0x0, @str='/dev/video37\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})

6.497487039s ago: executing program 2 (id=1035):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8, 0x138, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0xb, 0x5}, @as_header={0x7, 0x24, 0x1, 0x7, 0xa4, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x3e, 0x10, 0x5, {0x7, 0x25, 0x1, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xdd, 0x8, 0x2, {0x7, 0x25, 0x1, 0xc, 0xd7, 0x9}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r5 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
close(0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000080000009500000000000000e1931b4fd4bcdd6e8378cded20bdd34299a0bfad2989929e2975a0b0946d71d44b068c03acdb962498d601a6d069c8a786ba9611a2fdeb701130a9b2f51acc5a705e3510850d4ba4c92ca01fe09ee7d2386d9a41"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440e0}, 0x48010)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7})

6.448121165s ago: executing program 1 (id=1036):
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={<r0=>0x0})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, <r4=>r3, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r4, r5, 0x4, 0x3, 0x5, 0x18, {0x0, 0x5, 0x5, 0x17, 0x8, 0x9, 0x1, 0x8, 0x7, 0xd24, 0x5, 0x3, 0x1, 0x1ff, "6f4f1b1330d057a2f7d15586b7445443c528a9be00"}})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140), 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01864c2, &(0x7f0000000040)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01864c1, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01864c1, &(0x7f0000000140)={r7})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000003c0)={0x0, <r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)={<r9=>0x0})
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000480)={0x1, 0x7, 0x0, <r10=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r11=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r11, 0x0, 0x0, 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r12, 0xffffffffffffffff, 0x0, 0x6)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000000)={<r13=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r12, 0xc03064ca, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x1000, 0x8, 0xe, 0x3, 0xfff], 0x0, 0x8, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000500)={<r14=>0x0})
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000580)={<r15=>0x0, 0x1, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)={<r16=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)={<r17=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000640)={<r18=>0x0})
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000000800)={0x0, 0x1, {0x30, 0x5, &(0x7f0000000700)=[{0x10000000, 0x0, 0x4, 0x0, 0x0, {0x10, 0x9, &(0x7f0000000280)=[{0x80000000, 0x0, 0x9fa6}, {0x800000ff, 0x0, 0x4}, {0x80000000, 0x0, 0xfffffffffffff801}, {0x1}, {}, {0x0, 0x0, 0x401}, {0xff, 0x0, 0x4}, {0x80000000, 0x0, 0x8}, {0x80000000, 0x0, 0x6d}]}}, {0x10000000, 0x0, 0x3, 0x1ff, 0x6, {0x10, 0x2, &(0x7f0000000380)=[{0xff, r0, 0x7}, {0xff, r7}]}}, {0x20000000, r8, 0x7, 0xfffffffffffffffd, 0x0, {0x10, 0x1, &(0x7f0000000440)=[{0x80000000, r9, 0x9}]}}, {0x0, r10, 0xffffffffffff7d36, 0x4acdfded, 0x0, {0x10, 0x2, &(0x7f0000000540)=[{0x1, r13, 0x6}, {0x80000000, r14, 0x9}]}}, {0x20000000, r15, 0x3, 0x486, 0x2, {0x10, 0x5, &(0x7f0000000680)=[{0xff, r16, 0x75b}, {0x1, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffe}, {0x0, r17, 0x4d}, {0x0, r18, 0x7}]}}]}})
r19 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000d05403000000000000000000000000000d000300686173683a6e6574000000000500040000000900020073797a31000000001400078008001340000017e5080006000000000805000500020000000500010006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x8d0)

6.347678184s ago: executing program 1 (id=1037):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) (fail_nth: 4)

6.07332506s ago: executing program 1 (id=1038):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r2 = socket$inet6(0xa, 0x80002, 0x0)
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000280)="64b81bda58bf7cc372cece7a68bba1c3df52476738f93f294b2e40410649e3b73517bd2850c8f5a686a58051", 0x2c}, {&(0x7f0000000ac0)="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", 0xfe0}, {&(0x7f0000000500)="57502c74a8c28683364bb4b40db07825f363414ea806ab96ff3fdc5ef8290c5320b5b3bb1df575e1caf722e9d7a5d17d5b6b5c7fa075c258b48f067997968b16391c306ca6cb3d78846ae5ae7acf25881fcf7981bad87318cdc4305cc1380903a438fa327afe868b4ffa0b716787fdb25b296d8554961773cac9b86e9276fc12c28a376e7d2d2a36e6b55071b1f4a1c1b2346ff4534af03ba1ea759e69dea387395bb6e5f679e7a58f3c0c4a1fbed52d828b4af10e5de2569285eb059b57e5928d5c6eceb8488547338f9b33f259074afadab7a9a1dc23a18f7bc3be78ba8608073b053f3d839fad318b867d5c27", 0xee}, {&(0x7f0000000600)="1dc5f9d8193fb0c033a70a246ab32927e314f58a0fea503e365368f038218151fb4afb035e18991bd0cd3a7c24bc9a326e48706e13c6b5af0536b19d9c559b688f133c53bf0365fd2be7ce7bc19e55666a5d8f18673ea66c31efb25404f24da912e5330c6074d0e00946dc659cf772185ab4e49a9423e7a8329433e85fc17e40dd0240d2d3c91aca64bf3d3a808af0a71bd7290afbeabeafce9777ac5e9b0aeb4eb0d2e66bdc38a34def6cb5770e7e18b1e2976a9d89a93e549741b7e4659a89dc0c72e870910f13", 0xc8}, {&(0x7f0000000380)="8c15d0c5784cde22b8a9522cc3501b61d51fb677c4b024b5e0b3df1a8b5053f20e42ace64c28fd47b804e64a0aa49d707fb03b3aa13d45e6883bba7a76eb95cda4c5dcd38881", 0x46}], 0x5, 0x0, 0x0, 0x5)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r6, 0x101, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4800)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4)

5.63884772s ago: executing program 0 (id=1039):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1300, &(0x7f0000001040)="e7"})
r4 = getpid()
r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
r6 = syz_pidfd_open(r4, 0x0)
setns(r6, 0x24020000) (async)
setns(r6, 0x24020000)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x5)
landlock_restrict_self(r7, 0x0) (async)
landlock_restrict_self(r7, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r8)
sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040007}, 0x4000040)

5.600171165s ago: executing program 3 (id=1040):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb04000000aaaa86dd6012000800183a"], 0x0)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
timer_gettime(r0, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x37, 0x0, 0x12, 0x0, 0x2})
fchdir(r1)

5.460437888s ago: executing program 1 (id=1041):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f00000000c0), 0xc, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000)=0x3, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="000c0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x4, 0x100}, &(0x7f0000000080))

5.410390034s ago: executing program 3 (id=1042):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r2 = socket$inet6(0xa, 0x80002, 0x0)
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000280)="64b81bda58bf7cc372cece7a68bba1c3df52476738f93f294b2e40410649e3b73517bd2850c8f5a686a58051", 0x2c}, {&(0x7f0000000ac0)="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", 0xfe0}, {&(0x7f0000000500)="57502c74a8c28683364bb4b40db07825f363414ea806ab96ff3fdc5ef8290c5320b5b3bb1df575e1caf722e9d7a5d17d5b6b5c7fa075c258b48f067997968b16391c306ca6cb3d78846ae5ae7acf25881fcf7981bad87318cdc4305cc1380903a438fa327afe868b4ffa0b716787fdb25b296d8554961773cac9b86e9276fc12c28a376e7d2d2a36e6b55071b1f4a1c1b2346ff4534af03ba1ea759e69dea387395bb6e5f679e7a58f3c0c4a1fbed52d828b4af10e5de2569285eb059b57e5928d5c6eceb8488547338f9b33f259074afadab7a9a1dc23a18f7bc3be78ba8608073b053f3d839fad318b867d5c27", 0xee}, {&(0x7f0000000600)="1dc5f9d8193fb0c033a70a246ab32927e314f58a0fea503e365368f038218151fb4afb035e18991bd0cd3a7c24bc9a326e48706e13c6b5af0536b19d9c559b688f133c53bf0365fd2be7ce7bc19e55666a5d8f18673ea66c31efb25404f24da912e5330c6074d0e00946dc659cf772185ab4e49a9423e7a8329433e85fc17e40dd0240d2d3c91aca64bf3d3a808af0a71bd7290afbeabeafce9777ac5e9b0aeb4eb0d2e66bdc38a34def6cb5770e7e18b1e2976a9d89a93e549741b7e4659a89dc0c72e870910f13", 0xc8}, {&(0x7f0000000380)="8c15d0c5784cde22b8a9522cc3501b61d51fb677c4b024b5e0b3df1a8b5053f20e42ace64c28fd47b804e64a0aa49d707fb03b3aa13d45e6883bba7a76eb95cda4c5dcd38881", 0x46}], 0x5, 0x0, 0x0, 0x5)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r6, 0x101, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4800)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4)

5.409931805s ago: executing program 0 (id=1043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x3, &(0x7f0000000780))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
sendmsg$AUDIT_SET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfe, {0xc354fc671efbad08, 0x0, 0x0, r0, 0xd0d1, 0xffffffff, 0x6a, 0x9, 0x0, 0x3, 0x5}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10)
sendfile(r4, r4, 0x0, 0x20000023896)
unshare(0x22020400)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r7 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="7972cda0412555865b8750e38211015090a249ab46b38d957bf62d32e19b1d0b3a5c3ba18b9859f15379de68f6e73845b895ad20dd15583588187f996ae0bd57bee7023542f83003e6937482f0be3f744292c9d8ac0ebf730ab0d3ba890c013cf5bfabe22997c27e522ab0b9c1c4b9170250f2bd6974753ad4bf4f2b7c623b308ae09a7ef5360484b1880fe77a3f219e828fb9b30f891f14162aa64d5f50e404c0fa208d03cee634356b9b66da02ff15a32cec97b42ce01cf6c0096747a04a5f56ffa1c5f5212c7f26ad50c13a31ec53e767acc52fb2f11ce01ad64ff86e7b5248f3909333d10b92bbf8", 0xea}, {&(0x7f0000000540)="3f9c27bc4f74a5decd47c9dedd029bc86238a8ee4b72c0bf98db3423fac928a3b7c80e869f5f4e139caef19458e7457e5aba173de9ceb23fec4dc7b3beef4daef57d0147489f5a3925a58663d363aa55d670022c4b28d04d1558108e273e3e7866d07edd345a3da8be93ef9c13bbf671168d1c75ee5c38a4a8220e6135a5d68c2f9f13e91c64de51ba487a2757641a10ef0c67e50c42471a2c7c542711ba4669ab685dd49a436c741ba1fdbdd87463a33daa2cbe14df4a2a5cfd3894b28ce35d26dcbb0397078193a6038ab5c344f9611b8925e77456cd154178d2b57ca56d505bb40d5c2ea56e78e892", 0xea}, {&(0x7f0000000440)}, {0x0}, {&(0x7f0000000680)="e013a104db8bb32a91ae1201da95ac8ba7b98d142a17cf8dc2155d93532e3562c29944a0d804dacb4fadf66f3796e46d514af0abd49b62fd44ee76edf73d0773671ebfbe99a3eb323d9d058e678671aa3ada7025bdf077aaab9bf305c05b024835c5fd932c1f5d7362046da7ab242726032744d6cf8564a51f8790325a6522e2b2ecbe87ed8c58eacf08e8686d15f05f63d17aae7a3018562555b5657c06bd1a328b76d931c0418b7c4d9205a721cf8b8c3eeef7ac9aa47c6d43b9e5369450c59e855fb587b3bf5964022c8632ce46cd316b8ff32df6bc252c6922ad02a75e6c0b0c30b8f5396cf8a2e50acda2a631", 0xef}], 0x5, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r5]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r6, r3, r2, r7]}}], 0x128, 0xc800}}], 0x1, 0x80805)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="18077b51314800100000000000001811000000004433c619799867d10000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000f05000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000900000004000000060000003f93000000000000b5030000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000aa0000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r4, 0xf3e7a000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000200)={{0xf272, 0x401, 0x934, 0x3}, 'syz0\x00', 0x4c})

4.410231402s ago: executing program 4 (id=1044):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x1, 0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, r0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000780)=0x1e)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x35, 0x66, 0x65, 0x39, 0x65, 0x35, 0x33], 0x2d, [0x61, 0x65, 0x90, 0x34], 0x2d, [0x31, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x61, 0x62, 0x33], 0x2d, [0x66, 0x35, 0x30, 0x36, 0x32, 0x39, 0x66, 0x52]}}}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, 'workdir'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x63, 0x32, 0x62, 0x62, 0x66, 0x31], 0x2d, [0x62, 0x63, 0x3a, 0x65], 0x2d, [0x30, 0x34, 0x35, 0x38], 0x2d, [0x65, 0x30, 0x0, 0x62], 0x2d, [0x64, 0x5a, 0x39, 0x64, 0x62, 0x61, 0x31, 0x64]}}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, 'keyring\x00'}}]})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
getrlimit(0x5, &(0x7f0000000180))
lseek(r3, 0x0, 0x4)
sendfile(r3, r3, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

4.407147444s ago: executing program 0 (id=1045):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e08121b0cc1"], 0xb)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x20, 0x8, 0x1, '`'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x20, 0x15, 0xa, "79f0999dee4c9fcdb1fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x20, {0x20, 0x30, "926e724af0133ef12fbb1cb87a01cc8aef1bf5ca226ce1fd17b82e9fca8a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3811}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x5, 0x7, 0x0, 0x5, 0x2}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x20, 0x13, 0x4, "55eacc5b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000380), &(0x7f00000006c0)=r2}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)

4.119239201s ago: executing program 2 (id=1046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) (fail_nth: 4)

4.117012263s ago: executing program 3 (id=1047):
r0 = gettid()
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x8080, 0x140, 0x2b}, 0x18)
getdents(r1, &(0x7f0000000140)=""/186, 0xba)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r2, &(0x7f0000000080)=""/116, 0xfffffeb2)
read(r2, &(0x7f0000000280)=""/96, 0x60)

3.753608422s ago: executing program 3 (id=1048):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x2)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x80) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3.753141108s ago: executing program 2 (id=1049):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@int=0x9, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8001"], 0x50)
flock(0xffffffffffffffff, 0x5)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x106f)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00'})
ioctl$USBDEVFS_RESET(r5, 0x5514)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.75266651s ago: executing program 4 (id=1050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0xce)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000280)={@desc={0x1, 0x0, @desc1}}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xfffffffffffffffc, 0x9, 0x200000, 0x13, 0x80000002}, 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000001000)="d6", 0xfff5}], 0x20) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfec1, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

3.639944709s ago: executing program 4 (id=1051):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) (fail_nth: 4)

3.492111325s ago: executing program 3 (id=1052):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/97, &(0x7f0000000800)=""/76})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

