last executing test programs:

16.672302792s ago: executing program 0 (id=1061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
socket$xdp(0x2c, 0x3, 0x0)
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="72b01d106a35647ec2a988628e2de4d80d86edaa6b1da088baeac30a0e38695a020e4958d21aa8e4c67ae9f504ddb80a12192d479951ee25614c3ff0874c9bfa11c7c30688dac650e0ff2c5ab7ebcd56cf3b6a1e9478701137035b66594a02b76509e6bde57e5914b68308f6d9335c941eee1c2f8b5630e6683d482d5689f7144c283256c929b6c81eba5e9b2b578241e674e227a903e9228dd6c3878b021ddfd3071784cfe8381bad81aebcf3640c9f8486ea7f5434d43d"], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x8, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)
timerfd_create(0x0, 0x800)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x4, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x80000001, 0x100000, 0xc, 0x6, 0xf, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x11, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0xc, 0x7, 0x400005, 0x2, 0x6, 0xc, 0x4, 0x7, 0x7, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20003, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

9.467806716s ago: executing program 0 (id=1078):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000)
setreuid(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000340)=0x30)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x4}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.503901173s ago: executing program 0 (id=1081):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "d2f751d3"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1532, 0x11d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x401, 0xfe, 0x1, {0x22, 0x315}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x8, 0xbf}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x1, [{0x2f, &(0x7f0000000200)=@string={0x2f, 0x3, "0f399f219e9c4f1f55d9784bd6399430265b47f5c7381fc41dac473de275c27257acfe7f1263fba84964afbdfc"}}]})
syz_usb_ep_write(r0, 0x81, 0xea, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab")

8.329421426s ago: executing program 2 (id=1082):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x11, 0x6, "c9e024c4ed98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x2a, "9f321e770855a0891a774eb639123101af115477e7eb5d6a9adcccb34d207b2975bda2580b2c16bd9670"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x5, 0x7, 0xffffffff, 0x4, 0x5, 0x1, 0xff, 0x80000000, 0x3, 0x8, 0xfff7, 0x8}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}})

7.878106391s ago: executing program 1 (id=1083):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r5=>0x0}, &(0x7f00000005c0)=0xc)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)={0x1e8, 0x0, 0x0, [{{0x2, 0x1, 0xe03, 0xfffffffffffffffc, 0x7fffffff, 0x0, {0x6, 0x0, 0x9, 0x54a, 0x1, 0x64, 0x7, 0xff, 0x8001, 0x2000, 0x300, 0xee01, 0x0, 0x9, 0x4f}}, {0x1, 0x1, 0x1, 0x4, '('}}, {{0x3, 0x0, 0x7fffffff, 0x3, 0x7f, 0xf, {0x3, 0x5, 0x6, 0x7, 0x0, 0x8, 0xff, 0x1, 0x2b3, 0x77244f08a963cb28, 0x2, 0x0, 0x0, 0x4, 0x9}}, {0x4, 0x7, 0x0, 0x400000}}, {{0x0, 0x3, 0x2, 0x9, 0x2, 0x5, {0x5, 0x1, 0x6, 0xfffffffffffffff9, 0xfff, 0x41f0, 0x4d, 0x4, 0x0, 0xc000, 0x5, r4, r5, 0xffffffff, 0x3}}, {0x2, 0x8000000000000000, 0x4, 0x7, ')$%*'}}]}, 0x1e8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1})
waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500))
r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'})
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000})
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x200000000000000)

6.651816513s ago: executing program 4 (id=1086):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89b1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x10, 0x0, 0x4, 0xc2, @private0, @mcast2, 0x8000, 0x0, 0x2, 0x6}})

6.614891037s ago: executing program 1 (id=1087):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r5=>0x0}, &(0x7f00000005c0)=0xc)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)={0x1e8, 0x0, 0x0, [{{0x2, 0x1, 0xe03, 0xfffffffffffffffc, 0x7fffffff, 0x0, {0x6, 0x0, 0x9, 0x54a, 0x1, 0x64, 0x7, 0xff, 0x8001, 0x2000, 0x300, 0xee01, 0x0, 0x9, 0x4f}}, {0x1, 0x1, 0x1, 0x4, '('}}, {{0x3, 0x0, 0x7fffffff, 0x3, 0x7f, 0xf, {0x3, 0x5, 0x6, 0x7, 0x0, 0x8, 0xff, 0x1, 0x2b3, 0x77244f08a963cb28, 0x2, 0x0, 0x0, 0x4, 0x9}}, {0x4, 0x7, 0x0, 0x400000}}, {{0x0, 0x3, 0x2, 0x9, 0x2, 0x5, {0x5, 0x1, 0x6, 0xfffffffffffffff9, 0xfff, 0x41f0, 0x4d, 0x4, 0x0, 0xc000, 0x5, r4, r5, 0xffffffff, 0x3}}, {0x2, 0x8000000000000000, 0x4, 0x7, ')$%*'}}]}, 0x1e8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1})
r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x200000000000000)

6.432591831s ago: executing program 4 (id=1088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
socket$xdp(0x2c, 0x3, 0x0)
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="72b01d106a35647ec2a988628e2de4d80d86edaa6b1da088baeac30a0e38695a020e4958d21aa8e4c67ae9f504ddb80a12192d479951ee25614c3ff0874c9bfa11c7c30688dac650e0ff2c5ab7ebcd56cf3b6a1e9478701137035b66594a02b76509e6bde57e5914b68308f6d9335c941eee1c2f8b5630e6683d482d5689f7144c283256c929b6c81eba5e9b2b578241e674e227a903e9228dd6c3878b021ddfd3071784cfe8381bad81aebcf3640c9f8486ea7f5434d43d"], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x8, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)
timerfd_create(0x0, 0x800)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x4, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x80000001, 0x100000, 0xc, 0x6, 0xf, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x11, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0xc, 0x7, 0x400005, 0x2, 0x6, 0xc, 0x4, 0x7, 0x7, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20003, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

5.720741602s ago: executing program 3 (id=1089):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=0x0, @ANYBLOB="0800000000000000000000f20000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6)
kcmp(r1, r1, 0x0, 0xffffffffffffffff, r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x20000000, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0x7, {0x0, r5}}, 0x18)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

5.689934043s ago: executing program 1 (id=1090):
r0 = gettid()
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
socket$unix(0x1, 0x1, 0x0)

5.316193678s ago: executing program 1 (id=1091):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000)
r4 = dup(r3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x0, 0xd)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000002)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x100000006)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$midi(r4, &(0x7f00000000c0), 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x24004080, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring)

5.306522247s ago: executing program 2 (id=1092):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x7fe)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x988, 0x4)
lstat(&(0x7f000001de80)='./control\x00', 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

5.248628747s ago: executing program 0 (id=1093):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa10000ffe4000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

4.131894337s ago: executing program 4 (id=1094):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000200000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28)

3.94406387s ago: executing program 4 (id=1095):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
open(0x0, 0x147842, 0x6)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpgid(r1)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota')
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r5, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000002080)={0x28, 0x3, r6, 0x0, &(0x7f0000002200)="10", 0x1, 0x7})
openat$dir(0xffffffffffffff9c, 0x0, 0x414400, 0x120)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r7)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00')
pread64(r8, &(0x7f0000001240)=""/102384, 0x18ff0, 0x1000000000)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180))

3.116367423s ago: executing program 3 (id=1096):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182)
writev(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x7, 0x0, 0xf, 0x80000001}, 0x0, 0x0)

2.986063383s ago: executing program 3 (id=1097):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
socket$netlink(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000040000000800000001"], 0x48)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x418280, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000716000/0x4000)=nil, 0x4000})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c)

2.957953382s ago: executing program 4 (id=1098):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r5=>0x0}, &(0x7f00000005c0)=0xc)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)={0x1e8, 0x0, 0x0, [{{0x2, 0x1, 0xe03, 0xfffffffffffffffc, 0x7fffffff, 0x0, {0x6, 0x0, 0x9, 0x54a, 0x1, 0x64, 0x7, 0xff, 0x8001, 0x2000, 0x300, 0xee01, 0x0, 0x9, 0x4f}}, {0x1, 0x1, 0x1, 0x4, '('}}, {{0x3, 0x0, 0x7fffffff, 0x3, 0x7f, 0xf, {0x3, 0x5, 0x6, 0x7, 0x0, 0x8, 0xff, 0x1, 0x2b3, 0x77244f08a963cb28, 0x2, 0x0, 0x0, 0x4, 0x9}}, {0x4, 0x7, 0x0, 0x400000}}, {{0x0, 0x3, 0x2, 0x9, 0x2, 0x5, {0x5, 0x1, 0x6, 0xfffffffffffffff9, 0xfff, 0x41f0, 0x4d, 0x4, 0x0, 0xc000, 0x5, r4, r5, 0xffffffff, 0x3}}, {0x2, 0x8000000000000000, 0x4, 0x7, ')$%*'}}]}, 0x1e8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1})
waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500))
r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'})
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000})
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x200000000000000)

2.847794891s ago: executing program 3 (id=1099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r2=>0x0})
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = gettid()
tkill(r4, 0x7)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000002b00)=0xe8)
getresgid(&(0x7f0000002b40), &(0x7f0000002b80)=<r6=>0x0, &(0x7f0000002bc0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
read$dsp(r9, &(0x7f0000000080)=""/73, 0x49)
ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000040)=0xffdf0017)
syz_clone3(&(0x7f00000031c0)={0x848a00, &(0x7f0000002f80), &(0x7f0000002fc0)=<r10=>0x0, &(0x7f0000003000), {0x7ff}, &(0x7f0000003040)=""/42, 0x2a, &(0x7f0000003080)=""/231, &(0x7f0000003180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58)
stat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000003300), 0x0)
r13 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034b}, &(0x7f0000000140), &(0x7f0000000080))
io_uring_enter(r13, 0x47bc, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, <r14=>0x0}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="b774625d659b5f95c422856d83", 0xd}, {&(0x7f00000000c0)="abc71401cbbc7c03e61788afd32e164c57d52060eb33da01c7bf1f1313cfe805d9981092a4743136c32c663e5b5b8d03a99bd8490fdbf85ca67eb7e782735168d8cdb0344633753cd1085c9cbc457bc69d3fa413d7a2a5c600b2fa8b750a82852143545248fd98f6d28e91d34c6fd5d5d42060238ba57689e3a9849ee014dd3f247f3d9f4f3695fad8bff146a01fef4725a46b2014a017facbb147e4222f17414d5a8cca54bbf6b851", 0xa9}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="dea016f8e8805049f50cae09827933ec276feb8450a2bb88349207bc8b482bb44dfdde0a44cef4e3bffa9e528dfe9e7e70b86c9d4a165ffb11498fa4f0026a89631296ca799a4f33ca6aaec3ff2b6e1aba1c45c07f876606b332cdf9d5cf9ad879267acb7f77acf2cd594275cbba7da4bef47dcf2613bf331dd7f64943", 0x7d}, {&(0x7f00000001c0)}, {&(0x7f0000000480)="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", 0x1000}], 0x3, &(0x7f0000000380)=[@rights={{0x1c, 0x1, 0x1, [r1, r3, r1]}}], 0x20, 0x2000000}}, {{&(0x7f0000001480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001500)="95104d6cad125f3ca3ec6e25b1cf9b75b9043617a1ef3fa88c5cebe94aafb286934d130f1680982c53bc329d0bebdd21c1e50cbde5dc49b8b9b59cf0d2ac0efbb0c611f0215df105", 0x48}, {&(0x7f0000001580)="240c9266308371a85009e4535ce1a98c187b914214e9ba4e8dc0b2e98ff8bf4e6ed063cf8af7e1b1ec8423389e6adc178fe2b37fba17637897b07d0e98881336e40307565b7d71c7aeb38ed925963ebc2c77840851e2e69e0054b2198d06b315", 0x60}, {&(0x7f0000001600)="5bf99c1dd54925105b3fa310620e236a2776e2da4ec58af98fda9e8a675ed7a36fb85d016e5b5004df7e023357b0100979f9d822e042eba129812d3a6109b6f9c274c9fb9d94820e99a69b5c3261a05d2694eeded77531100e2d2655ba4f86626c694ae68b7739202bc2bac7c1412aea7f240671da9e72f26f2cfe4056f7549db5d43ca6dc379138025ca0eff802ad5a707d7234de8acf4b2465dc47cca2d9f2fe8e684e971875d3d9b6992d182f80bb5cb11244db04829303773f95de4bdac4c56aba11c4ca759e92a8c4b027c7a6f68736693746b86e16a4828c3bd475d28b72b9fb9ebe26a23e58cf927f90e290", 0xef}, {&(0x7f0000001700)="012b260874f92ba025a9ccdef2d2c9606c2093005eeba6847972215a6f503a4a966e4f99dc7b25489f7e7be5f269477a23e9b7e5466b23508687a9d7b1fe3fee3d75e14b0f81b2ceb84bede6913f2dde111dbd120fac994b7337986db55af4d96d8a0e2434e2f6922b11d6", 0x6b}, {&(0x7f0000001780)="9205ff5b9eaf91518b2056e651e4a15ed1df627767bd462fd806200f50459b5936feaf2013a187a491fb1da540110b1617e655e70f67cdca3773c1bc61e990ac2fb87f39e85ac7366ac157668fab9d5a3b", 0x51}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="37c51b7e095ec3ff1113736be8a43a74776ac1980a", 0x15}, {&(0x7f0000002840)="89a8fd4b", 0x4}, {&(0x7f0000002880)="0c5b23b6270fa7fe13d6405f0375639776d784626051346c10a0e20c3e8e2fe64da8b173fea1df5a5febb45b0409f14871bf09cdfe83c8ae546c2766950360df9840c77a9c9d5a49c4d28e912b098f7f11bf87327a739c336b76329ac4ea67a3ebfd2614367a2094c1dcb4b9dd26f7cd710901aa3bafd58edc2a38f8a26a2ba21c9104100fdce6", 0x87}], 0x9, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x80}}, {{&(0x7f0000002c40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002cc0)="c652dd63b7ee7c7ab2e60be1ab4fe49900ddc426de2db83e792cfce6c907b8dc8279300fb772c5b6863f03baf8b150b9a3851cb9ebd35a30dcec8e624aaff7354171678b12ebe433101de4b4871c1a9649329638d8b0a578e75118576c1191b8fb3c527213d4ab335916f7940a42ce45ac3fc727e276ee9719d9f02def7168ff165ff45d500f73b2408e859177d3e73099ff788f8acf481c5df48a212f2f", 0x9e}, {&(0x7f0000002d80)="8ab594ba969114ccf76d1b0649b548ab7bb765d423a909c9e88d6d53c4e1f9d77be8e26453b2a90126f424c45f3fae92dc1c57496b8988532bd3c3cd57115cc5539657827be6934d3e96c3550b62afca23bc05e23eb268e8e4cbb5d340021d1876c3961423ff7f11daae0e537b4a0102c5547007efbc2f25cbd922da7f4f35439d08838a5ce59982b7ca6dbe24ce", 0x8e}, {&(0x7f0000002e40)="033daa688439a484683be2acf888ac524cba7bbda7a85563d5de557e201443e2f9e6ad7d8abebf6c00dd70224b3e6c98bbdf383867ae2160c8d2f47cb332a9114dc7e359b76753f27d03ecd73ac65422ea60b1f757dd650786d3324af0ea673821b19fca4cebddf85eb8f0dc754d242baa1e933aafbad8d620563457a8c586f9bcaf0e1667d9d32d4198f8618faefafefce36200bbff6b05a149a5b0fcd8df321efb721b212aca6c6b1f04f0720df139b56c57e9fc1b5c3d0cb09336c3cb4040138a7c43f54ee5085e704bc2c344d309d566a3a43ff73f752b69", 0xda}], 0x3, &(0x7f0000003400)=[@rights={{0x38, 0x1, 0x1, [r7, r8, r1, r0, r0, r1, r0, r9, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r13, r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xee01}}}], 0xe8}}], 0x4, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x10, 0x0, 0x4, 0xc2, @private0, @mcast2, 0x8000, 0x0, 0x2, 0x6}})

2.830575128s ago: executing program 0 (id=1100):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r4=>0x0}, &(0x7f00000005c0)=0xc)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)={0x1e8, 0x0, 0x0, [{{0x2, 0x1, 0xe03, 0xfffffffffffffffc, 0x7fffffff, 0x0, {0x6, 0x0, 0x9, 0x54a, 0x1, 0x64, 0x7, 0xff, 0x8001, 0x2000, 0x300, 0xee01, 0x0, 0x9, 0x4f}}, {0x1, 0x1, 0x1, 0x4, '('}}, {{0x3, 0x0, 0x7fffffff, 0x3, 0x7f, 0xf, {0x3, 0x5, 0x6, 0x7, 0x0, 0x8, 0xff, 0x1, 0x2b3, 0x77244f08a963cb28, 0x2, 0x0, 0x0, 0x4, 0x9}}, {0x4, 0x7, 0x0, 0x400000}}, {{0x0, 0x3, 0x2, 0x9, 0x2, 0x5, {0x5, 0x1, 0x6, 0xfffffffffffffff9, 0xfff, 0x41f0, 0x4d, 0x4, 0x0, 0xc000, 0x5, r3, r4, 0xffffffff, 0x3}}, {0x2, 0x8000000000000000, 0x4, 0x7, ')$%*'}}]}, 0x1e8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1})
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x200000000000000)

2.171900202s ago: executing program 2 (id=1101):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000)
setreuid(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000340)=0x30)
gettid()
getgroups(0x0, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x4}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.820194777s ago: executing program 3 (id=1102):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x11, 0x6, "c9e024c4ed98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x16, "9f321e770855a0891a774eb639123101af115477e7eb"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x5, 0x7, 0xffffffff, 0x4, 0x5, 0x1, 0xff, 0x80000000, 0x3, 0x8, 0xfff7, 0x8}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}})

1.394977168s ago: executing program 2 (id=1103):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
syz_open_dev$evdev(0x0, 0x1, 0x248002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x302, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
r8 = dup3(r3, r0, 0x80000)
ioctl$NBD_DO_IT(r8, 0xab03)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1.277017455s ago: executing program 4 (id=1104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
socket$xdp(0x2c, 0x3, 0x0)
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="72b01d106a35647ec2a988628e2de4d80d86edaa6b1da088baeac30a0e38695a020e4958d21aa8e4c67ae9f504ddb80a12192d479951ee25614c3ff0874c9bfa11c7c30688dac650e0ff2c5ab7ebcd56cf3b6a1e9478701137035b66594a02b76509e6bde57e5914b68308f6d9335c941eee1c2f8b5630e6683d482d5689f7144c283256c929b6c81eba5e9b2b578241e674e227a903e9228dd6c3878b021ddfd3071784cfe8381bad81aebcf3640c9f8486ea7f5434d43d"], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x8, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)
timerfd_create(0x0, 0x800)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x4, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x80000001, 0x100000, 0xc, 0x6, 0xf, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x11, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0xc, 0x7, 0x400005, 0x2, 0x6, 0xc, 0x4, 0x7, 0x7, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20003, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.179394451s ago: executing program 1 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x8800)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b500f3ff000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec975c9f05051d1d4b06b0f8aa16046f0abf64162a279f7a775d55dfc28abbe9b5ea62d84f3a10746443d64300f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20400d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229ccff7f881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b6e5396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d2389b8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467393467f6eaa544828ba7d6b922afe892486f993be6d20c93a7791e7f2a16ece379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d1077f5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e0eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594dc0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b1aef22944d670327b2b2fcf4df7ecc6fd1696d08749286edb72166fd31a63acfd9cdd8cb8b6f0b7edf95c7ec58f744017829abb1a1dbf1b5b432c0d947a9670fbfc473ebd4db1a0774677bc76b666633318d3e63eb47a9ea98d508dfbc73cf9054eb9ae9c0ffcc489e013b50ca5afd2f787a44d899893f03affb6295f9fe452b7ed64ad2f54e462b5f50d7a687d12593d8840e6013b4ea35c89121eb99684c54a16e6f61e0eafe731f522d57f125bcb9be5ad0707ed2303c9fac684406704e536f3111d373490aec1992fe1854fe1ab11768eae5ac2b898b8daa4f8fc70d051df767913a9c39c42a8e6f6c8068d0c70cc863d8f661e06417f1d9403b637464a75"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x8, &(0x7f0000000000)={0xfffffffb, 0x5}, 0x8, 0x10, 0x0, 0x9, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$key(0xf, 0x3, 0x2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r4 = dup(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000800, 0x2)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f00000004c0)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x8000}})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x38, r1, 0x101, 0x20000, 0x0, {{}, {@void, @void}}}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0055000000080004000000000000000300bf285b1c34202a392242bc9af9bc", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008045}, 0x11)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_type(r9, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_type(r10, &(0x7f0000000300), 0x9)
r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000c40), 0x12)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x6c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000054}, 0x2)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.036359082s ago: executing program 3 (id=1106):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=0x0, @ANYBLOB="0800000000000000000000f20000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6)
kcmp(r1, r1, 0x0, 0xffffffffffffffff, r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x20000000, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0x7, {0x0, r5}}, 0x18)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

399.921707ms ago: executing program 0 (id=1107):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f0000000040)="16227db2868ab54cf20206000000aeff41e688b1e5eb37f838e3cd56afbdd757b45f016c59e193084294038aa3189cd0", &(0x7f00000026c0)="878d6303953135fcf851412e7de488b3896566772ad2e6fa0fcb84e0cbc93ffa9ce35ec53a003ca35cacc6b4e57af82f95a7d2d93aca389f353ff5da9e3419f4cd3231e8ab282d986e4f438923e50a60a1fa57d082aeacb1ce6db9535ad499df2b07ca1a0b577b3ce1b07c22551291d23378c9c0c14aa282081e4f17b99ff8eb934cbd97a6e8647b2fa9513a0d0efaebddda8d0b6490024daa7974fe6b5915fc5647b636c09da42d3c372698b8e86beb5bd9")
r0 = getpid()
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
listen(r1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000400), 0x4)
process_vm_writev(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000240)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)

144.236291ms ago: executing program 1 (id=1108):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
open(0x0, 0x147842, 0x6)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpgid(r1)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota')
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r5, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000002080)={0x28, 0x3, r6, 0x0, &(0x7f0000002200)="10", 0x1, 0x7})
openat$dir(0xffffffffffffff9c, 0x0, 0x414400, 0x120)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r7)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00')
pread64(r8, &(0x7f0000001240)=""/102384, 0x18ff0, 0x1000000000)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180))

78.444309ms ago: executing program 2 (id=1109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x10, 0x0, 0x4, 0xc2, @private0, @mcast2, 0x8029, 0x0, 0x2, 0x6}})

0s ago: executing program 2 (id=1110):
memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x3)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x46)
r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES8=r1], 0xaf)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x305182, 0x0)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x400000, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, &(0x7f0000002080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socket$nl_rdma(0x10, 0x3, 0x14)

kernel console output (not intermixed with test programs):