1.997035919s ago: executing program 1 (id=1053):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98000000130a010200000000000000000300000408000340000000030c00064000000000000000010c00064000000000000000025b00080017400a70f8504a83e29ccda7c585419cab16910e42dcbc5cb66fb2a030704455fa9201e5f055fc3a3e46d99077ea39f56349ab5f68ff4b9b853050250b184d2e51ea634cfa2b021d3889fa66c6e141eaac184c232fb8feb48d82c92f8ebf44832f000800034000000002758ba8556e3f8f07107bd3f9e37f80527d6995cbd6"], 0x98}, 0x1, 0x0, 0x0, 0x44}, 0x20000041)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.725828576s ago: executing program 2 (id=1054):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x1, {0x8001, 0x4, 0x5, 0x300}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="010029000300"/18, @ANYRES32, @ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x148, 0x1, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6ea17de4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x662}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xc4}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5ee}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}]}, @CTA_TIMEOUT_DATA={0x21, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x148}, 0x1, 0x0, 0x0, 0x24044084}, 0x885)

1.671783236s ago: executing program 2 (id=1055):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="921000000000040008001300c6075f775968d97309bc864b48682fd0205046fd42d3ac2d47ec55cab93443a81529eba47b2107ab3148d1b721642f04fc9a26915d9f2d885d03e2726caf477d92d41f4892b8c2ff9addfd68566c2b877c7f9b06ae312201b7cb094095434d5d0ffa20d4d9dfe7888d34019210e4cb45868dbad64fa16e53046cd12998e29b42e77e5f94f653e5ffa19b0aa8066e88b809357cd54dce7260536527dbf65fa45f6e555717c16f3def3cd5d7d111d69a7bfd3920a6295c169b518ffc77e4ef6875eaeb8a07ef19774024d0933b5db6528097651c9b581648c51feee9513be81c0f42b0818dce92c7ba5b245198d9bbf9448f64f0d4fc0ef77b98028c33736ce786b6452ec6c146778ffcfd63f56db24135a004b9ef7439cdfbc88463eca725456ca0147cf8fa144d7f559865a1fe27ea72134e6dead76702d019234c656fcb9f3de2554159f4456df72b1ad98e3f90c8dbcea8672469f8c76c636f2910e0c44a315511b8c8faf0883561c809008b26b82dddc49eb8885d1c7d77ef4b0bd6c6176056e4ebf441d9d8cc000000", @ANYRES32=0x0, @ANYBLOB="08002e000400000040001980140005007da8691e234232d8da0cd3c3d950294c14000500a1b8b1f3f92a57a4f3fdf80ac0d9ad47140004005b1f8b30876fac3c90d9e206b034a83c"], 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
pipe2$watch_queue(0x0, 0x80)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x1023, 0x9, 0x2, 0x20000000000, 0x7, <r1=>0xffffffffffffffff})
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000005898c120000000000009000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000b9000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) (async)
dup3(r3, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f0000000000), 0x6b4, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x28}}, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000800)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000880)=""/143}, {&(0x7f0000000940)=""/124}, {&(0x7f0000000040)=""/19}, {&(0x7f00000009c0)=""/204}, {&(0x7f0000000ac0)=""/176}, {&(0x7f00000001c0)}, {&(0x7f0000000b80)=""/210}, {&(0x7f00000003c0)=""/14}, {&(0x7f00000006c0)=""/8}, {&(0x7f0000000c80)=""/226}], 0x0, &(0x7f0000000e40)=""/51}, 0x7}, {{&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=""/84}, 0x1}, {{&(0x7f0000000fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)}, {&(0x7f0000001080)=""/63}, {&(0x7f00000010c0)=""/83}]}, 0x1000}, {{&(0x7f0000001180)=@pptp={0x18, 0x2, {0x0, @private}}, 0x0, &(0x7f0000001480)=[{&(0x7f0000001200)=""/244}, {&(0x7f0000001300)=""/115}, {&(0x7f0000001380)=""/25}, {&(0x7f00000013c0)=""/156}], 0x0, &(0x7f00000014c0)=""/129}, 0x5e}, {{&(0x7f0000001580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/10}, {&(0x7f0000001640)=""/223}], 0x0, &(0x7f0000001780)=""/227}, 0xa1d9}, {{&(0x7f0000001880)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/166}, {&(0x7f00000019c0)=""/55}, {&(0x7f0000001a00)=""/41}], 0x0, &(0x7f0000001a80)=""/121}, 0x4b4}, {{&(0x7f0000001b00)=@phonet, 0x0, &(0x7f0000002380)=[{&(0x7f0000001b80)=""/241}, {&(0x7f0000001c80)=""/208}, {&(0x7f0000001d80)=""/227}, {&(0x7f0000001e80)=""/160}, {&(0x7f0000001f40)=""/233}, {&(0x7f0000002040)=""/231}, {&(0x7f0000002140)=""/71}, {&(0x7f00000021c0)=""/166}, {&(0x7f0000002280)=""/217}], 0x0, &(0x7f0000002440)=""/41}, 0x4}], 0x1, 0x40010122, 0x0)

1.62184837s ago: executing program 4 (id=1056):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd6bb, 0x0, 0xfffffffd, 0xd0, 0x0, r0}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r9, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000027c0)="e56029", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000580)="04f2746264086ec0", 0x8}], 0x1}}], 0x2, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="030006"], 0x14)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x6, 0x0})
fanotify_init(0x1a, 0x800)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

1.587322627s ago: executing program 2 (id=1057):
capset(0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
r0 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x7, 0x5, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140))
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20)
creat(&(0x7f0000000140)='./file0\x00', 0x49)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x400000)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94)
read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
syslog(0x0, 0x0, 0x3e)

1.465681694s ago: executing program 0 (id=1058):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@generic={0x1e, "c68d0eb3dce855dacd1f0882a2f0427df816af30df4cd124f221bfab5904d433f55689a0733769c447037d4b8e94f257449080c39715b72da32ba60a34023dfd00e6e2b729e5ab6e8f56ea4a9b9051ffb5465a07200703e5e533a64e886a04d323a90befdebc32ed1f855ddf8d960f9de6187f7e69e8550577df0f3fad82"}, 0xffffffffffffff16, &(0x7f0000000140)=[{&(0x7f0000000240)="27030200000214000e00002fb96dffff1144ee163cddcb0000fffffffe827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)
r6 = dup2(r0, r0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14000010}, 0x80)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000100000014000180060001000200000008000300ac14141f0222e6b482ac368a276440201a3440109e5bfb04611c887da30a4257c33a1f335cd8151eea84d304b23172fd0db1a58992e1025e05a8516f89e9f0317fab0500970fadcfa0647758c85bc74e92a70269dd2cc5bd5ccccd536fe2fc488a108c9a77c636a07e3fdd09850285db2db824bc156805817d3d15368fc33f663c97381893e656102088081713084e4029310447cc235f36e129d74d0d5064aca233893a7d051efef9c8077ffa61de6836fd6e24b6a2d33a353d548ca8e12781c06c1b02897a5d3fc581388105239a9fc00273d5"], 0x28}, 0x1, 0xff07}, 0x2000000)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x31, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10)
io_setup(0x202, &(0x7f0000000200))
write$binfmt_format(r10, &(0x7f0000000140)='1\x00', 0x2)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
dup3(r10, r7, 0x80000)

0s ago: executing program 4 (id=1059):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
getpid() (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_elf32(r2, 0x0, 0x258)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x356, 0x1000, 0x3, 0x192b, 0x10, 0x2, {0x9, 0x5, 0x1}, {0x5, 0x6}, {0x6, 0x7, 0x1}, {0x200, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x1, 0x5, 0x6, 0x0, 0x6, 0x0, 0x10, 0x0, 0x2, 0x11})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0}) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x0, 0x1, 0x10000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4, 0x0, @loopback, @local}}}}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca})

kernel console output (not intermixed with test programs):