5980] usb 5-1: config 1 has no interface number 0
[  175.024967][    T9] usb 3-1: Using ep0 maxpacket: 32
[  175.030238][ T5980] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  175.041574][ T5980] usb 5-1: config 1 interface 105 has no altsetting 0
[  175.050112][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  175.058888][ T5980] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  175.068081][    T9] usb 3-1: config 15 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0
[  175.078628][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.086685][    T9] usb 3-1: config 15 interface 0 has no altsetting 0
[  175.093604][ T5980] usb 5-1: Product: syz
[  175.097848][ T5980] usb 5-1: Manufacturer: syz
[  175.102680][ T5980] usb 5-1: SerialNumber: syz
[  175.108457][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=c3.9b
[  175.119686][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.122176][ T7213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  175.127880][    T9] usb 3-1: Product: syz
[  175.139098][    T9] usb 3-1: Manufacturer: syz
[  175.146539][    T9] usb 3-1: SerialNumber: syz
[  175.155514][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  175.293650][ T5878] usb 2-1: device descriptor read/64, error -71
[  175.350205][ T5980] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22
[  175.406040][ T5878] usb usb2-port1: attempt power cycle
[  175.682817][    T9] usb 3-1: ucan: probing device on interface #0
[  175.690607][ T7227] random: crng reseeded on system resumption
[  175.697493][    T9] usb 3-1: ucan: invalid endpoint configuration
[  175.708778][    T9] usb 3-1: ucan: probe failed; try to update the device firmware
[  175.728913][    T9] usb 3-1: USB disconnect, device number 5
[  175.794129][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  175.827617][ T7231] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.833992][ T5878] usb 2-1: device descriptor read/8, error -71
[  175.873126][   T30] audit: type=1400 audit(1767110984.156:322): avc:  denied  { create } for  pid=7230 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  175.919637][ T7234] netlink: 35 bytes leftover after parsing attributes in process `syz.0.339'.
[  175.958219][   T30] audit: type=1400 audit(1767110984.186:323): avc:  denied  { connect } for  pid=7230 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  176.000329][ T7231] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.096234][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  176.138775][ T5878] usb 2-1: device descriptor read/8, error -71
[  176.276614][ T5878] usb usb2-port1: unable to enumerate USB device
[  176.367898][   T30] audit: type=1400 audit(1767110984.346:324): avc:  denied  { connect } for  pid=7228 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  176.391709][ T7231] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.504282][ T7231] bond0: (slave netdevsim0): Releasing backup interface
[  176.528446][ T7231] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.700478][  T152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.711695][  T152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.730940][ T4084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.805248][ T7243] netlink: 'syz.2.341': attribute type 4 has an invalid length.
[  177.066170][  T152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.056154][   T30] audit: type=1400 audit(1767110985.906:325): avc:  denied  { bind } for  pid=7247 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  178.080393][   T30] audit: type=1400 audit(1767110985.916:326): avc:  denied  { ioctl } for  pid=7247 comm="syz.3.343" path="socket:[12196]" dev="sockfs" ino=12196 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  178.177979][ T5898] usb 5-1: USB disconnect, device number 13
[  178.458333][ T7262] random: crng reseeded on system resumption
[  178.503732][   T30] audit: type=1400 audit(1767110986.796:327): avc:  denied  { read write } for  pid=7259 comm="syz.1.349" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  178.561498][   T30] audit: type=1400 audit(1767110986.826:328): avc:  denied  { open } for  pid=7259 comm="syz.1.349" path="/84/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  178.611016][   T30] audit: type=1400 audit(1767110986.826:329): avc:  denied  { ioctl } for  pid=7259 comm="syz.1.349" path="/84/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  178.666193][   T30] audit: type=1400 audit(1767110986.926:330): avc:  denied  { create } for  pid=7266 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  178.771616][ T7272] binder: 7269:7272 ioctl 400c620e 200000001380 returned -22
[  178.862702][   T30] audit: type=1400 audit(1767110986.946:331): avc:  denied  { getopt } for  pid=7266 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  182.873656][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  183.083813][   T24] usb 3-1: Using ep0 maxpacket: 16
[  183.129659][   T24] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  183.247493][   T24] usb 3-1: config 1 has no interface number 0
[  183.364658][   T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  183.386129][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'.
[  183.433665][   T24] usb 3-1: config 1 interface 105 has no altsetting 0
[  183.564346][   T24] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  183.583520][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.591544][   T24] usb 3-1: Product: syz
[  183.613514][   T24] usb 3-1: Manufacturer: syz
[  183.618131][   T24] usb 3-1: SerialNumber: syz
[  184.127230][ T7317] random: crng reseeded on system resumption
[  184.163596][ T7303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  184.660618][   T24] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22
[  185.182538][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  185.182553][   T30] audit: type=1400 audit(1767110993.466:341): avc:  denied  { create } for  pid=7335 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  185.212323][ T7333] syz.3.368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  185.264254][   T30] audit: type=1400 audit(1767110993.496:342): avc:  denied  { name_bind } for  pid=7335 comm="syz.1.369" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  185.316728][   T30] audit: type=1400 audit(1767110993.496:343): avc:  denied  { ioctl } for  pid=7335 comm="syz.1.369" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13365 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  185.866250][ T7295] usb 3-1: USB disconnect, device number 6
[  188.473862][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'.
[  190.261561][ T7377] random: crng reseeded on system resumption
[  190.745697][ T5829] Bluetooth: hci2: command 0x0406 tx timeout
[  190.745779][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  190.751764][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  190.953521][   T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  191.605017][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.625456][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.638308][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  191.649093][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.669226][   T24] usb 4-1: config 0 descriptor??
[  192.038385][   T30] audit: type=1400 audit(1767111000.326:344): avc:  denied  { watch watch_reads } for  pid=7397 comm="syz.1.383" path="/91" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  192.063700][   T30] audit: type=1400 audit(1767111000.326:345): avc:  denied  { read } for  pid=7399 comm="syz.2.384" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  192.089418][   T30] audit: type=1400 audit(1767111000.326:346): avc:  denied  { open } for  pid=7399 comm="syz.2.384" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  192.490288][   T24] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0003/input/input7
[  192.544454][   T30] audit: type=1400 audit(1767111000.836:347): avc:  denied  { write } for  pid=7402 comm="syz.1.385" path="socket:[13238]" dev="sockfs" ino=13238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.568287][ T5877] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  192.575922][ T7403] Bluetooth: MGMT ver 1.23
[  192.619952][   T24] sony 0003:054C:03D5.0003: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0
[  192.734869][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.799031][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.810679][   T24] usb 4-1: USB disconnect, device number 17
[  192.857942][ T5877] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  192.858836][ T7405] fido_id[7405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  192.924631][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.977826][ T5877] usb 3-1: config 0 descriptor??
[  193.103843][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  193.253561][ T5885] usb 5-1: Using ep0 maxpacket: 32
[  193.260374][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  193.297535][ T5885] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  193.316552][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.326584][ T5885] usb 5-1: Product: syz
[  193.335933][ T5885] usb 5-1: Manufacturer: syz
[  193.359866][ T5885] usb 5-1: SerialNumber: syz
[  193.382403][ T5885] usb 5-1: config 0 descriptor??
[  193.416761][ T5885] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  193.448377][ T5885] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  193.510103][ T5885] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8
[  193.650081][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.664622][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.673738][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.695139][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.704305][ T7295] usb 5-1: USB disconnect, device number 14
[  193.790126][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  193.815964][   T30] audit: type=1400 audit(1767111002.096:348): avc:  denied  { map } for  pid=7399 comm="syz.2.384" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.875739][ T5877] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71
[  193.927519][ T5877] usb 3-1: USB disconnect, device number 7
[  193.934696][   T30] audit: type=1400 audit(1767111002.096:349): avc:  denied  { execute } for  pid=7399 comm="syz.2.384" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.987955][   T30] audit: type=1400 audit(1767111002.156:350): avc:  denied  { append } for  pid=7399 comm="syz.2.384" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.359450][ T5877] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  194.908028][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.922146][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.032794][ T5877] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  195.044344][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.558828][ T5877] usb 4-1: config 0 descriptor??
[  196.164362][ T7452] random: crng reseeded on system resumption
[  196.556696][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  196.562708][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  196.761847][ T5877] usb 4-1: USB disconnect, device number 18
[  196.837705][   T30] audit: type=1400 audit(1767111005.126:351): avc:  denied  { ioctl } for  pid=7462 comm="syz.4.399" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  198.078278][ T7484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.402'.
[  199.143845][ T7504] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[  199.198688][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[  200.863409][ T7521] random: crng reseeded on system resumption
[  201.330835][ T7504] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.997319][ T7506] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  202.035892][ T7506] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  203.693711][   T30] audit: type=1400 audit(1767111011.976:352): avc:  denied  { ioctl } for  pid=7557 comm="syz.0.422" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  204.374046][ T5933] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  204.457965][ T7564] netlink: 76 bytes leftover after parsing attributes in process `syz.1.424'.
[  204.494083][ T7564] netlink: 76 bytes leftover after parsing attributes in process `syz.1.424'.
[  204.523530][ T5933] usb 5-1: Using ep0 maxpacket: 32
[  204.586470][ T5933] usb 5-1: config 0 has an invalid interface number: 220 but max is 0
[  204.608281][ T5933] usb 5-1: config 0 has no interface number 0
[  204.636010][ T5933] usb 5-1: config 0 interface 220 has no altsetting 0
[  204.643750][   T30] audit: type=1400 audit(1767111012.926:353): avc:  denied  { write } for  pid=7566 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  204.690057][ T5933] usb 5-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 0.00
[  204.702515][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.719912][   T30] audit: type=1400 audit(1767111012.996:354): avc:  denied  { ioctl } for  pid=7563 comm="syz.1.424" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  204.748498][ T5933] usb 5-1: Product: syz
[  204.774613][ T5933] usb 5-1: Manufacturer: syz
[  204.779239][ T5933] usb 5-1: SerialNumber: syz
[  204.786129][ T5933] usb 5-1: config 0 descriptor??
[  204.793959][ T5933] usb-storage 5-1:0.220: USB Mass Storage device detected
[  204.816688][ T5933] usb-storage 5-1:0.220: Quirks match for vid 071b pid 3203: 80600
[  204.903841][ T5930] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  205.069696][ T5930] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  205.088567][ T5930] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  205.112968][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  205.139176][ T5930] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  205.160611][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  205.187190][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  205.233250][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  205.447828][ T5930] usb 1-1: string descriptor 0 read error: -22
[  205.456921][ T5930] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  205.471568][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.494935][ T5930] usb 1-1: config 0 descriptor??
[  205.518380][ T5930] hub 1-1:0.0: bad descriptor, ignoring hub
[  205.532012][ T5930] hub 1-1:0.0: probe with driver hub failed with error -5
[  205.606503][ T5930] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10
[  205.722916][   T30] audit: type=1400 audit(1767111014.006:355): avc:  denied  { read write } for  pid=7566 comm="syz.0.425" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  205.817947][   T30] audit: type=1400 audit(1767111014.046:356): avc:  denied  { open } for  pid=7566 comm="syz.0.425" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  205.970984][ T5930] usb 1-1: USB disconnect, device number 13
[  206.463621][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  206.633563][   T24] usb 3-1: Using ep0 maxpacket: 16
[  206.641072][   T24] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  206.664898][   T24] usb 3-1: config 1 has no interface number 0
[  206.681245][   T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  206.701840][   T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  206.722200][   T24] usb 3-1: config 1 interface 105 has no altsetting 0
[  206.762758][   T24] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  206.772116][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.811982][   T24] usb 3-1: Product: syz
[  206.826653][   T24] usb 3-1: Manufacturer: syz
[  206.844598][   T24] usb 3-1: SerialNumber: syz
[  207.276221][ T7587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  207.305147][ T7587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  207.668668][ T5930] usb 5-1: USB disconnect, device number 15
[  207.789668][ T7587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  207.797564][ T7587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  208.006922][   T24] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0
[  208.019023][   T24] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61
[  209.259589][   T24] usb 3-1: USB disconnect, device number 8
[  209.749459][ T7619] random: crng reseeded on system resumption
[  210.383932][ T7626] vlan0: entered promiscuous mode
[  210.490162][   T30] audit: type=1400 audit(1767111018.656:357): avc:  denied  { mounton } for  pid=7621 comm="syz.2.438" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  210.552072][   T30] audit: type=1400 audit(1767111018.666:358): avc:  denied  { setcurrent } for  pid=7625 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  210.603001][   T30] audit: type=1401 audit(1767111018.666:359): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  210.663699][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  210.666953][   T30] audit: type=1400 audit(1767111018.886:360): avc:  denied  { accept } for  pid=7629 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  211.885527][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.918073][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.943556][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  211.967566][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  211.976938][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.007572][   T24] usb 5-1: config 0 descriptor??
[  212.426123][   T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x6
[  212.475927][   T24] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  213.127707][   T24] usb 5-1: USB disconnect, device number 16
[  213.432310][ T7677] atomic_op ffff88802b580198 conn xmit_atomic 0000000000000000
[  213.444006][   T30] audit: type=1400 audit(1767111021.706:361): avc:  denied  { bind } for  pid=7675 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  213.793571][   T30] audit: type=1400 audit(1767111021.716:362): avc:  denied  { write } for  pid=7675 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  213.879596][   T30] audit: type=1400 audit(1767111022.166:363): avc:  denied  { create } for  pid=7649 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  213.948995][   T30] audit: type=1400 audit(1767111022.196:364): avc:  denied  { listen } for  pid=7649 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  214.059852][   T30] audit: type=1400 audit(1767111022.196:365): avc:  denied  { accept } for  pid=7649 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  214.404662][ T7679] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  214.412203][   T30] audit: type=1400 audit(1767111022.686:366): avc:  denied  { bind } for  pid=7664 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  214.593499][ T7679] usb 2-1: Using ep0 maxpacket: 8
[  214.601243][ T7679] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  214.651087][ T7679] usb 2-1: config 0 has no interface number 0
[  214.668924][ T7679] usb 2-1: config 0 interface 128 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  214.787357][ T7679] usb 2-1: config 0 interface 128 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0
[  214.830825][ T7679] usb 2-1: config 0 interface 128 has no altsetting 0
[  214.874693][ T7679] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=8b.56
[  214.904920][   T49] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  214.922251][ T7679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.950411][ T7679] usb 2-1: Product: syz
[  214.962724][ T7679] usb 2-1: Manufacturer: syz
[  214.979050][ T7679] usb 2-1: SerialNumber: syz
[  214.990037][ T7679] usb 2-1: config 0 descriptor??
[  215.001789][ T7679] ti_usb_3410_5052 2-1:0.128: TI USB 3410 1 port adapter converter detected
[  215.022288][ T7679] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  215.075356][   T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  215.123608][   T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.179672][   T49] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  215.202672][ T7679] usb 2-1: USB disconnect, device number 9
[  215.272754][ T7679] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  215.272851][   T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.338989][ T7679] ti_usb_3410_5052 2-1:0.128: device disconnected
[  215.398596][   T49] usb 5-1: config 0 descriptor??
[  215.928305][   T49] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0006/input/input11
[  216.190283][   T49] sony 0003:054C:03D5.0006: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0
[  216.294025][   T49] usb 5-1: USB disconnect, device number 17
[  216.504273][ T7722] fido_id[7722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  217.512804][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.465'.
[  218.883286][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.928313][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.973512][ T7679] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  220.143561][ T7679] usb 1-1: Using ep0 maxpacket: 32
[  220.264369][ T7679] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  220.422572][ T7679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.440747][ T7679] usb 1-1: config 0 has no interface number 0
[  220.447918][ T7679] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  220.465734][ T7679] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  220.479154][ T7679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.491310][ T7679] usb 1-1: Product: syz
[  220.495992][ T7679] usb 1-1: Manufacturer: syz
[  220.501044][ T7679] usb 1-1: SerialNumber: syz
[  220.513284][ T7679] usb 1-1: config 0 descriptor??
[  220.523948][ T7679] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  220.531657][ T7679] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  221.165158][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.175578][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.264795][ T5814] Bluetooth: to_multiplier 0 < 10
[  221.453622][ T7679] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  221.462079][ T7679] usbhid 1-1:0.35: couldn't find an input interrupt endpoint
[  223.338455][  T931] usb 1-1: USB disconnect, device number 14
[  223.340612][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[  223.613957][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.621340][ T7782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.700956][ T7801] random: crng reseeded on system resumption
[  224.322584][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.330444][ T7782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.427374][ T7805] random: crng reseeded on system resumption
[  225.594065][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  225.765740][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.792599][   T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  225.812320][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.837080][   T24] usb 3-1: config 0 descriptor??
[  226.043509][ T5933] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  226.118016][ T7814] bridge0: port 3(syz_tun) entered blocking state
[  226.139197][ T7814] bridge0: port 3(syz_tun) entered disabled state
[  226.165311][ T7814] syz_tun: entered allmulticast mode
[  226.215088][ T7821] binder: 7813:7821 ioctl 4018620d 0 returned -22
[  226.275722][ T7814] syz_tun: entered promiscuous mode
[  226.410588][ T7814] bridge0: port 3(syz_tun) entered blocking state
[  226.417427][ T7814] bridge0: port 3(syz_tun) entered forwarding state
[  226.463487][ T5933] usb 5-1: Using ep0 maxpacket: 16
[  226.484554][ T5933] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  226.497923][ T5933] usb 5-1: config 1 has no interface number 0
[  226.620621][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  226.621431][   T24] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  226.650300][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  226.665107][ T5814] Bluetooth: hci4: command 0x0405 tx timeout
[  226.675866][ T5933] usb 5-1: config 1 interface 105 has no altsetting 0
[  226.677292][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input12
[  226.742781][ T5933] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  226.790083][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.811603][ T5933] usb 5-1: Product: syz
[  226.844605][ T5933] usb 5-1: Manufacturer: syz
[  226.848663][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.849692][ T5933] usb 5-1: SerialNumber: syz
[  227.034718][ T7818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  227.055442][ T7818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  227.284554][   T24] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  227.297582][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.098549][ T7842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  228.199518][ T7842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  228.445168][ T5933] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3
[  228.482243][ T5877] usb 3-1: USB disconnect, device number 9
[  228.506820][ T5933] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61
[  228.590797][ T5878] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  228.763566][ T5878] usb 1-1: Using ep0 maxpacket: 16
[  228.769201][ T7853] netlink: 72 bytes leftover after parsing attributes in process `syz.1.498'.
[  228.795959][ T5878] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  228.823521][ T5878] usb 1-1: config 1 has no interface number 0
[  228.832045][ T5878] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  228.854428][ T5878] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  228.878863][ T5878] usb 1-1: config 1 interface 105 has no altsetting 0
[  228.894667][ T5878] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  228.917515][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.935269][ T5878] usb 1-1: Product: syz
[  228.942945][ T5878] usb 1-1: Manufacturer: syz
[  228.951758][ T5878] usb 1-1: SerialNumber: syz
[  228.965715][ T7846] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  228.982321][ T7846] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  229.375737][ T7861] random: crng reseeded on system resumption
[  229.500221][ T7846] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  229.724150][ T7846] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  229.777245][ T7679] usb 5-1: USB disconnect, device number 18
[  229.853802][ T5878] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3
[  229.881825][ T5878] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61
[  230.441432][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.503'.
[  230.968343][ T7886] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  231.481545][ T7894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.509'.
[  232.770647][ T5878] usb 1-1: USB disconnect, device number 15
[  233.119755][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'.
[  236.193649][   T30] audit: type=1800 audit(1767111044.476:367): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.520" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  236.193781][ T7949] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  236.225621][ T7949] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  236.235433][ T7949] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.397549][   T30] audit: type=1400 audit(1767111044.476:368): avc:  denied  { firmware_load } for  pid=7932 comm="syz.3.520" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  236.445990][   T30] audit: type=1400 audit(1767111044.536:369): avc:  denied  { firmware_load } for  pid=7932 comm="syz.3.520" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  236.600631][   T30] audit: type=1400 audit(1767111044.886:370): avc:  denied  { create } for  pid=7959 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  237.195508][ T5930] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  237.377552][ T5930] usb 5-1: Using ep0 maxpacket: 16
[  237.402886][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.454310][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  237.511534][ T5930] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  237.544218][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.572404][ T5930] usb 5-1: Product: syz
[  237.588416][ T5930] usb 5-1: Manufacturer: syz
[  237.615955][ T5930] usb 5-1: SerialNumber: syz
[  237.639707][ T5930] usb 5-1: config 0 descriptor??
[  237.699485][ T5930] omninet 5-1:0.0: required endpoints missing
[  238.007595][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.043577][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  238.053079][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.205615][ T5930] usb 3-1: device descriptor read/64, error -71
[  238.454673][ T5930] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  238.613773][ T5930] usb 3-1: device descriptor read/64, error -71
[  238.647015][ T5933] usb 5-1: USB disconnect, device number 19
[  238.745144][ T5930] usb usb3-port1: attempt power cycle
[  239.154285][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  239.234505][ T5930] usb 3-1: device descriptor read/8, error -71
[  239.563571][ T5930] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  239.720373][ T7679] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  239.761997][ T5930] usb 3-1: device descriptor read/8, error -71
[  240.263743][ T5930] usb usb3-port1: unable to enumerate USB device
[  240.351456][ T7679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.364561][ T8018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  240.387257][ T7679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.433494][ T7679] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  240.446759][ T7679] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  240.514672][ T7679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.564693][ T7679] usb 5-1: config 0 descriptor??
[  240.907372][ T8031] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  240.915703][ T8031] netlink: 'syz.2.547': attribute type 2 has an invalid length.
[  241.656422][ T7679] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  241.976056][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.988461][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.173524][ T7679] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  242.252339][ T5930] usb 5-1: USB disconnect, device number 20
[  242.950775][ T7679] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  242.958841][ T7679] usb 3-1: config 0 has no interface number 0
[  242.976907][ T7679] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=e7.34
[  242.999824][   T30] audit: type=1400 audit(1767111051.286:371): avc:  denied  { connect } for  pid=8035 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  243.006736][ T7679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.073482][ T7679] usb 3-1: Product: syz
[  243.077679][ T7679] usb 3-1: Manufacturer: syz
[  243.082264][ T7679] usb 3-1: SerialNumber: syz
[  243.170479][ T7679] usb 3-1: config 0 descriptor??
[  243.198870][ T7679] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  243.394738][   T30] audit: type=1400 audit(1767111051.686:372): avc:  denied  { setopt } for  pid=8054 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  243.513713][   T30] audit: type=1400 audit(1767111051.706:373): avc:  denied  { ioctl } for  pid=8054 comm="syz.0.556" path="socket:[15637]" dev="sockfs" ino=15637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  243.593675][ T8057] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  243.600211][ T8057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  243.691851][ T8057] vhci_hcd vhci_hcd.0: Device attached
[  243.786604][ T8057] syz_tun: left allmulticast mode
[  243.791684][ T8057] syz_tun: left promiscuous mode
[  243.838052][   T30] audit: type=1400 audit(1767111052.126:374): avc:  denied  { connect } for  pid=8039 comm="syz.2.551" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  243.873249][ T8057] bridge0: port 3(syz_tun) entered disabled state
[  243.873541][ T5936] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  243.964563][ T5930] usb 38-1: SetAddress Request (2) to port 0