evice=80.ea
[  246.123052][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.131240][ T5883] usb 1-1: Product: syz
[  246.135426][ T5883] usb 1-1: Manufacturer: syz
[  246.140463][ T5883] usb 1-1: SerialNumber: syz
[  246.247603][ T5868] usb 4-1: device descriptor read/64, error -71
[  246.380022][ T5883] usb 1-1: config 0 descriptor??
[  246.389659][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  246.442728][ T5883] usb 1-1: setting power ON
[  246.447596][ T5883] dvb-usb: bulk message failed: -22 (2/0)
[  246.486615][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  246.502587][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  246.528856][ T5883] usb 1-1: media controller created
[  246.544747][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  246.565838][ T5883] usb 1-1: selecting invalid altsetting 6
[  246.574829][ T5883] usb 1-1: digital interface selection failed (-22)
[  246.606282][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  246.623013][ T5883] usb 1-1: setting power OFF
[  246.639271][ T5883] dvb-usb: bulk message failed: -22 (2/0)
[  246.646464][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  246.657418][ T5883] (NULL device *): no alternate interface
[  246.699834][   T30] audit: type=1400 audit(1773125345.565:952): avc:  denied  { bind } for  pid=8467 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  246.739084][ T5868] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  246.771193][  T976] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  246.873986][   T30] audit: type=1400 audit(1773125345.724:953): avc:  denied  { ioctl } for  pid=8467 comm="syz.1.674" path="socket:[22510]" dev="sockfs" ino=22510 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  246.900619][ T5868] usb 4-1: device descriptor read/64, error -71
[  246.931487][  T976] usb 5-1: Using ep0 maxpacket: 8
[  246.939973][  T976] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.951588][  T976] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.961787][  T976] usb 5-1: config 0 interface 0 has no altsetting 0
[  246.969104][  T976] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  246.978616][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.002039][  T976] usb 5-1: config 0 descriptor??
[  247.040732][ T5868] usb usb4-port1: attempt power cycle
[  247.423162][ T5868] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  247.445529][ T5868] usb 4-1: device descriptor read/8, error -71
[  247.456986][  T976] smartjoyplus 0003:6666:8804.0009: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0
[  247.481859][  T976] smartjoyplus 0003:6666:8804.0009: no output reports found
[  247.660211][  T976] usb 5-1: USB disconnect, device number 24
[  247.734680][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  247.766993][ T5868] usb 4-1: device descriptor read/8, error -71
[  247.883533][ T5868] usb usb4-port1: unable to enumerate USB device
[  248.299710][ T5868] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  248.786812][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  248.801017][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short
[  248.806837][ T5883] usb 1-1: USB disconnect, device number 26
[  248.849774][ T5868] usb 2-1: not running at top speed; connect to a high speed hub
[  248.868291][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  248.909237][ T5868] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  248.931705][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.951707][ T5868] usb 2-1: Product: à  
[  248.958299][ T5868] usb 2-1: Manufacturer: �
[  248.968095][ T5868] usb 2-1: SerialNumber: ᭢綼অ㳿
[  249.198010][ T5883] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  249.275787][ T5868] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  249.287265][ T5868] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  249.327745][ T5868] usb 2-1: USB disconnect, device number 21
[  249.362800][ T6441] udevd[6441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.375698][ T5883] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  249.426131][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  249.446494][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  249.463487][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.472976][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  249.576040][ T5883] usb 5-1: SerialNumber: syz
[  249.594618][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  249.610571][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.619668][ T8502] team0: Port device bond0 added
[  249.849838][ T8502] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[  249.873272][ T8502] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  250.048821][ T8508] QAT: Invalid ioctl -1070049174
[  250.055322][ T8509] QAT: Invalid ioctl 15233
[  250.071555][ T5883] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  250.083081][ T5883] usb 5-1: USB disconnect, device number 25
[  250.283746][ T8519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  250.347255][   T30] audit: type=1400 audit(1773125348.970:954): avc:  denied  { watch_reads } for  pid=8513 comm="syz.3.687" path="/138" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  250.926928][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'.
[  250.973439][ T8525] netlink: 'syz.1.691': attribute type 7 has an invalid length.
[  250.983444][ T8525] netlink: 'syz.1.691': attribute type 8 has an invalid length.
[  250.993085][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'.
[  251.075859][ T8531] binder: 8530:8531 ioctl c040583f 0 returned -22
[  251.134046][ T8525] syz_tun: entered promiscuous mode
[  251.167064][ T8525] syz_tun: left promiscuous mode
[  251.215285][ T5894] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  251.582781][ T5894] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  251.662658][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.680462][ T5894] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  251.689541][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.697494][ T5894] usb 3-1: Product: syz
[  251.701727][ T5894] usb 3-1: Manufacturer: syz
[  251.706370][ T5894] usb 3-1: SerialNumber: syz
[  251.708208][ T8536] FAULT_INJECTION: forcing a failure.
[  251.708208][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.771297][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.0.692 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.771325][ T8536] Tainted: [L]=SOFTLOCKUP
[  251.771331][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  251.771341][ T8536] Call Trace:
[  251.771347][ T8536]  <TASK>
[  251.771353][ T8536]  dump_stack_lvl+0x100/0x190
[  251.771384][ T8536]  should_fail_ex.cold+0x5/0xa
[  251.771407][ T8536]  _copy_from_user+0x2e/0xd0
[  251.771434][ T8536]  memdup_user+0x6b/0xe0
[  251.771461][ T8536]  snd_ctl_ioctl+0x739/0x1330
[  251.771482][ T8536]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  251.771507][ T8536]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  251.771531][ T8536]  ? __fget_files+0x215/0x3d0
[  251.771548][ T8536]  ? hook_file_ioctl_common+0x146/0x410
[  251.771580][ T8536]  ? selinux_file_ioctl+0x139/0x290
[  251.771599][ T8536]  ? selinux_file_ioctl+0xb4/0x290
[  251.771621][ T8536]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  251.771644][ T8536]  __x64_sys_ioctl+0x18e/0x210
[  251.771670][ T8536]  do_syscall_64+0x106/0xf80
[  251.771688][ T8536]  ? clear_bhb_loop+0x40/0x90
[  251.771710][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.771727][ T8536] RIP: 0033:0x7ff00259c799
[  251.771741][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.771758][ T8536] RSP: 002b:00007ff00349d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  251.771775][ T8536] RAX: ffffffffffffffda RBX: 00007ff002816180 RCX: 00007ff00259c799
[  251.771786][ T8536] RDX: 00002000000000c0 RSI: 00000000c4c85512 RDI: 0000000000000005
[  251.771796][ T8536] RBP: 00007ff00349d090 R08: 0000000000000000 R09: 0000000000000000
[  251.771806][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.771815][ T8536] R13: 00007ff002816218 R14: 00007ff002816180 R15: 00007ffeb55e3788
[  251.771839][ T8536]  </TASK>
[  252.519775][ T5883] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  252.598953][   T30] audit: type=1400 audit(1773125350.982:955): avc:  denied  { mount } for  pid=8539 comm="syz.4.695" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  252.719632][   T30] audit: type=1400 audit(1773125351.000:956): avc:  denied  { accept } for  pid=8539 comm="syz.4.695" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  252.742083][   T30] audit: type=1400 audit(1773125351.187:957): avc:  denied  { unmount } for  pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  252.760240][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  252.788018][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.813711][ T5883] usb 2-1: Product: syz
[  252.822961][ T5883] usb 2-1: Manufacturer: syz
[  252.827572][ T5883] usb 2-1: SerialNumber: syz
[  252.853874][ T5883] usb 2-1: config 0 descriptor??
[  253.112617][ T5883] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  253.782145][ T5894] rtl8150 3-1:1.0: couldn't find required endpoints
[  253.796333][ T5894] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  253.813004][ T5894] usb 3-1: USB disconnect, device number 23
[  254.262663][ T5894] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  254.440837][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  254.457167][ T5894] usb 3-1: not running at top speed; connect to a high speed hub
[  254.464935][ T5894] usb 3-1: too many configurations: 10, using maximum allowed: 8
[  254.504166][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  254.528505][ T5894] usb 3-1: can't read configurations, error -61
[  254.699478][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.702583][ T5894] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  254.708549][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.109143][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  255.111590][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  255.126015][ T5894] usb 3-1: not running at top speed; connect to a high speed hub
[  255.135023][ T5894] usb 3-1: too many configurations: 10, using maximum allowed: 8
[  255.591336][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  255.601882][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  255.609467][ T5894] usb 3-1: can't read configurations, error -61
[  255.616508][ T5894] usb usb3-port1: attempt power cycle
[  255.624723][ T5883] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  255.640843][ T5883] usb 2-1: USB disconnect, device number 22
[  255.653866][ T5876] usb 1-1: Using ep0 maxpacket: 16
[  255.663295][ T5876] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  255.673497][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  255.683577][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  255.705440][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  255.822680][ T5876] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  255.849915][ T5876] usb 1-1: config 0 has no interface number 0
[  255.864383][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  256.166991][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  256.167629][ T5894] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  256.176827][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  256.176867][ T5876] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  256.207879][ T5876] usb 1-1: config 0 interface 125 has no altsetting 0
[  256.216364][ T5876] usb 1-1: config 0 interface 125 has no altsetting 2
[  256.251711][ T5876] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  256.255030][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  256.309235][ T5894] usb 3-1: not running at top speed; connect to a high speed hub
[  256.317816][ T5894] usb 3-1: too many configurations: 10, using maximum allowed: 8
[  256.520860][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  256.520893][ T5894] usb 3-1: can't read configurations, error -61
[  256.562699][   T30] audit: type=1400 audit(1773125354.668:958): avc:  denied  { append } for  pid=8593 comm="syz.3.709" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  256.603832][ T8597] netlink: set zone limit has 4 unknown bytes
[  256.604510][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.604784][ T5876] usb 1-1: Product: syz
[  256.604799][ T5876] usb 1-1: Manufacturer: syz
[  256.604813][ T5876] usb 1-1: SerialNumber: syz
[  256.610839][ T5876] usb 1-1: config 0 descriptor??
[  256.614326][ T5876] usb 1-1: selecting invalid altsetting 2
[  256.658760][ T5894] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  256.688632][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  256.689063][ T5894] usb 3-1: not running at top speed; connect to a high speed hub
[  256.689096][ T5894] usb 3-1: too many configurations: 10, using maximum allowed: 8
[  256.690286][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  256.690312][ T5894] usb 3-1: can't read configurations, error -61
[  256.690518][ T5894] usb usb3-port1: unable to enumerate USB device
[  257.258198][ T5894] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  257.532395][ T5894] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  257.532434][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.544489][ T5894] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  257.544513][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.544524][ T5894] usb 2-1: Product: syz
[  257.544532][ T5894] usb 2-1: Manufacturer: syz
[  257.544541][ T5894] usb 2-1: SerialNumber: syz
[  257.659393][   T30] audit: type=1400 audit(1773125355.818:959): avc:  denied  { write } for  pid=8609 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  257.774730][ T5876] libceph: connect (1)[c::]:6789 error -101
[  257.781027][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  258.060931][ T5876] libceph: connect (1)[c::]:6789 error -101
[  258.061051][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  258.102202][  T976] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  258.220463][ T8611] ceph: No mds server is up or the cluster is laggy
[  258.305277][  T976] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  258.305304][  T976] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  258.305323][  T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  258.305347][  T976] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  258.305923][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  258.305945][  T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  258.321372][  T976] usb 5-1: string descriptor 0 read error: -22
[  258.322322][  T976] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  258.322344][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.335776][  T976] usb 5-1: config 0 descriptor??
[  258.341784][ T8617] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  258.345982][  T976] hub 5-1:0.0: bad descriptor, ignoring hub
[  258.346001][  T976] hub 5-1:0.0: probe with driver hub failed with error -5
[  258.352707][ T8583] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.705'.
[  258.383272][  T976] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19
[  258.600853][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.601142][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.994966][ T8622] befs: (nullb0): invalid magic header
[  259.240138][   T30] audit: type=1400 audit(1773125356.950:960): avc:  denied  { bind } for  pid=8616 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  259.240431][   T30] audit: type=1400 audit(1773125356.969:961): avc:  denied  { write } for  pid=8616 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  259.240696][   T30] audit: type=1400 audit(1773125357.259:962): avc:  denied  { read } for  pid=8618 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  259.240953][   T30] audit: type=1400 audit(1773125357.278:963): avc:  denied  { sqpoll } for  pid=8618 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  260.032243][   T30] audit: type=1400 audit(1773125358.007:964): avc:  denied  { ioctl } for  pid=8629 comm="syz.2.716" path="socket:[21215]" dev="sockfs" ino=21215 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  260.133882][ T8635] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  260.133919][ T8635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  260.200312][  T976] usb 1-1: USB disconnect, device number 27
[  260.321537][ T8641] netlink: 'syz.0.718': attribute type 3 has an invalid length.
[  260.345269][ T8641] netlink: 'syz.0.718': attribute type 1 has an invalid length.
[  261.250245][ T5876] usb 5-1: USB disconnect, device number 26
[  261.306491][ T5894] rtl8150 2-1:1.0: couldn't find required endpoints
[  261.314464][ T5894] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  261.507375][ T5894] usb 2-1: USB disconnect, device number 23
[  261.556667][   T30] audit: type=1400 audit(1773125359.457:965): avc:  denied  { mount } for  pid=8652 comm="syz.4.721" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  261.603103][ T8655] IPVS: set_ctl: invalid protocol: 65530 255.255.255.255:65535
[  261.611237][ T8655] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  261.634682][   T30] audit: type=1400 audit(1773125359.532:966): avc:  denied  { unmount } for  pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  261.731831][   T30] audit: type=1400 audit(1773125359.616:967): avc:  denied  { unlink } for  pid=8656 comm="syz.4.723" name="#9" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  261.851789][ T8665] netlink: 'syz.1.725': attribute type 3 has an invalid length.
[  261.859464][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'.
[  261.987185][   T30] audit: type=1400 audit(1773125359.860:968): avc:  denied  { ioctl } for  pid=8667 comm="syz.4.726" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  262.058836][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'.
[  262.237500][   T30] audit: type=1400 audit(1773125360.094:969): avc:  denied  { bind } for  pid=8678 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  262.281953][   T30] audit: type=1400 audit(1773125360.131:970): avc:  denied  { listen } for  pid=8678 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  262.442414][   T30] audit: type=1400 audit(1773125360.281:971): avc:  denied  { connect } for  pid=8678 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  262.470691][ T8692] veth1_macvtap: left promiscuous mode
[  262.528822][ T5876] kernel read not supported for file /dsp1 (pid: 5876 comm: kworker/0:5)
[  262.678787][ T8698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.709998][ T5807] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  262.884495][ T5807] usb 2-1: Using ep0 maxpacket: 32
[  262.895589][ T5807] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  262.907864][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.058210][ T5807] usb 2-1: config 0 descriptor??
[  263.075393][ T5807] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  263.623770][ T5807] gspca_vc032x: reg_r err -71
[  263.635397][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.660494][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.665858][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.672664][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.685474][ T8717] batman_adv: batadv0: Adding interface: dummy0