[  243.973815][   T30] audit: type=1400 audit(1767111052.156:375): avc:  denied  { write } for  pid=8039 comm="syz.2.551" path="socket:[15643]" dev="sockfs" ino=15643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  243.997389][ T5930] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  244.005294][ T5933] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  244.075072][ T5936] usb 5-1: config 0 has an invalid interface number: 229 but max is 0
[  244.087714][ T5936] usb 5-1: config 0 has no interface number 0
[  244.096118][ T8057] bridge_slave_0: left allmulticast mode
[  244.124598][ T8057] bridge_slave_0: left promiscuous mode
[  244.133688][ T5936] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[  244.150741][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.163515][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.172857][ T5933] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  244.203271][ T5933] usb 1-1: config 6 has no interface number 0
[  244.204061][ T5936] usb 5-1: config 0 descriptor??
[  244.246505][ T5933] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  244.266289][ T8057] bridge_slave_1: left allmulticast mode
[  244.292257][ T8057] bridge_slave_1: left promiscuous mode
[  244.301021][ T5933] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  244.354420][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.382245][ T5933] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  244.435097][ T5933] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  244.448625][ T8057] bond0: (slave bond_slave_0): Releasing backup interface
[  244.456852][ T5933] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  244.508054][ T5933] usb 1-1: Product: syz
[  245.337179][ T5933] usb 1-1: Manufacturer: syz
[  245.341793][ T5933] usb 1-1: SerialNumber: syz
[  245.351980][ T8057] bond0: (slave bond_slave_1): Releasing backup interface
[  245.432432][   T30] audit: type=1400 audit(1767111053.716:376): avc:  denied  { name_bind } for  pid=8061 comm="syz.4.558" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  245.464517][ T5933] hso 1-1:6.2: Failed to find INT IN ep
[  245.476428][ T8057] team0: Port device team_slave_0 removed
[  245.489265][ T5928] usb 5-1: USB disconnect, device number 21
[  245.530691][ T8057] team0: Port device team_slave_1 removed
[  245.657971][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.783222][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.866258][ T8057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  246.027870][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'.
[  246.725797][ T7295] usb 1-1: USB disconnect, device number 16
[  247.039308][ T8058] vhci_hcd: connection reset by peer
[  247.046268][ T7700] vhci_hcd vhci_hcd.2: stop threads
[  247.057106][ T2334] pvrusb2: Invalid write control endpoint
[  247.062356][ T7679] usb 3-1: USB disconnect, device number 14
[  247.069268][ T7700] vhci_hcd vhci_hcd.2: release socket
[  247.077339][ T7700] vhci_hcd vhci_hcd.2: disconnect device
[  247.127553][ T2334] pvrusb2: Invalid write control endpoint
[  247.145114][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  247.159160][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  247.168877][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  247.179538][ T2334] pvrusb2: Device being rendered inoperable
[  247.187529][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  247.195295][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  247.208052][ T2334] pvrusb2: Attached sub-driver cx25840
[  247.301039][ T2334] pvrusb2: Attempted to execute control transfer when device not ok
[  247.312481][ T2334] pvrusb2: Attempted to execute control transfer when device not ok
[  247.323648][ T2334] pvrusb2: Attempted to execute control transfer when device not ok
[  247.484139][ T8099] binder: 8095:8099 ioctl c0306201 200000000600 returned -14
[  247.894960][ T2334] pvrusb2: Attempted to execute control transfer when device not ok
[  247.914397][ T2334] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  248.060321][ T8099] syz.2.565 (8099) used greatest stack depth: 16408 bytes left
[  248.648308][ T2334] TUNER: Unable to find symbol tda829x_probe()
[  248.938437][ T2334] DVB: Unable to find symbol tda9887_attach()
[  248.956660][ T2334] tuner: 1-0043: Tuner 4 found with type(s) Radio TV.
[  248.988557][ T2334] pvrusb2: Attached sub-driver tuner
[  249.029103][ T2334] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  249.063568][ T5930] usb 38-1: device descriptor read/8, error -110
[  249.095222][ T2334] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  249.454098][ T5930] usb usb38-port1: attempt power cycle
[  249.474939][ T7679] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  249.554069][ T7295] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  249.633529][ T7679] usb 3-1: Using ep0 maxpacket: 16
[  249.640356][ T7679] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  249.654618][ T7679] usb 3-1: config 1 has no interface number 0
[  249.667352][ T7679] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  249.688568][ T7679] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  249.709116][ T7679] usb 3-1: config 1 interface 105 has no altsetting 0
[  249.716135][ T7295] usb 5-1: Using ep0 maxpacket: 32
[  249.727410][ T7295] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  249.746812][ T7679] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  249.757511][ T7295] usb 5-1: config 0 has no interface number 0
[  249.768356][ T7679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.776485][ T7295] usb 5-1: config 0 interface 184 has no altsetting 0
[  249.783613][ T7679] usb 3-1: Product: syz
[  249.788488][ T7679] usb 3-1: Manufacturer: syz
[  249.797954][ T7295] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  249.809181][ T7679] usb 3-1: SerialNumber: syz
[  249.818984][ T8116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  249.827963][ T7295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.842805][ T8116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  249.853236][ T7295] usb 5-1: Product: syz
[  249.861439][ T7295] usb 5-1: Manufacturer: syz
[  249.870495][ T7295] usb 5-1: SerialNumber: syz
[  249.883357][ T7295] usb 5-1: config 0 descriptor??
[  249.894910][ T7295] smsc75xx v1.0.0
[  250.014156][ T5930] usb usb38-port1: unable to enumerate USB device
[  250.273021][ T8116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  250.294878][ T8116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  250.308755][   T30] audit: type=1400 audit(1767111058.596:377): avc:  denied  { setopt } for  pid=8128 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  250.355905][   T30] audit: type=1400 audit(1767111058.626:378): avc:  denied  { bind } for  pid=8128 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  250.576124][ T7679] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0
[  250.595566][ T7679] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61
[  250.648609][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  250.686457][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  250.697834][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  250.721057][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  250.735793][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  250.748657][ T7295] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  250.761347][ T7295] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  250.797692][ T7295] usb 5-1: USB disconnect, device number 22
[  251.389266][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  251.633851][ T5928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  251.696325][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.727704][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  251.748974][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.763033][ T5928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  251.780437][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  251.798442][ T5928] usb 2-1: Product: syz
[  251.807083][ T5928] usb 2-1: Manufacturer: syz
[  251.816359][   T24] usb 3-1: USB disconnect, device number 15
[  251.841997][ T5928] cdc_wdm 2-1:1.0: skipping garbage
[  251.875250][ T5928] cdc_wdm 2-1:1.0: skipping garbage
[  251.938395][ T5928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  251.996026][ T5928] cdc_wdm 2-1:1.0: Unknown control protocol
[  252.266757][   T24] usb 2-1: USB disconnect, device number 10
[  252.786347][   T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  253.064547][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.094685][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  253.194645][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.224965][   T24] usb 5-1: config 0 descriptor??
[  253.483081][ T8169] bridge0: port 3(syz_tun) entered blocking state
[  253.517326][ T8169] bridge0: port 3(syz_tun) entered disabled state
[  253.586722][ T8169] syz_tun: entered allmulticast mode
[  253.615035][ T8169] syz_tun: entered promiscuous mode
[  253.638295][ T8183] binder: 8166:8183 ioctl 4018620d 0 returned -22
[  253.656068][ T8169] bridge0: port 3(syz_tun) entered blocking state
[  253.662605][ T8169] bridge0: port 3(syz_tun) entered forwarding state
[  253.971254][   T24] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  254.034821][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.592'.
[  254.073572][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input15
[  254.157670][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.233628][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.334652][   T24] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  254.613537][ T7679] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  255.233911][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.905841][ T5877] usb 5-1: USB disconnect, device number 23
[  255.963539][ T7679] usb 2-1: Using ep0 maxpacket: 16
[  255.996431][ T7679] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  256.043479][ T7679] usb 2-1: config 1 has no interface number 0
[  256.074775][ T7679] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  256.117440][ T7679] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  256.204470][ T8203] atomic_op ffff888054c0d998 conn xmit_atomic 0000000000000000
[  256.463890][ T7679] usb 2-1: config 1 interface 105 has no altsetting 0
[  256.480596][ T7679] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  256.502206][ T7679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.535354][ T7679] usb 2-1: Product: syz
[  256.553986][ T7679] usb 2-1: Manufacturer: syz
[  256.571187][ T7679] usb 2-1: SerialNumber: syz
[  256.605376][ T8192] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  256.649383][ T8192] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  256.878089][ T8209] futex_wake_op: syz.0.600 tries to shift op by -1; fix this program
[  256.940545][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'.
[  257.653842][ T7679] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  257.702144][ T7679] usb 2-1: USB disconnect, device number 11
[  258.426022][ T8223] atomic_op ffff88805880c998 conn xmit_atomic 0000000000000000
[  259.223566][   T30] audit: type=1400 audit(1767111067.506:379): avc:  denied  { setopt } for  pid=8233 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.495402][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'.
[  259.507582][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'.
[  260.070034][ T8240] could not allocate digest TFM handle cryptd(blake2b-160)
[  260.444714][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'.
[  260.953625][ T5933] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  261.127262][ T5933] usb 5-1: Using ep0 maxpacket: 16
[  261.153298][ T5933] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  261.202872][ T5933] usb 5-1: config 1 has no interface number 0
[  261.229342][ T8269] atomic_op ffff88807ca3c998 conn xmit_atomic 0000000000000000
[  261.253870][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  261.267010][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  261.521050][ T5933] usb 5-1: config 1 interface 105 has no altsetting 0
[  261.535826][ T5933] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  261.563308][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.592058][ T5933] usb 5-1: Product: syz
[  261.607509][ T5933] usb 5-1: Manufacturer: syz
[  261.625060][ T5933] usb 5-1: SerialNumber: syz
[  261.646922][ T8257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.669953][ T8257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.604514][ T8281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.611749][ T8281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.078538][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[  263.093108][ T8289] exfat: Unknown parameter 'dmlIýç
[  263.093108][ T8289] s";ô¤Ûc§à—û߀Ì+üh6CGå{ô'Xú—‘¼²hÝèÂ0³ƒêºÞµX4Žž¾Îž.!'
[  263.519072][ T5933] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3
[  263.534163][ T5933] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61
[  263.568286][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  263.594829][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  263.643690][   T30] audit: type=1400 audit(1767111071.856:380): avc:  denied  { bind } for  pid=8290 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  263.766324][   T30] audit: type=1400 audit(1767111071.856:381): avc:  denied  { name_bind } for  pid=8290 comm="syz.2.624" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  263.830576][   T30] audit: type=1400 audit(1767111071.856:382): avc:  denied  { node_bind } for  pid=8290 comm="syz.2.624" saddr=172.20.20.38 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  265.059835][  T931] usb 5-1: USB disconnect, device number 24
[  267.213804][ T5933] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  267.413538][ T5933] usb 3-1: Using ep0 maxpacket: 32
[  267.422770][ T5933] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  267.455118][ T5933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.495071][ T5933] usb 3-1: config 0 has no interface number 0
[  267.511444][ T5933] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.536393][ T5933] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  267.639428][ T8330] fuse: Bad value for 'fd'
[  267.772024][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.791596][ T5933] usb 3-1: Product: syz
[  267.799638][ T5933] usb 3-1: Manufacturer: syz
[  267.809178][ T5933] usb 3-1: SerialNumber: syz
[  268.236598][ T5933] usb 3-1: config 0 descriptor??
[  268.321094][ T5933] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  268.346204][ T5933] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  268.856624][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.868175][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.906254][ T5814] Bluetooth: to_multiplier 0 < 10
[  269.070297][ T5933] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  269.084173][ T5933] usbhid 3-1:0.35: couldn't find an input interrupt endpoint
[  269.544393][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  269.943641][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  269.950381][ T5928] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  269.960726][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.971632][ T5928] usb 5-1: config 0 descriptor??
[  269.983844][ T5928] as10x_usb: device has been detected
[  269.989906][ T5928] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  270.006524][ T5928] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  270.035652][ T5928] as10x_usb: error during firmware upload part1
[  270.042591][ T5928] Registered device nBox DVB-T Dongle
[  270.156505][ T5877] usb 3-1: USB disconnect, device number 16
[  270.180922][   T30] audit: type=1400 audit(1767111078.466:383): avc:  denied  { ioctl } for  pid=8357 comm="syz.4.635" path="socket:[16928]" dev="sockfs" ino=16928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  270.264061][ T5933] usb 5-1: USB disconnect, device number 25
[  270.307957][ T5933] Unregistered device nBox DVB-T Dongle
[  270.318149][ T5933] as10x_usb: device has been disconnected