[  263.691986][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.697551][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.703035][ T8717] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.728383][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.733670][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.739431][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.744954][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.750351][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.755872][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.871629][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.877361][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.882712][ T8717] batman_adv: batadv0: Interface activated: dummy0
[  263.882755][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.894900][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.916113][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  263.938639][ T5807] gspca_vc032x: I2c Bus Busy Wait 00
[  264.000034][ T5807] gspca_vc032x: Unknown sensor...
[  264.012868][ T5807] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  264.023300][ T5807] usb 2-1: USB disconnect, device number 24
[  264.050903][   T30] audit: type=1400 audit(1773125361.787:972): avc:  denied  { create } for  pid=8722 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  264.256173][   T30] audit: type=1400 audit(1773125361.983:973): avc:  denied  { read } for  pid=8722 comm="syz.3.745" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  264.452995][   T30] audit: type=1400 audit(1773125362.170:974): avc:  denied  { watch_mount } for  pid=8732 comm="syz.2.747" path="/147" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  264.498430][ T8741] kernel read not supported for file /ns¿áÈEà€r‘7kjœLÎZ™øQ%#-ÓÒèÜáýÞïò§Ò«—Âe'ü… (pid: 8741 comm: syz.4.751)
[  264.553835][   T30] audit: type=1800 audit(1773125362.264:975): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.751" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="mqueue" ino=23547 res=0 errno=0
[  264.642992][ T8747] overlayfs: failed to resolve './file1/file0': -2
[  264.669543][   T30] audit: type=1400 audit(1773125362.367:976): avc:  denied  { getopt } for  pid=8746 comm="syz.1.752" lport=35582 faddr=::ffff:172.20.255.187 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  264.721734][ T8758] Invalid logical block size (4)
[  264.902804][ T8762] program syz.1.758 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.059145][   T30] audit: type=1400 audit(1773125362.657:977): avc:  denied  { mount } for  pid=8753 comm="syz.2.756" name="/" dev="autofs" ino=23595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  265.112417][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  265.283225][ T8773] FAULT_INJECTION: forcing a failure.
[  265.283225][ T8773] name failslab, interval 1, probability 0, space 0, times 0
[  265.296833][ T8773] CPU: 1 UID: 0 PID: 8773 Comm: syz.1.761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.296861][ T8773] Tainted: [L]=SOFTLOCKUP
[  265.296867][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  265.296877][ T8773] Call Trace:
[  265.296883][ T8773]  <TASK>
[  265.296890][ T8773]  dump_stack_lvl+0x100/0x190
[  265.296924][ T8773]  should_fail_ex.cold+0x5/0xa
[  265.296946][ T8773]  should_failslab+0xc2/0x120
[  265.296964][ T8773]  __kmalloc_node_noprof+0xe6/0x850
[  265.296988][ T8773]  ? qdisc_alloc+0xbb/0xb30
[  265.297005][ T8773]  ? qdisc_lookup_ops+0xf3/0x130
[  265.297031][ T8773]  qdisc_alloc+0xbb/0xb30
[  265.297049][ T8773]  ? _raw_read_unlock+0x28/0x50
[  265.297070][ T8773]  qdisc_create+0x70/0x1090
[  265.297093][ T8773]  ? do_raw_read_unlock+0x3f/0x70
[  265.297117][ T8773]  tc_modify_qdisc+0xdcf/0x2120
[  265.297144][ T8773]  ? __mutex_lock+0x26a/0x1b90
[  265.297167][ T8773]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  265.297216][ T8773]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  265.297243][ T8773]  rtnetlink_rcv_msg+0x3c9/0xe90
[  265.297265][ T8773]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  265.297292][ T8773]  ? ref_tracker_free+0x37e/0x6c0
[  265.297325][ T8773]  netlink_rcv_skb+0x159/0x420
[  265.297347][ T8773]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  265.297369][ T8773]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  265.297400][ T8773]  ? netlink_deliver_tap+0x1ae/0xcc0
[  265.297427][ T8773]  netlink_unicast+0x5aa/0x870
[  265.297451][ T8773]  ? __pfx_netlink_unicast+0x10/0x10
[  265.297483][ T8773]  netlink_sendmsg+0x8b0/0xda0
[  265.297508][ T8773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.297527][ T8773]  ? __pfx___might_fault+0x10/0x10
[  265.297561][ T8773]  ____sys_sendmsg+0x9e1/0xb70
[  265.297584][ T8773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.297608][ T8773]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.297636][ T8773]  ? __pfx__kstrtoull+0x10/0x10
[  265.297661][ T8773]  ___sys_sendmsg+0x190/0x1e0
[  265.297688][ T8773]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.297728][ T8773]  ? find_held_lock+0x2b/0x80
[  265.297768][ T8773]  __sys_sendmmsg+0x205/0x430
[  265.297790][ T8773]  ? __pfx___sys_sendmmsg+0x10/0x10
[  265.297819][ T8773]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  265.297851][ T8773]  ? fput+0x79/0x100
[  265.297871][ T8773]  ? ksys_write+0x1ac/0x250
[  265.297898][ T8773]  ? __pfx_ksys_write+0x10/0x10
[  265.297929][ T8773]  __x64_sys_sendmmsg+0x9c/0x100
[  265.297948][ T8773]  ? lockdep_hardirqs_on+0x78/0x100
[  265.297968][ T8773]  do_syscall_64+0x106/0xf80
[  265.297986][ T8773]  ? clear_bhb_loop+0x40/0x90
[  265.298010][ T8773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.298028][ T8773] RIP: 0033:0x7ff2cdf9c799
[  265.298044][ T8773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.298062][ T8773] RSP: 002b:00007ff2ceeab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  265.298079][ T8773] RAX: ffffffffffffffda RBX: 00007ff2ce215fa0 RCX: 00007ff2cdf9c799
[  265.298091][ T8773] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  265.298102][ T8773] RBP: 00007ff2ceeab090 R08: 0000000000000000 R09: 0000000000000000
[  265.298113][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.298123][ T8773] R13: 00007ff2ce216038 R14: 00007ff2ce215fa0 R15: 00007ffe65409b18
[  265.298149][ T8773]  </TASK>
[  265.991282][  T976] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  266.095086][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.765'.
[  266.173295][  T976] usb 1-1: Using ep0 maxpacket: 32
[  266.275724][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.431960][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.442768][  T976] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  266.465359][  T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.493292][  T976] usb 1-1: config 0 descriptor??
[  266.781797][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  266.788165][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  266.996899][ T8798] Invalid logical block size (4)
[  267.021470][  T976] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  267.038365][  T976] ft260 0003:0403:6030.000A: unknown main item tag 0x0
[  267.100800][ T8803] vivid-002: disconnect
[  267.112980][ T8803] netlink: 'syz.1.771': attribute type 1 has an invalid length.
[  267.125237][ T8802] vivid-002: reconnect
[  267.132967][ T8805] netlink: 'syz.4.772': attribute type 5 has an invalid length.
[  267.252319][  T976] ft260 0003:0403:6030.000A: failed to retrieve chip version
[  267.265230][  T976] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -71
[  267.292155][  T976] usb 1-1: USB disconnect, device number 28
[  267.754204][  T976] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  267.933448][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  268.096136][  T976] usb 5-1: device descriptor read/64, error -71
[  268.106986][ T5883] usb 2-1: Using ep0 maxpacket: 16
[  268.113404][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  268.124583][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0
[  268.133171][ T5883] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  268.142273][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.150270][ T5883] usb 2-1: Product: syz
[  268.154440][ T5883] usb 2-1: Manufacturer: syz
[  268.159018][ T5883] usb 2-1: SerialNumber: syz
[  268.166451][ T5883] usb 2-1: config 0 descriptor??
[  268.278148][ T5807] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  268.318323][ T8835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8835 comm=syz.0.781
[  268.357594][  T976] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  268.372085][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  268.372099][   T30] audit: type=1400 audit(1773125365.828:993): avc:  denied  { mounton } for  pid=8836 comm="syz.3.782" path="/160/file0" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  268.445077][ T5883] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  268.460836][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.476312][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.487564][ T5807] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  268.496658][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.510948][ T5807] usb 3-1: config 0 descriptor??
[  268.513003][  T976] usb 5-1: device descriptor read/64, error -71
[  268.598543][   T29] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  268.641502][  T976] usb usb5-port1: attempt power cycle
[  268.716415][ T5883] rc_core: IR keymap rc-imon-pad not found
[  268.723711][ T5883] Registered IR keymap rc-empty
[  268.728730][ T5883] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  268.742696][ T5883] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  268.760178][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.771154][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.782541][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.794713][   T29] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  268.803913][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.811905][   T29] usb 1-1: Product: syz
[  268.816214][   T29] usb 1-1: Manufacturer: syz
[  268.820810][   T29] usb 1-1: SerialNumber: syz
[  268.828292][   T29] usb 1-1: config 0 descriptor??
[  268.835652][   T29] ti_usb_3410_5052 1-1:0.0: required endpoints missing
[  268.887863][ T5883] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  268.898990][ T5883] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21
[  268.911627][ T5883] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:25> initialized
[  268.961172][ T5807] hid (null): global environment stack underflow
[  268.974275][ T5807] hid (null): unknown global tag 0xd
[  268.979702][ T5807] hid (null): unknown global tag 0xc
[  268.987489][ T5807] hid (null): unknown global tag 0xd
[  269.003207][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.004806][  T976] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  269.010498][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.025507][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.034221][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.044071][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.049259][  T976] usb 5-1: device descriptor read/8, error -71
[  269.057318][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.067968][ T5883] usb 1-1: USB disconnect, device number 29
[  269.075740][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.084261][ T5807] waltop 0003:172F:0500.000B: unknown main item tag 0x0
[  269.092067][ T5807] waltop 0003:172F:0500.000B: unexpected long global item
[  269.099486][    C0] imon 2-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 5, intf0)
[  269.109817][ T5807] waltop 0003:172F:0500.000B: probe with driver waltop failed with error -22
[  269.270498][   T29] usb 3-1: USB disconnect, device number 28
[  269.314750][  T976] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  269.328862][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  269.337095][ T5883] usb 2-1: USB disconnect, device number 25
[  269.341008][  T976] usb 5-1: device descriptor read/8, error -71
[  269.465388][  T976] usb usb5-port1: unable to enumerate USB device
[  270.922782][ T5894] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  271.197951][ T5894] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  271.206560][ T5894] usb 3-1: config 0 has no interface number 0
[  271.212958][ T5894] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  271.224776][ T5894] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.234760][ T5894] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.252096][ T5894] usb 3-1: config 0 interface 1 has no altsetting 0
[  271.258722][ T5894] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  271.627757][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.647827][ T5894] usb 3-1: config 0 descriptor??
[  271.698459][   T29] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  271.706208][  T976] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  271.764458][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.772676][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.820422][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.830648][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.858907][  T976] usb 1-1: device descriptor read/64, error -71
[  271.882728][   T29] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  271.898089][   T29] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  271.908063][   T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  271.919027][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.932723][ T8861] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  271.943717][   T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  272.063812][  T106] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.075568][  T106] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.103113][  T106] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.112043][  T106] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.150229][  T976] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  272.362407][ T5894] uclogic 0003:145F:0212.000C: pen parameters not found
[  272.369467][ T5894] uclogic 0003:145F:0212.000C: interface is invalid, ignoring
[  272.478761][  T976] usb 1-1: device descriptor read/64, error -71
[  272.618405][  T976] usb usb1-port1: attempt power cycle
[  272.655802][ T5894] usb 3-1: USB disconnect, device number 29
[  273.023884][  T976] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  273.067204][  T976] usb 1-1: device descriptor read/8, error -71
[  273.117038][   T30] audit: type=1400 audit(1773125370.272:994): avc:  denied  { connect } for  pid=8888 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  273.334905][   T30] audit: type=1400 audit(1773125370.468:995): avc:  denied  { bind } for  pid=8892 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  273.366591][  T976] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  273.375662][   T30] audit: type=1400 audit(1773125370.497:996): avc:  denied  { listen } for  pid=8894 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  273.398579][  T976] usb 1-1: device descriptor read/8, error -71
[  273.475674][   T30] audit: type=1400 audit(1773125370.497:997): avc:  denied  { accept } for  pid=8894 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  273.527230][  T976] usb usb1-port1: unable to enumerate USB device
[  274.348600][ T8904] overlayfs: failed lookup in lower (newroot/156, name='file0', err=-40): overlapping layers
[  274.708884][ T8910] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[  276.963924][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'.
[  276.976239][ T8943] comedi comedi1: rti800: a I/O base address must be specified
[  277.213238][ T5883] usb 4-1: USB disconnect, device number 36
[  277.236910][   T30] audit: type=1400 audit(1773125374.126:998): avc:  denied  { write } for  pid=8947 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  277.397447][ T8954] xt_l2tp: missing protocol rule (udp|l2tpip)
[  277.436295][ T8954] 9p: Bad value for 'wfdno'
[  277.472146][ T8954] netlink: 'syz.1.815': attribute type 1 has an invalid length.
[  277.856056][ T8961] netlink: 'syz.4.817': attribute type 1 has an invalid length.
[  277.983983][ T5894] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  278.165447][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  278.194305][ T5894] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  278.213551][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.242410][ T5894] usb 2-1: Product: syz
[  278.260982][ T5894] usb 2-1: Manufacturer: syz
[  278.268526][ T8972] fuse: Bad value for 'fd'
[  278.273608][ T5894] usb 2-1: SerialNumber: syz
[  278.332192][ T5894] usb 2-1: config 0 descriptor??
[  278.377449][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  278.412458][   T30] audit: type=1400 audit(1773125375.212:999): avc:  denied  { mount } for  pid=8970 comm="syz.0.822" name="/" dev="ocfs2_dlmfs" ino=25376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  278.417994][ T5894] pctv452e: pctv452e_power_ctrl: 1
[  278.417994][ T5894] 
[  278.589040][ T5894] usb 2-1: selecting invalid altsetting 3
[  278.633205][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  278.633205][ T5894] 
[  278.684058][ T5894] dvb-usb: bulk message failed: -22 (5/0)
[  278.800629][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  278.817637][ T5894] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  278.826154][ T5894] usb 2-1: media controller created
[  278.832016][ T5894] dvb-usb: bulk message failed: -22 (8/0)
[  278.843894][ T5894] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  278.861076][ T5894] dvb-usb: MAC address reading failed.
[  279.333338][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  279.423375][ T5894] DVB: Unable to find symbol stb0899_attach()
[  279.437839][ T8985] syzkaller1: entered promiscuous mode
[  279.443535][ T5894] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  279.457752][ T8985] syzkaller1: entered allmulticast mode
[  279.687740][ T8995] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003
[  280.143269][ T5894] rc_core: IR keymap rc-tt-1500 not found
[  280.167971][ T5894] Registered IR keymap rc-empty
[  280.189204][ T5894] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  280.213579][ T5894] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input22
[  280.243783][ T5894] dvb-usb: schedule remote query interval to 100 msecs.
[  280.272574][ T5894] pctv452e: pctv452e_power_ctrl: 0
[  280.272574][ T5894] 
[  280.292734][ T5894] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  280.310950][ T5894] usb 2-1: USB disconnect, device number 27
[  280.446282][ T5894] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  280.533053][ T9009] syzkaller0: entered promiscuous mode
[  280.551216][ T9009] syzkaller0: entered allmulticast mode
[  280.744631][ T5883] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  280.768801][   T30] audit: type=1400 audit(1773125377.419:1000): avc:  denied  { create } for  pid=9008 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  280.956352][ T5883] usb 3-1: device descriptor read/64, error -71
[  281.265610][ T5883] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  281.289503][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.835'.
[  281.321259][   T30] audit: type=1400 audit(1773125377.953:1001): avc:  denied  { watch } for  pid=9021 comm="syz.3.834" path="/165/file0" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  281.421520][ T5883] usb 3-1: device descriptor read/64, error -71
[  281.431517][   T30] audit: type=1400 audit(1773125377.953:1002): avc:  denied  { watch_sb watch_reads } for  pid=9021 comm="syz.3.834" path="/165/file0" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  281.526061][   T30] audit: type=1400 audit(1773125378.140:1003): avc:  denied  { lock } for  pid=9026 comm="syz.0.837" path="socket:[24297]" dev="sockfs" ino=24297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.550535][ T5883] usb usb3-port1: attempt power cycle
[  281.645507][   T30] audit: type=1400 audit(1773125378.140:1004): avc:  denied  { setopt } for  pid=9026 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.917466][ T5883] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  281.982998][ T5883] usb 3-1: device descriptor read/8, error -71
[  282.859669][ T5883] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  282.916706][ T5883] usb 3-1: device descriptor read/8, error -71
[  282.947687][   T30] audit: type=1400 audit(1773125379.449:1005): avc:  denied  { bind } for  pid=9050 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  283.108422][ T5883] usb usb3-port1: unable to enumerate USB device
[  283.917081][ T5894] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  284.098024][ T5894] usb 5-1: Using ep0 maxpacket: 32
[  284.125121][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.140685][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.446873][ T5894] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  284.475432][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.494359][ T5894] usb 5-1: config 0 descriptor??
[  284.530428][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'.
[  284.600467][ T9068] netlink: 'syz.1.848': attribute type 7 has an invalid length.
[  284.608141][ T9068] netlink: 'syz.1.848': attribute type 8 has an invalid length.
[  284.718880][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'.
[  284.938180][   T30] audit: type=1400 audit(1773125381.330:1006): avc:  denied  { write } for  pid=9071 comm="syz.2.850" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  284.938241][ T9073] random: crng reseeded on system resumption
[  285.001620][ T9060] trusted_key: encrypted_key: master key parameter 'õõÿUkW,1¯ñEGRÓo+‰õTœ¬Õ)&GpŽü³¯ËËt•Í%a2Å•­–*š8m%–[encrypted' is invalid
[  285.059124][ T9073] sctp: [Deprecated]: syz.2.850 (pid 9073) Use of int in max_burst socket option deprecated.
[  285.059124][ T9073] Use struct sctp_assoc_value instead
[  285.081328][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.216837][ T5894] usbhid 5-1:0.0: can't add hid device: -71
[  285.231058][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  285.238917][   T30] audit: type=1400 audit(1773125381.330:1007): avc:  denied  { open } for  pid=9071 comm="syz.2.850" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  285.345571][ T5894] usb 5-1: USB disconnect, device number 31
[  285.384832][   T30] audit: type=1400 audit(1773125381.751:1008): avc:  denied  { audit_read } for  pid=9082 comm="syz.0.852" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  285.433823][ T9083] bond3: entered promiscuous mode
[  285.455096][ T9083] macvlan2: entered promiscuous mode
[  285.460875][ T9083] macvlan2: entered allmulticast mode
[  285.472485][ T9083] bond3: (slave macvlan2): Opening slave failed
[  287.309283][   T30] audit: type=1400 audit(1773125383.538:1009): avc:  denied  { setopt } for  pid=9099 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  287.582672][ T5894] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  287.715832][ T9118] lo speed is unknown, defaulting to 1000
[  287.722202][ T9118] lo speed is unknown, defaulting to 1000
[  287.728958][ T9118] lo speed is unknown, defaulting to 1000
[  287.738229][ T9118] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  287.752075][ T9118] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  287.769478][ T9118] lo speed is unknown, defaulting to 1000
[  287.776443][ T9118] lo speed is unknown, defaulting to 1000
[  287.783075][ T9118] lo speed is unknown, defaulting to 1000
[  287.789793][ T9118] lo speed is unknown, defaulting to 1000
[  287.796854][ T9118] lo speed is unknown, defaulting to 1000
[  287.954354][ T5894] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  287.963496][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.971692][ T5894] usb 5-1: Product: syz
[  287.975991][ T5894] usb 5-1: Manufacturer: syz
[  287.980817][ T5894] usb 5-1: SerialNumber: syz
[  287.991170][ T5894] usb 5-1: config 0 descriptor??
[  288.023496][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub
[  288.038872][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5
[  288.208719][ T9127] netlink: 'syz.1.862': attribute type 10 has an invalid length.
[  288.245864][ T5894] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  288.270133][ T9130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.863'.
[  288.273775][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  288.344600][ T9132] netlink: 'syz.1.862': attribute type 10 has an invalid length.
[  288.372988][ T5894] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  288.382006][ T9127] team0: Port device netdevsim0 added
[  288.469596][ T5894] usb 5-1: media controller created
[  288.475153][ T9133] 9p: Bad value for 'wfdno'
[  288.486263][ T9132] team0: Port device netdevsim0 removed
[  288.530737][ T9132] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  289.079453][   T30] audit: type=1400 audit(1773125384.707:1010): avc:  denied  { ioctl } for  pid=9123 comm="syz.2.863" path="socket:[26705]" dev="sockfs" ino=26705 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  289.126104][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  289.264972][   T30] audit: type=1400 audit(1773125385.371:1011): avc:  denied  { write } for  pid=9134 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  289.313403][   T30] audit: type=1400 audit(1773125385.371:1012): avc:  denied  { accept } for  pid=9134 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  289.366446][   T30] audit: type=1400 audit(1773125385.381:1013): avc:  denied  { read } for  pid=9134 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  289.434360][ T5894] DVB: Unable to find symbol dib7000p_attach()
[  289.440536][ T5894] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  290.392309][   T30] audit: type=1400 audit(1773125385.633:1014): avc:  denied  { kexec_image_load } for  pid=9141 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  290.448279][ T5894] rc_core: IR keymap rc-dib0700-rc5 not found
[  290.454439][ T5894] Registered IR keymap rc-empty
[  290.466780][ T5894] dvb-usb: could not initialize remote control.
[  290.482684][ T5894] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  290.648387][ T5894] usb 5-1: USB disconnect, device number 32
[  290.808898][ T9163] netlink: 'syz.2.873': attribute type 3 has an invalid length.
[  290.888222][ T5894] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  290.902310][ T9163] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  291.757426][ T5876] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  292.204342][ T9175] program syz.2.874 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.618368][ T5876] usb 5-1: Using ep0 maxpacket: 32
[  292.618400][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.637998][ T5876] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  293.300267][ T9186] infiniband syz2: set down
[  293.304800][ T9186] infiniband syz2: added ipvlan0
[  293.724276][ T9186] RDS/IB: syz2: added
[  293.728312][ T9186] smc: adding ib device syz2 with port count 1
[  293.735065][ T9186] smc:    ib device syz2 port 1 has no pnetid
[  293.930069][   T30] audit: type=1400 audit(1773125389.207:1015): avc:  denied  { read } for  pid=9184 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  294.080643][ T5876] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  294.090559][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.238519][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.270014][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0
[  294.291951][   T30] audit: type=1400 audit(1773125389.431:1016): avc:  denied  { bind } for  pid=9182 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  294.348723][ T5876] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  294.380973][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.394006][ T5876] usb 5-1: Product: syz
[  294.402575][ T5876] usb 5-1: Manufacturer: syz
[  294.409072][ T5876] usb 5-1: SerialNumber: syz
[  294.422631][ T5876] usb 5-1: config 0 descriptor??
[  294.531212][ T5883] IPVS: starting estimator thread 0...
[  294.562724][    T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  294.602382][ T5876] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  294.632551][ T5876] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  294.640468][ T9200] IPVS: using max 81 ests per chain, 194400 per kthread
[  294.671264][ T5876] usb 5-1: USB disconnect, device number 33
[  294.733879][    T9] usb 3-1: Using ep0 maxpacket: 32
[  294.758092][    T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40
[  294.772829][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.833201][    T9] usb 3-1: Product: syz
[  294.846821][    T9] usb 3-1: Manufacturer: syz
[  294.860563][    T9] usb 3-1: SerialNumber: syz
[  295.216937][ T5876] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  295.316318][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.385920][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.407200][ T5876] usb 1-1: device descriptor read/64, error -71
[  295.450713][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.513249][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'.
[  295.525571][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.534274][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.600884][    T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  295.609783][    T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  295.663713][ T5876] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  295.689959][    T9] usb 3-1: USB disconnect, device number 34
[  295.813348][ T5876] usb 1-1: device descriptor read/64, error -71
[  295.931141][ T5876] usb usb1-port1: attempt power cycle
[  296.037853][ T5868] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  296.433374][ T5876] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  296.441024][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.451247][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  296.462804][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.645539][ T9227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  296.654362][ T9227] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  296.663653][ T9227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  296.876091][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.877063][ T5876] usb 1-1: device descriptor read/8, error -71
[  296.930497][ T5868] usb 2-1: config 0 descriptor??
[  296.947739][ T5868] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  297.181982][ T5876] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  297.200631][ T9232] overlayfs: failed to resolve 'mask=MAY_WRITE': -2
[  297.218338][ T9231] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  297.235740][ T5876] usb 1-1: device descriptor read/8, error -71
[  297.342268][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.353485][ T5876] usb usb1-port1: unable to enumerate USB device
[  297.373988][   T29] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  297.524178][   T30] audit: type=1400 audit(1773125393.099:1017): avc:  denied  { ioctl } for  pid=9234 comm="syz.4.891" path="socket:[27025]" dev="sockfs" ino=27025 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  297.673629][   T29] usb 3-1: Using ep0 maxpacket: 16
[  297.682490][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.717347][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.729590][   T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  297.748131][   T29] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  297.768186][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.788262][   T29] usb 3-1: config 0 descriptor??
[  297.873617][ T9239] openvswitch: netlink: IP tunnel dst address not specified
[  297.989137][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'.
[  298.034438][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.302428][ T9246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.311698][ T9246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.648730][ T9228] [U] 
[  298.666773][   T29] usbhid 3-1:0.0: can't add hid device: -71
[  298.672887][   T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  298.749175][   T29] usb 3-1: USB disconnect, device number 35
[  299.071657][ T9254] FAULT_INJECTION: forcing a failure.
[  299.071657][ T9254] name failslab, interval 1, probability 0, space 0, times 0
[  299.087327][ T9253] netlink: 'syz.4.894': attribute type 12 has an invalid length.
[  299.098993][   T30] audit: type=1400 audit(1773125394.577:1018): avc:  denied  { append } for  pid=9255 comm="syz.3.896" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  299.127078][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.0.895 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.127101][ T9254] Tainted: [L]=SOFTLOCKUP
[  299.127108][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.127116][ T9254] Call Trace:
[  299.127122][ T9254]  <TASK>
[  299.127128][ T9254]  dump_stack_lvl+0x100/0x190
[  299.127158][ T9254]  should_fail_ex.cold+0x5/0xa
[  299.127180][ T9254]  should_failslab+0xc2/0x120
[  299.127197][ T9254]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  299.127220][ T9254]  ? fuse_request_alloc+0x22/0x200
[  299.127240][ T9254]  ? do_file_open+0x20e/0x430
[  299.127257][ T9254]  ? do_sys_openat2+0x10d/0x1e0
[  299.127277][ T9254]  ? __x64_sys_openat+0x12d/0x210
[  299.127302][ T9254]  fuse_request_alloc+0x22/0x200
[  299.127323][ T9254]  fuse_get_req+0x74a/0xfe0
[  299.127351][ T9254]  ? __pfx_fuse_get_req+0x10/0x10
[  299.127383][ T9254]  __fuse_simple_request+0xb5/0xe70
[  299.127406][ T9254]  ? __asan_memset+0x23/0x50
[  299.127431][ T9254]  fuse_lookup_name+0x2ad/0x760
[  299.127453][ T9254]  ? __pfx_fuse_lookup_name+0x10/0x10
[  299.127472][ T9254]  ? __pfx___mutex_lock+0x10/0x10
[  299.127516][ T9254]  fuse_lookup+0x209/0x550
[  299.127536][ T9254]  ? __pfx_fuse_lookup+0x10/0x10
[  299.127553][ T9254]  ? selinux_determine_inode_label+0x1ab/0x400
[  299.127595][ T9254]  fuse_atomic_open+0x2f8/0x450
[  299.127618][ T9254]  atomic_open+0x179/0x430
[  299.127639][ T9254]  ? __pfx_fuse_atomic_open+0x10/0x10
[  299.127660][ T9254]  lookup_open.isra.0+0x46b/0x11b0
[  299.127690][ T9254]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  299.127720][ T9254]  ? __pfx___might_resched+0x10/0x10
[  299.127740][ T9254]  ? mnt_get_write_access+0x52/0x2f0
[  299.127771][ T9254]  ? __pfx_down_write+0x10/0x10
[  299.127792][ T9254]  ? mnt_get_write_access+0x1e9/0x2f0
[  299.127822][ T9254]  path_openat+0x2291/0x31a0
[  299.127849][ T9254]  ? __pfx_path_openat+0x10/0x10
[  299.127884][ T9254]  do_file_open+0x20e/0x430
[  299.127905][ T9254]  ? __pfx_do_file_open+0x10/0x10
[  299.127943][ T9254]  ? alloc_fd+0x476/0x790
[  299.127965][ T9254]  ? do_getname+0x191/0x390
[  299.127988][ T9254]  do_sys_openat2+0x10d/0x1e0
[  299.128009][ T9254]  ? __pfx_do_sys_openat2+0x10/0x10
[  299.128029][ T9254]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  299.128052][ T9254]  ? __fget_files+0x21f/0x3d0
[  299.128075][ T9254]  __x64_sys_openat+0x12d/0x210
[  299.128098][ T9254]  ? __pfx___x64_sys_openat+0x10/0x10
[  299.128121][ T9254]  ? ksys_write+0x1ac/0x250
[  299.128154][ T9254]  do_syscall_64+0x106/0xf80
[  299.128173][ T9254]  ? clear_bhb_loop+0x40/0x90
[  299.128196][ T9254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.128214][ T9254] RIP: 0033:0x7ff00259c799
[  299.128228][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.128249][ T9254] RSP: 002b:00007ff0034be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  299.128266][ T9254] RAX: ffffffffffffffda RBX: 00007ff002816090 RCX: 00007ff00259c799
[  299.128276][ T9254] RDX: 0000000000105842 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  299.128286][ T9254] RBP: 00007ff0034be090 R08: 0000000000000000 R09: 0000000000000000
[  299.128296][ T9254] R10: 00000000000000a9 R11: 0000000000000246 R12: 0000000000000002
[  299.128306][ T9254] R13: 00007ff002816128 R14: 00007ff002816090 R15: 00007ffeb55e3788
[  299.128331][ T9254]  </TASK>
[  299.169410][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.964102][ T5868] pwc: send_video_command error -71
[  299.970731][ T5868] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  300.003588][ T5868] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  300.044215][ T5868] usb 2-1: USB disconnect, device number 28
[  300.174738][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.272758][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.321235][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  300.330825][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  300.353043][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.898'.
[  300.395092][ T9269] geneve2: entered promiscuous mode
[  300.421996][ T9269] geneve2: entered allmulticast mode
[  300.452473][ T5868] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  300.486084][   T30] audit: type=1400 audit(1773125395.868:1019): avc:  denied  { load_policy } for  pid=9283 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  300.515428][ T9285] SELinux: failed to load policy
[  300.665540][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.712422][   T30] audit: type=1400 audit(1773125396.092:1020): avc:  denied  { getopt } for  pid=9286 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  300.759104][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.774211][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.884634][ T9290] ufs: You didn't specify the type of your ufs filesystem
[  300.884634][ T9290] 
[  300.884634][ T9290] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  300.884634][ T9290] 
[  300.884634][ T9290] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  300.916204][ T9290] ufs: ufstype=old is supported read-only
[  300.924557][ T9290] ufs: ufs_fill_super(): bad magic number
[  301.158024][ T5807] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  301.171085][ T5868] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  301.198915][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.220348][ T5868] usb 2-1: config 0 descriptor??
[  301.242533][ T9292] 9p: Could not find request transport: >’å‰;úfd
[  301.308210][ T5807] usb 3-1: device descriptor read/64, error -71
[  301.428415][   T30] audit: type=1400 audit(1773125396.757:1021): avc:  denied  { connect } for  pid=9270 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  301.468229][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.779774][ T5807] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  301.855544][ T5868] hid_parser_main: 108 callbacks suppressed
[  301.855601][ T5868] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  302.001509][ T5807] usb 3-1: device descriptor read/64, error -71
[  302.466446][ T9298] ptrace attach of "./syz-executor exec"[9299] was attempted by "./syz-executor exec"[9298]
[  302.948333][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.957350][ T5868] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  303.029671][ T5868] cp2112 0003:10C4:EA90.000D: error requesting version
[  303.050707][ T5868] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71
[  303.061017][ T5807] usb usb3-port1: attempt power cycle
[  303.089283][ T5868] usb 2-1: USB disconnect, device number 29