[  271.259384][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  271.618389][   T30] audit: type=1400 audit(1767111079.906:384): avc:  denied  { ioctl } for  pid=8367 comm="syz.2.644" path="socket:[16942]" dev="sockfs" ino=16942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  272.126540][ T5933] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  272.525018][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.550316][ T5933] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  272.572063][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.604625][ T5933] usb 1-1: config 0 descriptor??
[  272.934965][ T8382] bridge0: port 3(syz_tun) entered blocking state
[  272.979784][ T8382] bridge0: port 3(syz_tun) entered disabled state
[  273.006010][ T8387] binder: 8380:8387 ioctl 4018620d 0 returned -22
[  273.011254][ T8382] syz_tun: entered allmulticast mode
[  273.048708][ T8382] syz_tun: entered promiscuous mode
[  273.091770][ T8382] bridge0: port 3(syz_tun) entered blocking state
[  273.098329][ T8382] bridge0: port 3(syz_tun) entered forwarding state
[  273.310311][ T5933] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  273.311577][ T8398] netlink: 'syz.3.652': attribute type 10 has an invalid length.
[  273.321761][ T5933] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input16
[  273.421746][ T8402] random: crng reseeded on system resumption
[  273.812982][ T8398] netlink: 'syz.3.652': attribute type 10 has an invalid length.
[  273.824360][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  273.835208][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.858894][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.906221][ T5933] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  274.045888][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.104447][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  274.207873][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.225678][   T24] usb 2-1: config 0 descriptor??
[  274.246087][ T5933] usb 1-1: USB disconnect, device number 17
[  274.503183][ T8389] bridge0: port 3(syz_tun) entered blocking state
[  274.532187][ T8389] bridge0: port 3(syz_tun) entered disabled state
[  274.563548][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  274.922562][ T8389] syz_tun: entered allmulticast mode
[  274.961093][ T8412] binder: 8388:8412 ioctl 4018620d 0 returned -22
[  274.969741][ T8389] syz_tun: entered promiscuous mode
[  274.994329][ T8389] bridge0: port 3(syz_tun) entered blocking state
[  275.000865][ T8389] bridge0: port 3(syz_tun) entered forwarding state
[  275.152971][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  275.160199][ T5928] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  275.193765][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.204394][ T5928] usb 5-1: config 0 has no interface number 0
[  275.259898][ T5928] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  275.285803][ T5928] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  275.295423][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.303716][ T5928] usb 5-1: Product: syz
[  275.314887][ T5928] usb 5-1: Manufacturer: syz
[  275.325553][ T5928] usb 5-1: SerialNumber: syz
[  275.450510][ T5928] usb 5-1: config 0 descriptor??
[  275.476199][   T24] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  275.485764][ T5928] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  275.919119][ T5928] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  275.930460][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.931144][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input17
[  276.013997][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.358846][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.367707][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.383069][ T5826] Bluetooth: to_multiplier 0 < 10
[  276.679500][ T5928] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  276.712567][ T5136] Bluetooth: to_multiplier 0 < 10
[  276.813235][ T5928] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  276.840448][   T24] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  277.205270][ T5933] usb 2-1: USB disconnect, device number 12
[  277.454408][ T5928] usb 5-1: USB disconnect, device number 26
[  278.599526][ T5877] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  278.743498][ T5814] Bluetooth: hci2: command 0x0406 tx timeout
[  278.743530][ T5814] Bluetooth: hci4: command 0x0405 tx timeout
[  279.102741][ T8449] capability: warning: `syz.0.663' uses deprecated v2 capabilities in a way that may be insecure
[  279.173495][ T5877] usb 2-1: Using ep0 maxpacket: 16
[  279.179982][ T5877] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  279.322885][ T5877] usb 2-1: config 1 has no interface number 0
[  279.403115][ T5877] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  279.414110][ T5877] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  279.463792][ T5877] usb 2-1: config 1 interface 105 has no altsetting 0
[  279.499232][ T5877] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  279.523581][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.531601][ T5877] usb 2-1: Product: syz
[  279.553646][ T5877] usb 2-1: Manufacturer: syz
[  279.563515][ T5877] usb 2-1: SerialNumber: syz
[  279.625732][ T8443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  279.664157][ T8443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  280.471114][ T8443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  280.640859][ T8443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  280.923638][ T5877] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3
[  280.954476][ T5877] aqc111 2-1:1.105: probe with driver aqc111 failed with error -61
[  282.697195][ T5933] usb 2-1: USB disconnect, device number 13
[  282.807409][   T30] audit: type=1800 audit(1767111091.086:385): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.681" name="nullb0" dev="tmpfs" ino=735 res=0 errno=0
[  285.266072][   T30] audit: type=1400 audit(1767111093.546:386): avc:  denied  { write } for  pid=8517 comm="syz.4.686" path="socket:[17159]" dev="sockfs" ino=17159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  285.905456][ T5928] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  286.073648][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  286.081989][ T5928] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  286.505563][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.570028][ T5928] usb 5-1: config 0 has no interface number 0
[  286.591786][ T5928] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  286.641611][ T5928] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  286.664188][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.682468][ T5928] usb 5-1: Product: syz
[  286.696853][ T5928] usb 5-1: Manufacturer: syz
[  286.710758][ T5928] usb 5-1: SerialNumber: syz
[  286.724126][ T5928] usb 5-1: config 0 descriptor??
[  286.739728][ T5928] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  286.754670][ T5928] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  286.884166][ T7679] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  287.343700][ T7679] usb 1-1: Using ep0 maxpacket: 16
[  287.354376][ T7679] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  287.362557][ T7679] usb 1-1: config 1 has no interface number 0
[  287.393744][ T5928] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  287.472202][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.482294][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.573757][ T5826] Bluetooth: to_multiplier 0 < 10
[  287.773278][ T5928] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  287.824035][ T7679] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  287.840696][ T7679] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  287.850973][ T7679] usb 1-1: config 1 interface 105 has no altsetting 0
[  287.860245][ T7679] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  287.878726][ T7679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.886914][ T7679] usb 1-1: Product: syz
[  287.891207][ T7679] usb 1-1: Manufacturer: syz
[  287.898111][ T7679] usb 1-1: SerialNumber: syz
[  287.906413][ T8539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  287.914028][ T8539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  288.292187][ T8549] binder: 8546:8549 ioctl c0306201 200000000600 returned -14
[  288.668381][ T8539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  288.693674][ T8539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  288.790982][ T7679] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5
[  288.897232][ T6454] usb 5-1: USB disconnect, device number 27
[  288.906425][ T7679] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61
[  289.263341][ T8552] fuse: Bad value for 'fd'
[  289.633489][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  290.035637][ T5928] usb 1-1: USB disconnect, device number 18
[  290.298605][ T8579] random: crng reseeded on system resumption
[  291.610753][ T8590] binder: 8583:8590 ioctl c0306201 200000000600 returned -14
[  295.444024][ T8651] binder: 8644:8651 ioctl c0306201 200000000600 returned -14
[  296.985917][   T30] audit: type=1400 audit(1767111105.276:387): avc:  denied  { create } for  pid=8676 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  297.115074][   T30] audit: type=1400 audit(1767111105.306:388): avc:  denied  { sys_admin } for  pid=8676 comm="syz.2.729" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  297.588233][   T30] audit: type=1400 audit(1767111105.876:389): avc:  denied  { module_request } for  pid=8682 comm="syz.4.730" kmod="net-pf-2-proto-3-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  299.466165][   T30] audit: type=1400 audit(1767111107.706:390): avc:  denied  { setopt } for  pid=8698 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  299.815230][ T8706] binder: 8700:8706 ioctl c0306201 200000000600 returned -14
[  300.218718][   T30] audit: type=1400 audit(1767111108.506:391): avc:  denied  { create } for  pid=8704 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  300.343910][   T30] audit: type=1400 audit(1767111108.526:392): avc:  denied  { setopt } for  pid=8704 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  300.911717][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  300.921760][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  300.935815][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  300.947076][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  300.957464][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  300.975724][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.738'.
[  302.998599][ T8747] capability: warning: `syz.2.745' uses 32-bit capabilities (legacy support in use)
[  304.722241][ T8761] binder: 8754:8761 ioctl c0306201 200000000600 returned -14
[  305.088497][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.095983][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.490661][ T8774] random: crng reseeded on system resumption
[  306.508263][ T8780] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  308.706118][ T8807] random: crng reseeded on system resumption
[  309.554512][ T8817] netlink: 'syz.2.763': attribute type 10 has an invalid length.
[  309.605304][ T8819] netlink: 'syz.2.763': attribute type 10 has an invalid length.
[  309.627512][ T8819] team0: Port device netdevsim0 removed
[  309.764258][ T8819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  312.853753][ T7295] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  313.068753][ T7295] usb 5-1: Using ep0 maxpacket: 8
[  313.116572][ T7295] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  313.125832][ T7295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.156058][ T7295] usb 5-1: Product: syz
[  313.163626][ T7295] usb 5-1: Manufacturer: syz
[  313.182172][ T7295] usb 5-1: SerialNumber: syz
[  313.203608][ T7295] usb 5-1: config 0 descriptor??
[  313.426465][ T7295] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  313.512264][ T8855] fuse: Bad value for 'fd'
[  314.341007][ T8875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.778'.
[  314.904470][ T7295] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  315.353689][ T7295] usb 5-1: USB disconnect, device number 28
[  316.734562][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  318.020997][ T8916] bridge0: port 3(syz_tun) entered blocking state
[  318.180615][ T8916] bridge0: port 3(syz_tun) entered disabled state
[  318.199800][ T8916] syz_tun: entered allmulticast mode
[  318.215366][ T8916] syz_tun: entered promiscuous mode
[  318.220977][ T8916] bridge0: port 3(syz_tun) entered blocking state
[  318.227484][ T8916] bridge0: port 3(syz_tun) entered forwarding state
[  326.577688][ T9007] netlink: 'syz.2.809': attribute type 10 has an invalid length.
[  326.595330][ T9007] bond0: (slave netdevsim0): Releasing backup interface
[  326.616364][ T9007] team0: Port device netdevsim0 added
[  326.637599][ T9007] netlink: 'syz.2.809': attribute type 10 has an invalid length.
[  326.782219][ T9007] team0: Port device netdevsim0 removed
[  326.803766][ T9007] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  327.443478][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  327.733687][   T24] usb 2-1: Using ep0 maxpacket: 16
[  328.717565][   T24] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  328.746715][   T24] usb 2-1: config 1 has no interface number 0
[  328.767321][   T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  328.798225][   T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  328.824014][   T24] usb 2-1: config 1 interface 105 has no altsetting 0
[  328.842994][   T24] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  328.883474][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.901649][   T24] usb 2-1: Product: syz
[  328.911734][   T24] usb 2-1: Manufacturer: syz
[  328.931926][   T24] usb 2-1: SerialNumber: syz
[  328.949607][ T9012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  328.967481][ T9012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  329.770506][ T9026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  329.833629][ T9026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  330.991700][   T24] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  331.042666][   T24] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  332.005780][   T24] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  332.038282][   T24] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:49:f4:6a:d1:b5
[  332.129545][   T24] usb 2-1: USB disconnect, device number 14
[  332.144814][   T24] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  332.234530][   T24] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  332.257879][   T24] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  332.293554][   T24] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  332.306134][ T9042] FAULT_INJECTION: forcing a failure.
[  332.306134][ T9042] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  332.328566][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.2.822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.328598][ T9042] Tainted: [L]=SOFTLOCKUP
[  332.328603][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  332.328613][ T9042] Call Trace:
[  332.328619][ T9042]  <TASK>
[  332.328625][ T9042]  dump_stack_lvl+0x16c/0x1f0
[  332.328651][ T9042]  should_fail_ex+0x512/0x640
[  332.328679][ T9042]  copy_fpstate_to_sigframe+0x827/0xad0
[  332.328709][ T9042]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  332.328739][ T9042]  ? posixtimer_deliver_signal+0x1c7/0x6b0
[  332.328764][ T9042]  ? x86_task_fpu+0x5f/0x90
[  332.328788][ T9042]  get_sigframe+0x4a8/0x9c0
[  332.328813][ T9042]  ? __pfx_get_sigframe+0x10/0x10
[  332.328834][ T9042]  ? rcu_is_watching+0x12/0xc0
[  332.328849][ T9042]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.328867][ T9042]  ? siginfo_layout+0x177/0x290
[  332.328893][ T9042]  x64_setup_rt_frame+0x129/0xcf0
[  332.328919][ T9042]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  332.328948][ T9042]  arch_do_signal_or_restart+0x5da/0x7e0
[  332.328971][ T9042]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  332.328999][ T9042]  ? __pfx_do_preadv+0x10/0x10