[  303.316417][ T9307] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1935764794 (3871529588 ns) > initial count (1077952576 ns). Using initial count to start timer.
[  304.003151][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.052045][ T9307] kvm: Disabled LAPIC found during irq injection
[  304.066169][ T5807] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  304.097924][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.289928][ T5807] usb 3-1: device not accepting address 38, error -71
[  304.403974][ T9321] netlink: 184 bytes leftover after parsing attributes in process `syz.0.916'.
[  305.102315][ T5868] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  305.213415][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.247960][   T30] audit: type=1400 audit(1773125400.330:1022): avc:  denied  { map } for  pid=9328 comm="syz.0.918" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  305.285859][ T5868] usb 2-1: Using ep0 maxpacket: 16
[  305.300197][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short
[  305.328395][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.418559][ T9337] netlink: zone id is out of range
[  305.423722][ T9337] netlink: zone id is out of range
[  305.428853][ T9337] netlink: zone id is out of range
[  305.434010][ T9337] netlink: zone id is out of range
[  305.439139][ T9337] netlink: zone id is out of range
[  305.926144][ T5868] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  306.012054][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 256, setting to 64
[  306.043724][   T30] audit: type=1400 audit(1773125400.424:1023): avc:  denied  { read } for  pid=9332 comm="syz.0.919" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  306.150624][ T5868] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  306.160679][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.184812][ T5868] usb 2-1: Product: syz
[  306.192608][ T5868] usb 2-1: Manufacturer: syz
[  306.243878][   T30] audit: type=1400 audit(1773125400.424:1024): avc:  denied  { open } for  pid=9332 comm="syz.0.919" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  306.247091][ T5868] usb 2-1: SerialNumber: syz
[  306.334131][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.359908][   T30] audit: type=1400 audit(1773125400.424:1025): avc:  denied  { ioctl } for  pid=9332 comm="syz.0.919" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  306.671636][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.706364][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.775851][ T5868] usb 2-1: USB disconnect, device number 30
[  306.945472][ T6442] udevd[6442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.005039][   T29] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  307.198991][   T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  307.219887][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.232492][   T29] usb 1-1: config 0 descriptor??
[  307.261838][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.538465][ T9360] rtc_cmos 00:00: Alarms can be up to one day in the future
[  307.644015][ T5930] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  307.686530][ T9362] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[  307.695173][   T30] audit: type=1400 audit(1773125402.613:1026): avc:  denied  { create } for  pid=9361 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  307.734147][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.752567][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.765953][   T30] audit: type=1400 audit(1773125402.613:1027): avc:  denied  { write } for  pid=9361 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  307.770886][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.793166][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.801516][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.810394][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.817603][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.824752][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.837213][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.844827][   T29] logitech 0003:046D:C24F.000E: unknown main item tag 0x0
[  307.846642][   T30] audit: type=1400 audit(1773125402.735:1028): avc:  denied  { append } for  pid=9361 comm="syz.2.926" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  307.852250][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  307.879931][ T9365] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  307.886845][   T29] logitech 0003:046D:C24F.000E: unexpected long global item
[  307.907010][   T29] logitech 0003:046D:C24F.000E: parse failed
[  307.907087][   T29] logitech 0003:046D:C24F.000E: probe with driver logitech failed with error -22
[  307.921475][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.921501][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  307.921539][ T5930] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  307.921559][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.924010][ T5930] usb 2-1: config 0 descriptor??
[  307.954184][ T9365] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  307.954205][ T9365] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  308.363130][ T5930] cypress 0003:04B4:0001.000F: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0
[  308.615770][ T5930] usb 2-1: USB disconnect, device number 31
[  308.948874][ T9375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  309.068051][   T30] audit: type=1400 audit(1773125403.782:1029): avc:  denied  { open } for  pid=9372 comm="syz.4.928" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  309.146678][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b509400: rx timeout, send abort
[  309.260498][   T30] audit: type=1400 audit(1773125403.829:1030): avc:  denied  { ioctl } for  pid=9372 comm="syz.4.928" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  309.286134][   T30] audit: type=1400 audit(1773125403.997:1031): avc:  denied  { read } for  pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  309.614543][ T9381] netlink: 27 bytes leftover after parsing attributes in process `syz.4.931'.
[  309.666718][ T5876] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  309.690307][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b509400: abort rx timeout. Force session deactivation
[  309.720046][ T5807] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  309.808256][ T5930] net_ratelimit: 4 callbacks suppressed
[  309.808274][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.843164][ T5876] usb 4-1: Using ep0 maxpacket: 8
[  309.849972][ T5876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  309.857966][ T5876] usb 4-1: config 0 has no interface number 0
[  309.869737][ T5876] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.891199][ T5876] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  309.912544][ T5807] usb 2-1: Using ep0 maxpacket: 8
[  309.922415][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  309.941066][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.045102][ T5807] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  310.085112][ T5883] usb 1-1: USB disconnect, device number 38
[  310.100191][ T5876] usb 4-1: config 0 descriptor??
[  310.166761][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.277024][ T5876] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  310.297295][ T5807] usb 2-1: Product: syz
[  310.307008][ T5807] usb 2-1: Manufacturer: syz
[  310.322626][ T5807] usb 2-1: SerialNumber: syz
[  310.337338][ T5807] usb 2-1: config 0 descriptor??
[  310.429617][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.471163][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'.
[  310.519564][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.519939][ T5930] usb 4-1: USB disconnect, device number 38
[  310.950981][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.958160][ T5807] msi2500 2-1:0.0: Registered as swradio24
[  310.989761][ T5807] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  311.207129][ T5876] usb 2-1: USB disconnect, device number 32
[  311.344858][ T5807] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  311.427897][ T9412] xt_hashlimit: size too large, truncated to 1048576
[  311.463882][ T9413] geneve3: entered promiscuous mode
[  311.469118][ T9413] geneve3: entered allmulticast mode
[  311.581539][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  311.594093][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  311.913954][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  312.024723][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  312.056366][ T5807] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  312.066102][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.074599][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.138932][ T5807] usb 4-1: config 0 descriptor??
[  312.418725][ T5807] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  313.164907][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.374415][ T5807] usb 4-1: USB disconnect, device number 39
[  313.502518][ T9442] fuse: Bad value for 'user_id'
[  313.507597][ T9442] fuse: Bad value for 'user_id'
[  314.571930][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.584007][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.613810][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  314.613820][   T30] audit: type=1400 audit(1773125408.385:1039): avc:  denied  { ioctl } for  pid=9419 comm="syz.1.938" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  315.411624][   T30] audit: type=1326 audit(1773125409.844:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.3.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7805d9c799 code=0x0
[  315.463397][ T9459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=9459 comm=syz.2.946
[  315.843334][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.857648][   T30] audit: type=1400 audit(1773125410.153:1041): avc:  denied  { read write } for  pid=9464 comm="syz.4.948" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  316.260133][   T30] audit: type=1400 audit(1773125410.153:1042): avc:  denied  { open } for  pid=9464 comm="syz.4.948" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  316.296984][ T5868] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  316.423692][ T9473] netlink: 'syz.2.950': attribute type 12 has an invalid length.
[  316.455987][ T9473] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  316.463837][ T9473] netlink: 148 bytes leftover after parsing attributes in process `syz.2.950'.
[  316.486526][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  316.499664][ T5868] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.690949][ T9473] netlink: 'syz.2.950': attribute type 2 has an invalid length.
[  316.700561][ T9473] netlink: 'syz.2.950': attribute type 3 has an invalid length.
[  316.748201][ T9473] netlink: 11 bytes leftover after parsing attributes in process `syz.2.950'.
[  316.772400][ T5868] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.787363][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0
[  316.793975][ T5868] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  316.816487][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.892986][ T5868] usb 1-1: config 0 descriptor??
[  316.925656][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.130767][ T9484] tmpfs: Bad value for 'mpol'
[  317.321184][ T9489] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  317.345550][ T9489] netlink: 'syz.2.956': attribute type 1 has an invalid length.
[  317.569227][ T5868] smartjoyplus 0003:6666:8804.0011: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.0-1/input0
[  317.660420][ T5868] smartjoyplus 0003:6666:8804.0011: no output reports found
[  318.126131][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.153015][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.547696][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  319.014715][ T5868] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  319.259186][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.294089][ T5894] usb 1-1: USB disconnect, device number 39
[  319.491096][ T5868] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  319.505439][ T5868] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.563186][ T5868] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  320.141191][ T9521] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  320.206177][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.214200][ T5868] usb 5-1: Product: syz
[  320.218435][ T5868] usb 5-1: Manufacturer: syz
[  320.224596][ T5868] usb 5-1: SerialNumber: syz
[  320.346017][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.708891][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.950617][ T9537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.016849][   T30] audit: type=1400 audit(1773125415.083:1043): avc:  denied  { ioctl } for  pid=9534 comm="syz.2.966" path="socket:[28727]" dev="sockfs" ino=28727 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  321.107687][   T30] audit: type=1400 audit(1773125415.168:1044): avc:  denied  { connect } for  pid=9534 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  321.360011][   T30] audit: type=1400 audit(1773125415.401:1045): avc:  denied  { append } for  pid=9541 comm="syz.1.968" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  321.394547][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.457083][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.025147][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  322.194594][    T9] usb 1-1: Using ep0 maxpacket: 16
[  322.201094][    T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  322.211513][    T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  322.222620][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  322.231600][    T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  322.241426][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.264192][    T9] usb 1-1: Product: syz
[  322.275059][    T9] usb 1-1: Manufacturer: syz
[  322.289912][    T9] usb 1-1: SerialNumber: syz
[  322.307228][    T9] usb 1-1: config 0 descriptor??
[  322.419932][ T5868] rtl8150 5-1:1.0: couldn't find required endpoints
[  322.427154][ T5868] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  322.464657][ T5868] usb 5-1: USB disconnect, device number 34
[  322.569565][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.570183][    T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26
[  322.800206][   T30] audit: type=1400 audit(1773125416.749:1046): avc:  denied  { read } for  pid=9551 comm="syz.0.970" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  322.965097][    T9] usb 1-1: USB disconnect, device number 40
[  322.971094][    C0] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  322.995624][ T5162] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  323.033027][ T5162] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  323.314895][   T30] audit: type=1400 audit(1773125417.123:1047): avc:  denied  { getopt } for  pid=9561 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  323.399793][   T30] audit: type=1400 audit(1773125417.291:1048): avc:  denied  { append } for  pid=9563 comm="syz.2.974" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  323.447207][ T9570] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  323.509278][ T5868] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  323.669537][ T5868] usb 5-1: Using ep0 maxpacket: 16
[  323.676170][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.687322][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.699046][ T5868] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  323.708228][ T5868] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  323.716353][ T5868] usb 5-1: Manufacturer: syz
[  323.722505][ T5868] usb 5-1: config 0 descriptor??
[  323.722985][ T5876] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  323.829897][ T5894] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  323.872660][ T5876] usb 4-1: device descriptor read/64, error -71
[  323.993550][ T5894] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  324.003171][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.011190][ T5894] usb 1-1: Product: syz
[  324.015478][ T5894] usb 1-1: Manufacturer: syz
[  324.020075][ T5894] usb 1-1: SerialNumber: syz
[  324.030132][ T5894] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  324.068075][   T29] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  324.129333][ T5876] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  324.298211][ T5876] usb 4-1: device descriptor read/64, error -71
[  324.416312][ T9580] siw: device registration error -23
[  324.682805][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.691263][ T5876] usb usb4-port1: attempt power cycle
[  324.827612][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.877948][ T5894] usb 1-1: USB disconnect, device number 41
[  324.979393][ T9584] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  325.069824][ T5876] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  325.408477][   T29] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  325.415772][   T29] ath9k_htc: Failed to initialize the device
[  325.469602][ T5894] usb 1-1: ath9k_htc: USB layer deinitialized
[  325.498058][ T5876] usb 4-1: device descriptor read/8, error -71
[  325.764653][ T5876] usb 4-1: new low-speed USB device number 43 using dummy_hcd
[  325.797948][ T5876] usb 4-1: device descriptor read/8, error -71
[  325.839507][   T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  325.914507][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.925268][ T5876] usb usb4-port1: unable to enumerate USB device
[  326.002561][   T29] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  326.013369][   T29] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  326.030088][   T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  326.039668][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  326.048057][   T29] usb 2-1: SerialNumber: syz
[  326.204599][ T5868] usbhid 5-1:0.0: can't add hid device: -71
[  326.210859][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  326.227126][ T5868] usb 5-1: USB disconnect, device number 35
[  326.292977][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.301898][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.365770][   T29] usb 2-1: bad CDC descriptors
[  326.382999][   T29] usb 2-1: USB disconnect, device number 33
[  326.448475][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'.
[  327.069388][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.134207][ T9612] capability: warning: `syz.1.989' uses deprecated v2 capabilities in a way that may be insecure
[  327.149353][   T30] audit: type=1400 audit(1773125420.799:1049): avc:  denied  { write } for  pid=9611 comm="syz.1.989" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  327.841419][   T30] audit: type=1400 audit(1773125421.473:1050): avc:  denied  { write } for  pid=9619 comm="syz.0.990" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  327.865861][ T9620] binder: 9619:9620 ioctl c0306201 2000000003c0 returned -14
[  327.956855][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.191084][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  328.212721][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.270396][   T30] audit: type=1400 audit(1773125421.875:1051): avc:  denied  { ioctl } for  pid=9634 comm="syz.4.996" path="socket:[28144]" dev="sockfs" ino=28144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  328.362182][ T5876] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  328.395305][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.405596][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  328.415248][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  328.424537][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  328.432628][    T9] usb 4-1: SerialNumber: syz
[  328.533130][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  328.539396][ T5876] usb 1-1: config 64 has an invalid interface number: 19 but max is 0
[  328.547835][ T5876] usb 1-1: config 64 has no interface number 0
[  328.554061][ T5876] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  328.564064][ T5876] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  328.573282][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.590783][ T5876] usb 1-1: probing VID:PID(2201:012C)   
[  328.602458][ T5876] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 02
[  328.609742][ T5876] usb 1-1: vub300 ignoring EndPoint(0) 02
[  328.615521][ T5876] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  328.623597][ T5876] vub300 1-1:64.19: probe with driver vub300 failed with error -22
[  328.706212][ T9609] ALSA: seq fatal error: cannot create timer (-16)
[  328.727466][    T9] usb 4-1: 0:2 : does not exist
[  328.732702][    T9] usb 4-1: unit 5 not found!
[  328.752451][    T9] usb 4-1: USB disconnect, device number 44
[  328.773540][ T6441] udevd[6441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.876804][ T5876] usb 1-1: USB disconnect, device number 42
[  329.365746][ T9652] siw: device registration error -23
[  329.405736][   T29] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  329.590362][   T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.703271][   T29] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  329.733992][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.744788][   T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  329.769394][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.781615][   T29] usb 5-1: Product: syz
[  329.912357][   T29] usb 5-1: Manufacturer: syz
[  329.917448][   T29] usb 5-1: SerialNumber: syz
[  329.934064][   T29] cdc_mbim 5-1:1.0: skipping garbage
[  330.144268][ T9648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  330.616789][ T9676] siw: device registration error -23
[  330.716953][ T9677] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  330.829454][ T9648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  330.863818][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.924976][   T29] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  330.931686][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1006'.
[  330.941890][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1006'.
[  330.947452][   T29] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  330.956887][   T12] wlan0: Trigger new scan to find an IBSS to join
[  330.964778][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.083166][ T9681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1008'.
[  331.133753][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.143495][   T29] cdc_mbim 5-1:1.0: setting tx_max = 184
[  331.144225][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.170774][   T29] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  331.184062][   T30] audit: type=1400 audit(1773125424.579:1052): avc:  denied  { nlmsg_read } for  pid=9680 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.210667][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.220118][   T29] wwan wwan0: port wwan0mbim0 attached
[  331.238254][   T30] audit: type=1400 audit(1773125424.579:1053): avc:  denied  { read } for  pid=9680 comm="syz.1.1008" path="socket:[28232]" dev="sockfs" ino=28232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.317528][ T9691] FAULT_INJECTION: forcing a failure.
[  331.317528][ T9691] name failslab, interval 1, probability 0, space 0, times 0
[  331.333821][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.2.1010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.333848][ T9691] Tainted: [L]=SOFTLOCKUP
[  331.333854][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  331.333863][ T9691] Call Trace:
[  331.333869][ T9691]  <TASK>
[  331.333876][ T9691]  dump_stack_lvl+0x100/0x190
[  331.333908][ T9691]  should_fail_ex.cold+0x5/0xa
[  331.333928][ T9691]  should_failslab+0xc2/0x120
[  331.333945][ T9691]  __kmalloc_cache_noprof+0x7a/0x6f0
[  331.333964][ T9691]  ? fscontext_alloc_log+0x4a/0x1b0
[  331.333993][ T9691]  fscontext_alloc_log+0x4a/0x1b0
[  331.334018][ T9691]  __x64_sys_fsopen+0x159/0x220
[  331.334041][ T9691]  do_syscall_64+0x106/0xf80
[  331.334060][ T9691]  ? clear_bhb_loop+0x40/0x90
[  331.334085][ T9691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.334103][ T9691] RIP: 0033:0x7fa5a7d9c799
[  331.334118][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.334134][ T9691] RSP: 002b:00007fa5a8cd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  331.334152][ T9691] RAX: ffffffffffffffda RBX: 00007fa5a8015fa0 RCX: 00007fa5a7d9c799
[  331.334162][ T9691] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100
[  331.334172][ T9691] RBP: 00007fa5a8cd2090 R08: 0000000000000000 R09: 0000000000000000
[  331.334183][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.334193][ T9691] R13: 00007fa5a8016038 R14: 00007fa5a8015fa0 R15: 00007ffdd622aab8
[  331.334216][ T9691]  </TASK>
[  331.391428][   T29] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 2e:d4:43:c6:dd:47
[  331.533386][ T9698] binder: 9696:9698 ioctl c0306201 2000000003c0 returned -14
[  331.552711][   T30] audit: type=1400 audit(1773125424.944:1054): avc:  denied  { call } for  pid=9696 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  331.582984][ T9699] bond3 (unregistering): Released all slaves
[  331.599369][ T9702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1013'.
[  331.622708][ T9702] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1013'.
[  331.631665][ T9702] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1013'.
[  331.675940][   T29] usb 5-1: USB disconnect, device number 36
[  331.696498][   T29] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  331.979819][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.070760][   T30] audit: type=1400 audit(1773125425.421:1055): avc:  denied  { append } for  pid=9703 comm="syz.4.1014" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  332.213262][   T30] audit: type=1326 audit(1773125425.514:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.1.1016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2cdf9c799 code=0x0
[  332.248869][   T29] wwan wwan0: port wwan0mbim0 disconnected
[  332.323881][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  332.330283][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  332.986485][ T9732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  333.379293][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.431414][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1020'.
[  333.446912][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1020'.
[  333.482721][   T30] audit: type=1400 audit(1773125426.740:1057): avc:  denied  { execute } for  pid=9733 comm="syz.1.1021" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  333.671185][ T9742] syzkaller0: entered promiscuous mode
[  333.685428][ T9742] syzkaller0: entered allmulticast mode
[  333.703233][ T9742] 0: reclassify loop, rule prio 0, protocol 800
[  333.857577][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'.
[  333.866513][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'.
[  334.007938][ T9750] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  334.027806][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.036286][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.044517][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.088023][   T30] audit: type=1400 audit(1773125427.254:1058): avc:  denied  { write } for  pid=9745 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  334.455252][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.536237][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.055440][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.439656][ T3582] wlan0: Trigger new scan to find an IBSS to join
[  336.541117][   T30] audit: type=1400 audit(1773125429.509:1059): avc:  denied  { name_bind } for  pid=9757 comm="syz.0.1030" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  337.313946][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.531076][ T9775] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  337.715247][ T5894] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  337.798747][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.858637][ T9785] FAULT_INJECTION: forcing a failure.
[  337.858637][ T9785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.873206][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.1.1037 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  337.873223][ T9785] Tainted: [L]=SOFTLOCKUP
[  337.873227][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  337.873232][ T9785] Call Trace:
[  337.873236][ T9785]  <TASK>
[  337.873240][ T9785]  dump_stack_lvl+0x100/0x190
[  337.873261][ T9785]  should_fail_ex.cold+0x5/0xa
[  337.873275][ T9785]  _copy_to_user+0x32/0xd0
[  337.873292][ T9785]  simple_read_from_buffer+0xcb/0x170
[  337.873310][ T9785]  proc_fail_nth_read+0x1af/0x230
[  337.873326][ T9785]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.873341][ T9785]  ? rw_verify_area+0xce/0x6d0
[  337.873355][ T9785]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.873369][ T9785]  vfs_read+0x1e4/0xb30
[  337.873386][ T9785]  ? __pfx_vfs_read+0x10/0x10
[  337.873401][ T9785]  ? __fget_files+0x215/0x3d0
[  337.873416][ T9785]  ? __fget_files+0x21f/0x3d0
[  337.873434][ T9785]  ksys_read+0x12a/0x250
[  337.873457][ T9785]  ? __pfx_ksys_read+0x10/0x10
[  337.873489][ T9785]  do_syscall_64+0x106/0xf80
[  337.873506][ T9785]  ? clear_bhb_loop+0x40/0x90
[  337.873520][ T9785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.873531][ T9785] RIP: 0033:0x7ff2cdf5cfce
[  337.873541][ T9785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  337.873552][ T9785] RSP: 002b:00007ff2ceeaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  337.873562][ T9785] RAX: ffffffffffffffda RBX: 00007ff2ceeab6c0 RCX: 00007ff2cdf5cfce
[  337.873569][ T9785] RDX: 000000000000000f RSI: 00007ff2ceeab0a0 RDI: 0000000000000004
[  337.873575][ T9785] RBP: 00007ff2ceeab090 R08: 0000000000000000 R09: 0000000000000000
[  337.873581][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.873588][ T9785] R13: 00007ff2ce216038 R14: 00007ff2ce215fa0 R15: 00007ffe65409b18
[  337.873602][ T9785]  </TASK>
[  338.064227][   T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  338.089480][ T5894] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  338.097557][ T5894] usb 5-1: config 0 has no interface number 0
[  338.110059][ T5894] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[  338.125400][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.134293][ T5894] usb 5-1: Product: syz
[  338.138821][ T5894] usb 5-1: Manufacturer: syz
[  338.143530][ T5894] usb 5-1: SerialNumber: syz
[  338.172821][ T5894] usb 5-1: config 0 descriptor??
[  338.173015][ T9788] netlink: 'syz.1.1038': attribute type 3 has an invalid length.
[  338.253845][ T9788] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  338.581138][   T29] usb 3-1: unable to get BOS descriptor or descriptor too short
[  338.596306][ T5894] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  338.604475][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.614298][   T29] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 62, changing to 7
[  338.625530][   T29] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[  338.641264][ T9790] binder: BINDER_SET_CONTEXT_MGR already set
[  338.642192][ T5894] gspca_m5602: Failed to find a sensor
[  338.653525][ T5894] ALi m5602 5-1:0.88: ALi m5602 webcam failed
[  338.661491][   T29] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  338.682152][ T9790] binder: 9789:9790 ioctl 4018620d 200000000100 returned -16
[  338.683573][ T5894] usb 5-1: USB disconnect, device number 37
[  338.697503][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.709295][   T29] usb 3-1: Product: syz
[  338.719496][   T29] usb 3-1: Manufacturer: syz
[  338.734441][   T29] usb 3-1: SerialNumber: syz
[  339.327046][ T9804] netlink: 'syz.3.1042': attribute type 3 has an invalid length.
[  339.385956][   T30] audit: type=1400 audit(1773125432.269:1060): avc:  denied  { setopt } for  pid=9780 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  339.451695][   T29] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  339.452322][ T9804] netlink: 'syz.3.1042': attribute type 1 has an invalid length.
[  339.467049][   T29] usb 3-1: 1:1 : invalid channels 0
[  339.479399][   T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  339.489472][   T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  339.501151][ T5868] net_ratelimit: 1 callbacks suppressed
[  339.501172][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.525952][ T5807] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  339.528859][   T29] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  339.545263][   T29] usb 3-1: 1:1 : invalid channels 0
[  339.552371][   T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  339.562357][   T29] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  339.614670][   T29] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  339.621087][   T29] usb 3-1: 1:1 : invalid channels 0
[  339.630361][   T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  339.799734][ T5807] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  339.819689][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.848409][   T29] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  339.863760][ T5807] usb 2-1: Product: syz
[  339.868027][ T5807] usb 2-1: Manufacturer: syz
[  339.874330][ T5807] usb 2-1: SerialNumber: syz
[  339.948998][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.964956][ T5815] Bluetooth: hci4: unexpected event for opcode 0x0c1b
[  339.968897][ T5807] usb 2-1: config 0 descriptor??
[  339.972212][   T29] usb 3-1: USB disconnect, device number 40
[  340.054320][ T5807] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  340.091284][ T9811] FAULT_INJECTION: forcing a failure.
[  340.091284][ T9811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.104799][ T9809] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  340.119496][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: syz.2.1046 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.119524][ T9811] Tainted: [L]=SOFTLOCKUP
[  340.119529][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  340.119539][ T9811] Call Trace:
[  340.119545][ T9811]  <TASK>
[  340.119552][ T9811]  dump_stack_lvl+0x100/0x190
[  340.119585][ T9811]  should_fail_ex.cold+0x5/0xa
[  340.119608][ T9811]  _copy_from_iter+0x1f4/0x1690
[  340.119637][ T9811]  ? __asan_memset+0x23/0x50
[  340.119660][ T9811]  ? __pfx__copy_from_iter+0x10/0x10
[  340.119685][ T9811]  ? __pfx___alloc_skb+0x10/0x10
[  340.119713][ T9811]  netlink_sendmsg+0x808/0xda0
[  340.119740][ T9811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.119759][ T9811]  ? __pfx___might_fault+0x10/0x10
[  340.119794][ T9811]  ____sys_sendmsg+0x9e1/0xb70
[  340.119817][ T9811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.119840][ T9811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  340.119875][ T9811]  ___sys_sendmsg+0x190/0x1e0
[  340.119902][ T9811]  ? __pfx____sys_sendmsg+0x10/0x10
[  340.119957][ T9811]  __sys_sendmsg+0x170/0x220
[  340.119977][ T9811]  ? __pfx___sys_sendmsg+0x10/0x10
[  340.120011][ T9811]  do_syscall_64+0x106/0xf80
[  340.120031][ T9811]  ? clear_bhb_loop+0x40/0x90
[  340.120053][ T9811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.120071][ T9811] RIP: 0033:0x7fa5a7d9c799
[  340.120087][ T9811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.120105][ T9811] RSP: 002b:00007fa5a8cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.120122][ T9811] RAX: ffffffffffffffda RBX: 00007fa5a8015fa0 RCX: 00007fa5a7d9c799
[  340.120134][ T9811] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  340.120145][ T9811] RBP: 00007fa5a8cd2090 R08: 0000000000000000 R09: 0000000000000000
[  340.120160][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.120171][ T9811] R13: 00007fa5a8016038 R14: 00007fa5a8015fa0 R15: 00007ffdd622aab8
[  340.120195][ T9811]  </TASK>
[  340.473065][ T5876] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  340.580936][ T9828] sctp: [Deprecated]: syz.2.1049 (pid 9828) Use of int in max_burst socket option deprecated.
[  340.580936][ T9828] Use struct sctp_assoc_value instead
[  340.629290][   T30] audit: type=1326 audit(1773125433.382:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.656336][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.675558][   T30] audit: type=1326 audit(1773125433.382:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.718369][   T30] audit: type=1326 audit(1773125433.382:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.742128][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short
[  340.750308][ T5876] usb 1-1: not running at top speed; connect to a high speed hub
[  340.759214][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.774565][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.784590][   T30] audit: type=1326 audit(1773125433.382:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.818204][   T30] audit: type=1326 audit(1773125433.382:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.844899][   T30] audit: type=1326 audit(1773125433.382:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.870138][ T5876] usb 1-1: string descriptor 0 read error: -22
[  340.876383][ T5876] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.885663][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.895504][   T30] audit: type=1326 audit(1773125433.382:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.919562][   T30] audit: type=1326 audit(1773125433.382:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  340.945044][ T5876] usb 1-1: 0:2 : does not exist
[  340.960903][ T5807] gspca_sunplus: reg_w_riv err -110
[  340.986115][    T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  341.053523][ T5883] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  341.065578][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.082385][ T5807] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  341.117587][   T30] audit: type=1326 audit(1773125433.382:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5a7d9c799 code=0x7ffc0000
[  341.224535][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.232727][    T9] usb 5-1: Using ep0 maxpacket: 32
[  341.254088][ T5883] usb 4-1: Using ep0 maxpacket: 32
[  341.259281][    T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  341.274710][    T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  341.289896][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.310595][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  341.321945][ T5883] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  341.338894][ T5883] usb 4-1: config 0 has no interface number 0
[  341.351544][ T5883] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  341.361453][    T9] usb 5-1: config 1 has no interface number 0
[  341.377033][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  341.386135][ T5883] usb 4-1: config 0 interface 89 has no altsetting 0