[  332.329023][ T9042]  exit_to_user_mode_loop+0x8c/0x540
[  332.329049][ T9042]  do_syscall_64+0x4ee/0xf80
[  332.329070][ T9042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.329086][ T9042] RIP: 0033:0x7fc6aab8f747
[  332.329100][ T9042] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  332.329115][ T9042] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  332.329131][ T9042] RAX: 0000000000000147 RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  332.329141][ T9042] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  332.329150][ T9042] RBP: 00007fc6ab9f1090 R08: 0000000000008000 R09: 0000000000000000
[  332.329159][ T9042] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  332.329168][ T9042] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  332.329191][ T9042]  </TASK>
[  333.603538][ T9052] binder: 9046:9052 ioctl c0306201 200000000600 returned -14
[  333.964626][ T5877] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  334.323463][ T5877] usb 1-1: Using ep0 maxpacket: 16
[  334.336170][ T5877] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  334.353552][ T5877] usb 1-1: config 1 has no interface number 0
[  334.359868][ T5877] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  334.383455][ T5877] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  334.429001][ T9066] netlink: 'syz.4.826': attribute type 10 has an invalid length.
[  334.436868][ T9066] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  334.446317][ T9066] team0: Port device netdevsim0 added
[  334.457028][ T9066] netlink: 'syz.4.826': attribute type 10 has an invalid length.
[  334.528869][ T5877] usb 1-1: config 1 interface 105 has no altsetting 0
[  334.549988][ T5877] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  334.563655][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.611071][ T5877] usb 1-1: Product: syz
[  334.619259][ T9066] team0: Port device netdevsim0 removed
[  334.636796][ T9066] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  334.694269][ T5877] usb 1-1: Manufacturer: syz
[  334.813458][ T5877] usb 1-1: SerialNumber: syz
[  334.821250][ T9056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  334.843910][ T9056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  335.646282][ T9056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  335.691295][ T9056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  336.091727][   T30] audit: type=1326 audit(1767111144.376:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.2.831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6aab8f749 code=0x0
[  337.738690][ T5877] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  337.832165][ T5877] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:c8:1d:e6:eb:63
[  337.890920][ T5877] usb 1-1: USB disconnect, device number 19
[  337.924205][ T5877] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  338.111320][ T7295] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  338.124703][ T5877] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  338.155122][ T5877] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  338.173855][ T5877] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  338.644103][ T7295] usb 5-1: Using ep0 maxpacket: 16
[  338.658011][ T7295] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  338.674831][ T7295] usb 5-1: config 1 has no interface number 0
[  338.688297][ T7295] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  338.713813][ T7295] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  338.728498][ T7295] usb 5-1: config 1 interface 105 has no altsetting 0
[  338.738472][ T7295] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  338.748100][ T7295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.756401][ T7295] usb 5-1: Product: syz
[  338.760806][ T7295] usb 5-1: Manufacturer: syz
[  338.765565][ T7295] usb 5-1: SerialNumber: syz
[  338.790064][ T9090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  338.812990][ T9090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.064205][ T9104] binder: 9099:9104 ioctl c0306201 200000000600 returned -14
[  339.653852][ T9090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.671405][ T9090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.771122][ T9117] netlink: 'syz.3.840': attribute type 10 has an invalid length.
[  339.779725][ T9117] netlink: 'syz.3.840': attribute type 10 has an invalid length.
[  339.811321][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  339.975374][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.988480][ T9120] FAULT_INJECTION: forcing a failure.
[  339.988480][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.988724][ T5877] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  340.054632][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.2.844 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.054662][ T9120] Tainted: [L]=SOFTLOCKUP
[  340.054667][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  340.054677][ T9120] Call Trace:
[  340.054683][ T9120]  <TASK>
[  340.054690][ T9120]  dump_stack_lvl+0x16c/0x1f0
[  340.054716][ T9120]  should_fail_ex+0x512/0x640
[  340.054747][ T9120]  _copy_from_user+0x2e/0xd0
[  340.054772][ T9120]  __sys_bpf+0x248/0x4980
[  340.054800][ T9120]  ? __pfx___sys_bpf+0x10/0x10
[  340.054821][ T9120]  ? find_held_lock+0x2b/0x80
[  340.054850][ T9120]  ? find_held_lock+0x2b/0x80
[  340.054879][ T9120]  ? __mutex_unlock_slowpath+0x161/0x790
[  340.054915][ T9120]  ? fput+0x70/0xf0
[  340.054930][ T9120]  ? ksys_write+0x1ac/0x250
[  340.054950][ T9120]  ? __pfx_ksys_write+0x10/0x10
[  340.054974][ T9120]  __x64_sys_bpf+0x78/0xc0
[  340.054995][ T9120]  ? lockdep_hardirqs_on+0x7c/0x110
[  340.055015][ T9120]  do_syscall_64+0xcd/0xf80
[  340.055036][ T9120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.055050][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.055053][ T9120] RIP: 0033:0x7fc6aab8f749
[  340.055067][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.055082][ T9120] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  340.055096][ T9120] RAX: ffffffffffffffda RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  340.055104][ T9120] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[  340.055112][ T9120] RBP: 00007fc6ab9f1090 R08: 0000000000000000 R09: 0000000000000000
[  340.055120][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.055128][ T9120] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  340.055149][ T9120]  </TASK>
[  340.092668][ T7295] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  340.460246][ T5877] usb 2-1: config 0 descriptor??
[  340.493923][ T7295] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  340.532118][ T7295] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  340.544829][ T9122] sg_write: process 672 (syz.2.845) changed security contexts after opening file descriptor, this is not allowed.
[  340.576777][ T7295] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:09:47:67:75:03
[  340.625906][ T7295] usb 5-1: USB disconnect, device number 29
[  340.654540][ T7295] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  340.673237][ T9110] binder: 9109:9110 ioctl 4018620d 0 returned -22
[  340.699574][   T30] audit: type=1400 audit(1767111148.986:394): avc:  denied  { search } for  pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  340.750598][   T30] audit: type=1400 audit(1767111149.016:395): avc:  denied  { search } for  pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  340.800713][   T30] audit: type=1400 audit(1767111149.016:396): avc:  denied  { search } for  pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  340.883953][ T5877] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  340.896861][ T5877] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input18
[  340.903858][ T7295] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  340.959610][   T30] audit: type=1400 audit(1767111149.016:397): avc:  denied  { read } for  pid=5480 comm="dhcpcd" name="n104" dev="tmpfs" ino=4454 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  340.992207][ T7295] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  341.057586][   T30] audit: type=1400 audit(1767111149.016:398): avc:  denied  { open } for  pid=5480 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4454 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  341.062464][ T7295] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  341.082340][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.140468][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.180027][ T5877] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  341.206068][   T30] audit: type=1400 audit(1767111149.016:399): avc:  denied  { getattr } for  pid=5480 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4454 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  341.280917][   T30] audit: type=1400 audit(1767111149.486:400): avc:  denied  { read open } for  pid=9132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  341.307548][   T49] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  341.587823][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  341.713504][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.744887][   T24] usb 2-1: USB disconnect, device number 15
[  341.758468][   T30] audit: type=1400 audit(1767111149.486:401): avc:  denied  { getattr } for  pid=9132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  341.785384][   T49] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  341.837145][   T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.864523][   T49] usb 1-1: config 0 descriptor??
[  342.351898][   T30] audit: type=1400 audit(1767111150.636:402): avc:  denied  { add_name } for  pid=9130 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  342.502787][ T9157] binder: 9148:9157 ioctl c0306201 200000000600 returned -14
[  342.557709][   T49] usbhid 1-1:0.0: can't add hid device: -71
[  342.656057][   T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  342.715092][   T30] audit: type=1400 audit(1767111150.666:403): avc:  denied  { create } for  pid=9130 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  342.792972][   T49] usb 1-1: USB disconnect, device number 20
[  342.841435][   T30] audit: type=1400 audit(1767111150.666:404): avc:  denied  { write } for  pid=9130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  343.012794][   T30] audit: type=1400 audit(1767111150.676:405): avc:  denied  { append } for  pid=9130 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  343.613893][   T30] audit: type=1400 audit(1767111151.886:406): avc:  denied  { remove_name } for  pid=9163 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  343.963471][   T30] audit: type=1400 audit(1767111151.896:407): avc:  denied  { unlink } for  pid=9163 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  344.433578][   T49] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  344.583781][   T49] usb 1-1: Using ep0 maxpacket: 16
[  344.603109][   T49] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  344.614462][   T49] usb 1-1: config 1 has no interface number 0
[  344.641703][   T49] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  344.798471][   T49] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  344.853555][   T49] usb 1-1: config 1 interface 105 has no altsetting 0
[  344.864933][   T49] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  344.914922][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.923281][   T49] usb 1-1: Product: syz
[  344.928248][   T49] usb 1-1: Manufacturer: syz
[  344.932856][   T49] usb 1-1: SerialNumber: syz
[  344.945390][ T9177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  344.978719][ T9177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  345.349752][ T9207] random: crng reseeded on system resumption
[  345.708989][ T9177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  345.717322][ T9177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  346.197185][ T5826] Bluetooth: to_multiplier 0 < 10
[  346.527598][   T49] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  346.550619][   T49] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  346.563119][   T49] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  346.605759][   T49] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:c2:9e:99:a8:e7
[  346.654745][   T49] usb 1-1: USB disconnect, device number 21
[  346.662077][   T49] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  346.784522][   T49] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  346.794626][   T49] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  346.834570][   T49] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  347.364423][ T9229] binder: 9223:9229 ioctl c0306201 200000000600 returned -14
[  347.464913][   T49] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  348.225029][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.255087][   T49] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  348.264210][ T5826] Bluetooth: hci4: command 0x0405 tx timeout
[  348.274160][   T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.299007][   T49] usb 1-1: config 0 descriptor??
[  348.555637][ T9221] binder: 9219:9221 ioctl 4018620d 0 returned -22
[  348.573655][ T6454] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  348.989231][   T49] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  349.004621][   T49] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input19
[  349.012418][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.044166][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.234831][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  349.256276][   T49] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  349.609393][ T6454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.679575][   T49] usb 1-1: USB disconnect, device number 22
[  349.795965][ T6454] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  349.973521][ T6454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.949151][ T6454] usb 5-1: config 0 descriptor??
[  350.971962][ T9251] fido_id[9251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  352.053701][ T9273] FAULT_INJECTION: forcing a failure.
[  352.053701][ T9273] name failslab, interval 1, probability 0, space 0, times 0
[  352.103853][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.2.875 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  352.103882][ T9273] Tainted: [L]=SOFTLOCKUP
[  352.103887][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.103896][ T9273] Call Trace:
[  352.103902][ T9273]  <TASK>
[  352.103908][ T9273]  dump_stack_lvl+0x16c/0x1f0
[  352.103934][ T9273]  should_fail_ex+0x512/0x640
[  352.103959][ T9273]  ? kmem_cache_alloc_noprof+0x62/0x770
[  352.103979][ T9273]  should_failslab+0xc2/0x120
[  352.104001][ T9273]  kmem_cache_alloc_noprof+0x83/0x770
[  352.104018][ T9273]  ? getname_flags.part.0+0x4c/0x550
[  352.104038][ T9273]  ? getname_flags.part.0+0x4c/0x550
[  352.104053][ T9273]  getname_flags.part.0+0x4c/0x550
[  352.104071][ T9273]  getname_uflags+0x98/0xf0
[  352.104092][ T9273]  __x64_sys_execveat+0xc4/0x120
[  352.104117][ T9273]  do_syscall_64+0xcd/0xf80
[  352.104140][ T9273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.104157][ T9273] RIP: 0033:0x7fc6aab8f749
[  352.104170][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.104186][ T9273] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  352.104203][ T9273] RAX: ffffffffffffffda RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  352.104214][ T9273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  352.104224][ T9273] RBP: 00007fc6ab9f1090 R08: 0000000000001000 R09: 0000000000000000
[  352.104233][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.104243][ T9273] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  352.104267][ T9273]  </TASK>
[  352.196602][ T6454] usbhid 5-1:0.0: can't add hid device: -71
[  352.548134][ T6454] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  352.558913][ T6454] usb 5-1: USB disconnect, device number 30
[  352.621939][ T7295] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  352.934211][ T7295] usb 2-1: Using ep0 maxpacket: 32