[  341.403644][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  341.413648][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.433683][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.526999][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  341.540596][ T5883] usb 4-1: Product: syz
[  341.552902][ T5883] usb 4-1: Manufacturer: syz
[  341.557699][ T5883] usb 4-1: SerialNumber: syz
[  341.571772][ T5883] usb 4-1: config 0 descriptor??
[  341.583610][ T5883] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  341.595237][ T5883] em28xx 4-1:0.89: Video interface 89 found:
[  341.720318][ T9830] FAULT_INJECTION: forcing a failure.
[  341.720318][ T9830] name failslab, interval 1, probability 0, space 0, times 0
[  341.733141][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.745107][ T9830] CPU: 0 UID: 0 PID: 9830 Comm: syz.4.1051 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  341.745133][ T9830] Tainted: [L]=SOFTLOCKUP
[  341.745139][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  341.745147][ T9830] Call Trace:
[  341.745152][ T9830]  <TASK>
[  341.745168][ T9830]  dump_stack_lvl+0x100/0x190
[  341.745201][ T9830]  should_fail_ex.cold+0x5/0xa
[  341.745224][ T9830]  should_failslab+0xc2/0x120
[  341.745242][ T9830]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  341.745264][ T9830]  ? security_file_alloc+0x34/0x2c0
[  341.745287][ T9830]  ? trace_kmem_cache_alloc+0xf3/0x120
[  341.745308][ T9830]  security_file_alloc+0x34/0x2c0
[  341.745331][ T9830]  init_file+0x95/0x480
[  341.745351][ T9830]  alloc_empty_file+0x73/0x1c0
[  341.745368][ T9830]  path_openat+0xe8/0x31a0
[  341.745379][ T9830]  ? kasan_save_stack+0x3f/0x50
[  341.745393][ T9830]  ? kasan_save_stack+0x30/0x50
[  341.745407][ T9830]  ? kasan_save_track+0x14/0x30
[  341.745421][ T9830]  ? __kasan_slab_alloc+0x89/0x90
[  341.745437][ T9830]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  341.745451][ T9830]  ? do_getname+0x35/0x390
[  341.745462][ T9830]  ? do_sys_openat2+0xc5/0x1e0
[  341.745475][ T9830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.745487][ T9830]  ? __pfx_path_openat+0x10/0x10
[  341.745503][ T9830]  do_file_open+0x20e/0x430
[  341.745514][ T9830]  ? __pfx_do_file_open+0x10/0x10
[  341.745534][ T9830]  ? alloc_fd+0x476/0x790
[  341.745548][ T9830]  ? do_getname+0x191/0x390
[  341.745564][ T9830]  do_sys_openat2+0x10d/0x1e0
[  341.745577][ T9830]  ? __pfx_do_sys_openat2+0x10/0x10
[  341.745589][ T9830]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  341.745604][ T9830]  ? __fget_files+0x21f/0x3d0
[  341.745617][ T9830]  __x64_sys_openat+0x12d/0x210
[  341.745630][ T9830]  ? __pfx___x64_sys_openat+0x10/0x10
[  341.745642][ T9830]  ? ksys_write+0x1ac/0x250
[  341.745662][ T9830]  do_syscall_64+0x106/0xf80
[  341.745673][ T9830]  ? clear_bhb_loop+0x40/0x90
[  341.745686][ T9830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.745696][ T9830] RIP: 0033:0x7f929cb9c799
[  341.745706][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.745717][ T9830] RSP: 002b:00007f929adee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  341.745727][ T9830] RAX: ffffffffffffffda RBX: 00007f929ce15fa0 RCX: 00007f929cb9c799
[  341.745734][ T9830] RDX: 0000000000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  341.745740][ T9830] RBP: 00007f929adee090 R08: 0000000000000000 R09: 0000000000000000
[  341.745746][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.745752][ T9830] R13: 00007f929ce16038 R14: 00007f929ce15fa0 R15: 00007ffd6d76c818
[  341.745766][ T9830]  </TASK>
[  341.749852][    T9] snd_usb_pod 5-1:1.1: set_interface failed
[  342.026317][ T9808] ipt_REJECT: ECHOREPLY no longer supported.
[  342.031834][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  342.032406][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.039678][    T9] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  342.107398][ T5876] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  342.124654][   T29] usb 2-1: USB disconnect, device number 34
[  342.128058][ T5876] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  342.186073][    T9] usb 5-1: USB disconnect, device number 38
[  342.206776][ T5876] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  342.281534][ T5876] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  342.350413][ T5876] usb 1-1: USB disconnect, device number 43
[  342.550905][ T9840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1055'.
[  342.561741][   T29] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  342.593023][ T5883] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  342.753687][ T9852] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.975205][   T29] usb 2-1: Using ep0 maxpacket: 32
[  342.984393][   T29] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  343.005516][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.022325][   T29] usb 2-1: Product: syz
[  343.030240][   T29] usb 2-1: Manufacturer: syz
[  343.038519][ T5876] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  343.046582][   T29] usb 2-1: SerialNumber: syz
[  343.075713][   T29] usb 2-1: config 0 descriptor??
[  343.090121][   T29] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  343.177783][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.188216][ T5876] usb 3-1: device descriptor read/64, error -71
[  343.327091][ T5868] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  343.455353][ T5876] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  343.605257][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  343.614380][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.638939][ T5868] usb 1-1: config 0 descriptor??
[  343.669209][ T5876] usb 3-1: device descriptor read/64, error -71
[  343.811091][ T5876] usb usb3-port1: attempt power cycle
[  344.048011][   T29] gspca_ov534_9: reg_w failed -71
[  344.113349][ T5883] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  344.113802][ T5868] hid_parser_main: 118 callbacks suppressed
[  344.113817][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.128784][ T5883] em28xx 4-1:0.89: board has no eeprom
[  344.177705][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.204219][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.219760][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.235710][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.236333][ T5883] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  344.250862][ T5883] em28xx 4-1:0.89: analog set to bulk mode.
[  344.250889][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.257025][ T6015] em28xx 4-1:0.89: Registering V4L2 extension
[  344.268437][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.271150][ T5876] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  344.277392][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.292814][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.300538][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.313307][ T5883] usb 4-1: USB disconnect, device number 45
[  344.328872][ T5868] logitech 0003:046D:C24F.0012: unknown main item tag 0x0
[  344.328872][ T5876] usb 3-1: device descriptor read/8, error -71
[  344.329847][ T5883] em28xx 4-1:0.89: Disconnecting em28xx
[  344.337338][ T5868] logitech 0003:046D:C24F.0012: unexpected long global item
[  344.342322][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.348510][ T5868] logitech 0003:046D:C24F.0012: parse failed
[  344.370520][   T29] gspca_ov534_9: Unknown sensor 0000
[  344.370588][   T29] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  344.384210][ T6015] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  344.395195][ T6015] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  344.428445][   T29] usb 2-1: USB disconnect, device number 35
[  344.471295][ T5868] logitech 0003:046D:C24F.0012: probe with driver logitech failed with error -22
[  344.502918][ T6015] em28xx 4-1:0.89: No AC97 audio processor
[  344.521841][ T6015] usb 4-1: Decoder not found
[  344.540576][ T6015] em28xx 4-1:0.89: failed to create media graph
[  344.562296][ T6015] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  344.578200][ T5876] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  344.587704][ T6015] em28xx 4-1:0.89: Registering snapshot button...
[  344.587886][ T9865] ==================================================================
[  344.602147][ T9865] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[  344.609581][ T9865] Read of size 8 at addr ffff8880391d4748 by task v4l_id/9865
[  344.617002][ T9865] 
[  344.619300][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.619315][ T9865] Tainted: [L]=SOFTLOCKUP
[  344.619319][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  344.619325][ T9865] Call Trace:
[  344.619329][ T9865]  <TASK>
[  344.619333][ T9865]  dump_stack_lvl+0x100/0x190
[  344.619351][ T9865]  print_report+0x156/0x4c9
[  344.619366][ T9865]  ? __virt_addr_valid+0x81/0x620
[  344.619382][ T9865]  ? __phys_addr+0xe8/0x180
[  344.619396][ T9865]  ? v4l2_fh_init+0x27d/0x2c0
[  344.619407][ T9865]  kasan_report+0xdf/0x1e0
[  344.619417][ T9865]  ? v4l2_fh_init+0x27d/0x2c0
[  344.619430][ T9865]  v4l2_fh_init+0x27d/0x2c0
[  344.619441][ T9865]  v4l2_fh_open+0x64/0xa0
[  344.619453][ T9865]  em28xx_v4l2_open+0x11e/0x570
[  344.619464][ T9865]  v4l2_open+0x1d2/0x490
[  344.619476][ T9865]  ? __pfx_v4l2_open+0x10/0x10
[  344.619487][ T9865]  chrdev_open+0x234/0x6a0
[  344.619498][ T9865]  ? __pfx_chrdev_open+0x10/0x10
[  344.619509][ T9865]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  344.619522][ T9865]  do_dentry_open+0x6d8/0x1660
[  344.619539][ T9865]  ? __pfx_chrdev_open+0x10/0x10
[  344.619550][ T9865]  vfs_open+0x82/0x3f0
[  344.619562][ T9865]  path_openat+0x208c/0x31a0
[  344.619575][ T9865]  ? __pfx_path_openat+0x10/0x10
[  344.619588][ T9865]  do_file_open+0x20e/0x430
[  344.619599][ T9865]  ? __pfx_do_file_open+0x10/0x10
[  344.619614][ T9865]  ? alloc_fd+0x476/0x790
[  344.619625][ T9865]  ? do_getname+0x191/0x390
[  344.619639][ T9865]  do_sys_openat2+0x10d/0x1e0
[  344.619651][ T9865]  ? __pfx_do_sys_openat2+0x10/0x10
[  344.619666][ T9865]  __x64_sys_openat+0x12d/0x210
[  344.619678][ T9865]  ? __pfx___x64_sys_openat+0x10/0x10
[  344.619692][ T9865]  ? do_user_addr_fault+0x8d6/0x12f0
[  344.619706][ T9865]  do_syscall_64+0x106/0xf80
[  344.619722][ T9865]  ? clear_bhb_loop+0x40/0x90
[  344.619738][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.619748][ T9865] RIP: 0033:0x7f6f658a7407
[  344.619758][ T9865] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  344.619769][ T9865] RSP: 002b:00007ffdd7a4ea10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  344.619779][ T9865] RAX: ffffffffffffffda RBX: 00007f6f65fa4880 RCX: 00007f6f658a7407
[  344.619786][ T9865] RDX: 0000000000000000 RSI: 00007ffdd7a4ef1c RDI: ffffffffffffff9c
[  344.619792][ T9865] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  344.619798][ T9865] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  344.619804][ T9865] R13: 00007ffdd7a4ec60 R14: 00007f6f6610b000 R15: 000055f8a906a4d8
[  344.619813][ T9865]  </TASK>
[  344.619817][ T9865] 
[  344.879898][ T9865] Allocated by task 6015:
[  344.884201][ T9865]  kasan_save_stack+0x30/0x50
[  344.888865][ T9865]  kasan_save_track+0x14/0x30
[  344.893525][ T9865]  __kasan_kmalloc+0xaa/0xb0
[  344.898093][ T9865]  em28xx_v4l2_init.cold+0x94/0x3503
[  344.903360][ T9865]  em28xx_init_extension+0x13a/0x200
[  344.908628][ T9865]  request_module_async+0x61/0x80
[  344.913633][ T9865]  process_one_work+0x9d7/0x1920
[  344.918548][ T9865]  worker_thread+0x5da/0xe40
[  344.923124][ T9865]  kthread+0x370/0x450
[  344.927170][ T9865]  ret_from_fork+0x754/0xd80
[  344.931734][ T9865]  ret_from_fork_asm+0x1a/0x30
[  344.936487][ T9865] 
[  344.938787][ T9865] Freed by task 6015:
[  344.942737][ T9865]  kasan_save_stack+0x30/0x50
[  344.947395][ T9865]  kasan_save_track+0x14/0x30
[  344.952052][ T9865]  kasan_save_free_info+0x3b/0x70
[  344.957052][ T9865]  __kasan_slab_free+0x5f/0x80
[  344.961797][ T9865]  kfree+0x1f6/0x6b0
[  344.965684][ T9865]  kref_put.isra.0+0x56/0x90
[  344.970255][ T9865]  em28xx_v4l2_init.cold+0x280/0x3503
[  344.975623][ T9865]  em28xx_init_extension+0x13a/0x200
[  344.980889][ T9865]  request_module_async+0x61/0x80
[  344.985891][ T9865]  process_one_work+0x9d7/0x1920
[  344.990804][ T9865]  worker_thread+0x5da/0xe40
[  344.995370][ T9865]  kthread+0x370/0x450
[  344.999412][ T9865]  ret_from_fork+0x754/0xd80
[  345.003978][ T9865]  ret_from_fork_asm+0x1a/0x30
[  345.008718][ T9865] 
[  345.011019][ T9865] The buggy address belongs to the object at ffff8880391d4000
[  345.011019][ T9865]  which belongs to the cache kmalloc-8k of size 8192
[  345.025052][ T9865] The buggy address is located 1864 bytes inside of
[  345.025052][ T9865]  freed 8192-byte region [ffff8880391d4000, ffff8880391d6000)
[  345.039007][ T9865] 
[  345.041306][ T9865] The buggy address belongs to the physical page:
[  345.047698][ T9865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x391d0
[  345.056444][ T9865] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  345.064914][ T9865] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  345.072444][ T9865] page_type: f5(slab)
[  345.076401][ T9865] raw: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122
[  345.084961][ T9865] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  345.093521][ T9865] head: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122
[  345.102183][ T9865] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  345.110827][ T9865] head: 00fff00000000003 ffffea0000e47401 00000000ffffffff 00000000ffffffff
[  345.119484][ T9865] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  345.128127][ T9865] page dumped because: kasan: bad access detected
[  345.134510][ T9865] page_owner tracks the page as allocated
[  345.140196][ T9865] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9828, tgid 9816 (syz.2.1049), ts 341048910265, free_ts 340959254396
[  345.162919][ T9865]  post_alloc_hook+0x153/0x170
[  345.167665][ T9865]  get_page_from_freelist+0x111d/0x3140
[  345.173188][ T9865]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  345.179060][ T9865]  new_slab+0xa6/0x6c0
[  345.183107][ T9865]  refill_objects+0x26b/0x400
[  345.187762][ T9865]  __pcs_replace_empty_main+0x1ab/0x600
[  345.193288][ T9865]  __kmalloc_cache_noprof+0x493/0x6f0
[  345.198637][ T9865]  audit_log_d_path+0xed/0x210
[  345.203378][ T9865]  audit_log_d_path_exe+0x46/0x80
[  345.208380][ T9865]  audit_log_task+0x2fe/0x3a0
[  345.213035][ T9865]  audit_seccomp+0x7a/0x1f0
[  345.217511][ T9865]  __seccomp_filter+0x896/0x1140
[  345.222422][ T9865]  __secure_computing+0x221/0x2e0
[  345.227435][ T9865]  do_syscall_64+0x568/0xf80
[  345.232002][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.237870][ T9865] page last free pid 9832 tgid 9831 stack trace:
[  345.244168][ T9865]  __free_frozen_pages+0x7e1/0x10d0
[  345.249342][ T9865]  qlist_free_all+0x47/0xe0
[  345.253824][ T9865]  kasan_quarantine_reduce+0x1a0/0x1f0
[  345.259262][ T9865]  __kasan_slab_alloc+0x69/0x90
[  345.264093][ T9865]  __kmalloc_noprof+0x2b9/0x850
[  345.268926][ T9865]  tomoyo_realpath_from_path+0xb6/0x690
[  345.274459][ T9865]  tomoyo_path_number_perm+0x23c/0x580
[  345.279896][ T9865]  security_file_ioctl+0xd3/0x230
[  345.284898][ T9865]  __x64_sys_ioctl+0xb7/0x210
[  345.289569][ T9865]  do_syscall_64+0x106/0xf80
[  345.294137][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.300008][ T9865] 
[  345.302304][ T9865] Memory state around the buggy address:
[  345.307908][ T9865]  ffff8880391d4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.315949][ T9865]  ffff8880391d4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.323994][ T9865] >ffff8880391d4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.332034][ T9865]                                               ^
[  345.338419][ T9865]  ffff8880391d4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.346456][ T9865]  ffff8880391d4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.354490][ T9865] ==================================================================
[  345.372070][ T6015] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input28
[  345.448091][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.457466][ T5876] usb 3-1: device descriptor read/8, error -71
[  345.466269][ T6015] em28xx 4-1:0.89: Remote control support is not available for this card.
[  345.475310][ T5883] em28xx 4-1:0.89: Closing input extension
[  345.497023][ T5883] em28xx 4-1:0.89: Deregistering snapshot button
[  345.787487][ T5876] usb usb3-port1: unable to enumerate USB device
[  345.895231][ T9865] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  345.902441][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  345.912922][ T9865] Tainted: [L]=SOFTLOCKUP
[  345.917235][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  345.927278][ T9865] Call Trace:
[  345.930545][ T9865]  <TASK>
[  345.933465][ T9865]  dump_stack_lvl+0x100/0x190
[  345.938170][ T9865]  vpanic+0x552/0x970
[  345.942146][ T9865]  ? __pfx_vpanic+0x10/0x10
[  345.946649][ T9865]  ? v4l2_fh_init+0x27d/0x2c0
[  345.951318][ T9865]  panic+0xd1/0xe0
[  345.955027][ T9865]  ? __pfx_panic+0x10/0x10
[  345.959433][ T9865]  ? v4l2_fh_init+0x27d/0x2c0
[  345.964099][ T9865]  ? preempt_schedule_common+0x42/0xc0
[  345.969552][ T9865]  ? check_panic_on_warn+0x1f/0x90
[  345.974667][ T9865]  check_panic_on_warn.cold+0x19/0x34
[  345.980031][ T9865]  end_report.part.0+0x3a/0x90
[  345.984772][ T9865]  kasan_report.cold+0xe/0x18
[  345.989438][ T9865]  ? v4l2_fh_init+0x27d/0x2c0
[  345.994092][ T9865]  v4l2_fh_init+0x27d/0x2c0
[  345.998568][ T9865]  v4l2_fh_open+0x64/0xa0
[  346.002876][ T9865]  em28xx_v4l2_open+0x11e/0x570
[  346.007724][ T9865]  v4l2_open+0x1d2/0x490
[  346.011962][ T9865]  ? __pfx_v4l2_open+0x10/0x10
[  346.016723][ T9865]  chrdev_open+0x234/0x6a0
[  346.021134][ T9865]  ? __pfx_chrdev_open+0x10/0x10
[  346.026071][ T9865]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  346.032396][ T9865]  do_dentry_open+0x6d8/0x1660
[  346.037166][ T9865]  ? __pfx_chrdev_open+0x10/0x10
[  346.042101][ T9865]  vfs_open+0x82/0x3f0
[  346.046172][ T9865]  path_openat+0x208c/0x31a0
[  346.050758][ T9865]  ? __pfx_path_openat+0x10/0x10
[  346.055694][ T9865]  do_file_open+0x20e/0x430
[  346.060192][ T9865]  ? __pfx_do_file_open+0x10/0x10
[  346.065219][ T9865]  ? alloc_fd+0x476/0x790
[  346.069544][ T9865]  ? do_getname+0x191/0x390
[  346.074045][ T9865]  do_sys_openat2+0x10d/0x1e0
[  346.078723][ T9865]  ? __pfx_do_sys_openat2+0x10/0x10
[  346.083923][ T9865]  __x64_sys_openat+0x12d/0x210
[  346.088770][ T9865]  ? __pfx___x64_sys_openat+0x10/0x10
[  346.094138][ T9865]  ? do_user_addr_fault+0x8d6/0x12f0
[  346.099426][ T9865]  do_syscall_64+0x106/0xf80
[  346.104010][ T9865]  ? clear_bhb_loop+0x40/0x90
[  346.108684][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.114571][ T9865] RIP: 0033:0x7f6f658a7407
[  346.118981][ T9865] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  346.138581][ T9865] RSP: 002b:00007ffdd7a4ea10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  346.146996][ T9865] RAX: ffffffffffffffda RBX: 00007f6f65fa4880 RCX: 00007f6f658a7407
[  346.154962][ T9865] RDX: 0000000000000000 RSI: 00007ffdd7a4ef1c RDI: ffffffffffffff9c
[  346.162927][ T9865] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  346.170889][ T9865] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  346.178851][ T9865] R13: 00007ffdd7a4ec60 R14: 00007f6f6610b000 R15: 000055f8a906a4d8
[  346.186826][ T9865]  </TASK>
[  346.190038][ T9865] Kernel Offset: disabled
[  346.194338][ T9865] Rebooting in 86400 seconds..