[  353.072922][ T7295] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  353.089671][ T7295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  353.126880][ T7295] usb 2-1: config 0 has no interface number 0
[  353.166327][ T7295] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  353.249468][ T7295] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  353.322805][ T7295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.369047][ T7295] usb 2-1: Product: syz
[  353.393579][ T7295] usb 2-1: Manufacturer: syz
[  353.407181][ T7295] usb 2-1: SerialNumber: syz
[  353.428944][ T7295] usb 2-1: config 0 descriptor??
[  353.448825][ T7295] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  353.518177][ T9284] random: crng reseeded on system resumption
[  353.740816][ T7295] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  353.978274][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.988013][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.393816][ T7295] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  354.402095][ T7295] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[  355.819459][ T7679] usb 2-1: USB disconnect, device number 16
[  357.553507][ T5928] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  357.803719][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.996704][ T5928] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  358.047813][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.198115][ T9344] binder: 9341:9344 ioctl c0306201 200000000600 returned -14
[  358.520641][ T5928] usb 1-1: config 0 descriptor??
[  358.856631][ T9334] binder: 9333:9334 ioctl 4018620d 0 returned -22
[  359.761185][ T5928] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[  359.917194][ T5928] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input20
[  359.952549][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.307729][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.865561][ T5928] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  361.042038][ T5928] usb 1-1: USB disconnect, device number 23
[  361.532569][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.554122][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.708827][ T9385] FAULT_INJECTION: forcing a failure.
[  361.708827][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.783716][ T9385] CPU: 1 UID: 0 PID: 9385 Comm: syz.1.901 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.783747][ T9385] Tainted: [L]=SOFTLOCKUP
[  361.783753][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  361.783763][ T9385] Call Trace:
[  361.783769][ T9385]  <TASK>
[  361.783776][ T9385]  dump_stack_lvl+0x16c/0x1f0
[  361.783802][ T9385]  should_fail_ex+0x512/0x640
[  361.783832][ T9385]  _copy_to_user+0x32/0xd0
[  361.783860][ T9385]  bpf_prog_test_run_syscall+0x5ec/0xb20
[  361.783884][ T9385]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  361.783906][ T9385]  ? fput+0x70/0xf0
[  361.783920][ T9385]  ? __bpf_prog_get+0x97/0x2a0
[  361.783939][ T9385]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  361.783967][ T9385]  __sys_bpf+0x1035/0x4980
[  361.783994][ T9385]  ? __pfx___sys_bpf+0x10/0x10
[  361.784017][ T9385]  ? find_held_lock+0x2b/0x80
[  361.784047][ T9385]  ? find_held_lock+0x2b/0x80
[  361.784078][ T9385]  ? __mutex_unlock_slowpath+0x161/0x790
[  361.784115][ T9385]  ? fput+0x70/0xf0
[  361.784134][ T9385]  ? ksys_write+0x1ac/0x250
[  361.784154][ T9385]  ? __pfx_ksys_write+0x10/0x10
[  361.784179][ T9385]  __x64_sys_bpf+0x78/0xc0
[  361.784202][ T9385]  ? lockdep_hardirqs_on+0x7c/0x110
[  361.784223][ T9385]  do_syscall_64+0xcd/0xf80
[  361.784245][ T9385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.784262][ T9385] RIP: 0033:0x7fbc7398f749
[  361.784277][ T9385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.784293][ T9385] RSP: 002b:00007fbc747a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  361.784311][ T9385] RAX: ffffffffffffffda RBX: 00007fbc73be5fa0 RCX: 00007fbc7398f749
[  361.784322][ T9385] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[  361.784332][ T9385] RBP: 00007fbc747a8090 R08: 0000000000000000 R09: 0000000000000000
[  361.784343][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.784352][ T9385] R13: 00007fbc73be6038 R14: 00007fbc73be5fa0 R15: 00007ffcdf917a98
[  361.784377][ T9385]  </TASK>
[  362.093572][ T9372] fido_id[9372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  362.765997][ T6454] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  363.205064][ T6454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  364.070880][ T6454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.107566][ T6454] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  364.230335][ T6454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.272587][ T6454] usb 3-1: config 0 descriptor??
[  364.922303][ T6454] usbhid 3-1:0.0: can't add hid device: -71
[  365.140248][ T6454] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  365.153511][ T6454] usb 3-1: USB disconnect, device number 17
[  366.989961][ T9421] random: crng reseeded on system resumption
[  367.022566][ T9432] FAULT_INJECTION: forcing a failure.
[  367.022566][ T9432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.091434][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.2.913 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.091464][ T9432] Tainted: [L]=SOFTLOCKUP
[  367.091470][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  367.091480][ T9432] Call Trace:
[  367.091486][ T9432]  <TASK>
[  367.091494][ T9432]  dump_stack_lvl+0x16c/0x1f0
[  367.091520][ T9432]  should_fail_ex+0x512/0x640
[  367.091554][ T9432]  _copy_from_user+0x2e/0xd0
[  367.091579][ T9432]  vti6_siocdevprivate+0x23a/0x660
[  367.091607][ T9432]  ? __pfx_vti6_siocdevprivate+0x10/0x10
[  367.091647][ T9432]  ? full_name_hash+0xbc/0x110
[  367.091673][ T9432]  ? netdev_name_node_lookup+0x127/0x180
[  367.091701][ T9432]  dev_ifsioc+0x8ee/0x1f70
[  367.091721][ T9432]  ? __pfx_dev_ifsioc+0x10/0x10
[  367.091735][ T9432]  ? __pfx___mutex_lock+0x10/0x10
[  367.091757][ T9432]  ? irqentry_exit+0x1dd/0x8c0
[  367.091795][ T9432]  dev_ioctl+0x1b2/0x10e0
[  367.091814][ T9432]  sock_ioctl+0x5b3/0x6b0
[  367.091837][ T9432]  ? __pfx_sock_ioctl+0x10/0x10
[  367.091856][ T9432]  ? hook_file_ioctl_common+0x144/0x410
[  367.091888][ T9432]  ? selinux_file_ioctl+0x180/0x270
[  367.091909][ T9432]  ? selinux_file_ioctl+0xb4/0x270
[  367.091936][ T9432]  ? __pfx_sock_ioctl+0x10/0x10
[  367.091959][ T9432]  __x64_sys_ioctl+0x18e/0x210
[  367.091981][ T9432]  do_syscall_64+0xcd/0xf80
[  367.092004][ T9432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.092021][ T9432] RIP: 0033:0x7fc6aab8f749
[  367.092035][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.092051][ T9432] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  367.092069][ T9432] RAX: ffffffffffffffda RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  367.092080][ T9432] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000004
[  367.092090][ T9432] RBP: 00007fc6ab9f1090 R08: 0000000000000000 R09: 0000000000000000
[  367.092100][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.092110][ T9432] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  367.092135][ T9432]  </TASK>
[  367.253786][ T5928] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  367.614760][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.626753][ T5928] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  367.643704][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.663712][ T7295] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  367.664169][ T5928] usb 2-1: config 0 descriptor??
[  367.880567][ T7295] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  368.031184][ T7295] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  368.038365][ T9427] binder: 9426:9427 ioctl 4018620d 0 returned -22
[  368.092996][ T7295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  368.146904][ T7295] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  368.180077][ T7295] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  368.198540][ T7295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.225911][ T7295] usb 3-1: config 0 descriptor??
[  368.231582][ T9441] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  368.255792][ T7295] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  368.271919][ T5928] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  368.312158][ T5928] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input21
[  368.471065][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.481916][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.491011][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.502363][   T30] audit: type=1400 audit(1767111176.756:408): avc:  denied  { setattr } for  pid=9440 comm="syz.2.914" name="ip_vs_stats" dev="proc" ino=4026533158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  368.504274][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.534362][   T49] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  368.690971][ T7295] usb 3-1: USB disconnect, device number 18
[  369.677485][   T49] usb 5-1: Using ep0 maxpacket: 32
[  369.696537][   T49] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  369.705225][   T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.726742][   T49] usb 5-1: config 0 has no interface number 0
[  369.742413][   T49] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  369.790707][ T5928] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  369.807343][   T49] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  369.837597][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.849176][ T5928] usb 2-1: USB disconnect, device number 17
[  369.867638][   T49] usb 5-1: Product: syz
[  370.008610][   T49] usb 5-1: Manufacturer: syz
[  370.016918][   T49] usb 5-1: SerialNumber: syz
[  370.035706][   T49] usb 5-1: config 0 descriptor??
[  370.053213][   T49] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  370.060474][ T9475] netlink: 256 bytes leftover after parsing attributes in process `syz.0.923'.
[  370.494432][   T49] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  370.548915][ T9469] fido_id[9469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  370.813083][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.822802][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.124060][ T5826] Bluetooth: to_multiplier 0 < 10
[  371.144742][   T49] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  371.152167][   T49] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  372.358357][  T931] usb 5-1: USB disconnect, device number 31
[  372.684107][ T7295] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  373.183582][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  373.323499][ T7295] usb 1-1: Using ep0 maxpacket: 8
[  373.485149][ T7295] usb 1-1: unable to get BOS descriptor or descriptor too short
[  373.493768][ T7295] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  373.503798][ T7295] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  373.557971][ T7295] usb 1-1: config 1 interface 0 has no altsetting 0
[  373.567092][ T7295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  373.576454][ T7295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.584716][ T7295] usb 1-1: Product: syz
[  373.588989][ T7295] usb 1-1: Manufacturer: syz
[  373.610265][ T7295] usb 1-1: SerialNumber: syz
[  373.628308][ T9496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  374.207978][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.234156][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.283106][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.336685][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.365734][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.391956][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.420895][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.544017][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.578218][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.615987][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.757315][ T7295] usb 1-1: USB disconnect, device number 24
[  375.304624][  T931] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  375.845723][  T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.864102][  T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.891554][  T931] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  375.906987][  T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.002968][  T931] usb 2-1: config 0 descriptor??
[  376.967157][  T931] usbhid 2-1:0.0: can't add hid device: -71
[  376.984610][  T931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  377.006708][ T9549] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  377.035765][  T931] usb 2-1: USB disconnect, device number 18
[  377.045881][ T9549] CIFS mount error: No usable UNC path provided in device string!
[  377.045881][ T9549] 
[  377.066474][ T9549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  377.077562][   T30] audit: type=1400 audit(1767111185.356:409): avc:  denied  { create } for  pid=9545 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  378.753830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  381.578247][ T9597] random: crng reseeded on system resumption
[  385.863554][ T5936] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  386.090400][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.178042][ T5936] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  386.267630][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.382179][ T5936] usb 2-1: config 0 descriptor??
[  386.726469][ T9626] binder: 9625:9626 ioctl 4018620d 0 returned -22
[  387.148734][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.177875][ T5936] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[  387.192981][ T5936] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input22
[  387.199560][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.316354][ T5936] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  387.487665][ T5936] usb 2-1: USB disconnect, device number 19
[  387.521074][ T9642] fido_id[9642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  388.516766][ T9660] random: crng reseeded on system resumption
[  389.501129][ T5936] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  389.783506][ T5936] usb 3-1: Using ep0 maxpacket: 16
[  390.113566][ T5936] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  390.129028][ T5936] usb 3-1: config 1 has no interface number 0
[  390.148895][ T5936] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  390.170665][ T5936] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  390.205503][ T5936] usb 3-1: config 1 interface 105 has no altsetting 0
[  390.225710][ T5936] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  390.257052][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.297523][ T5936] usb 3-1: Product: syz
[  390.322515][ T5936] usb 3-1: Manufacturer: syz
[  390.342822][ T5936] usb 3-1: SerialNumber: syz
[  390.372568][ T9662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  390.390889][ T9662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  390.996791][ T9662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  391.643101][ T9662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  392.194703][ T5936] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  392.343570][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  392.424897][ T5936] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  392.446902][ T5936] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:7f:bb:03:b8:42
[  392.481952][ T5936] usb 3-1: USB disconnect, device number 19
[  392.498542][ T5936] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  392.534886][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.553479][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  392.584746][ T5936] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  392.600713][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.609560][ T5936] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  392.626642][   T24] usb 5-1: config 0 descriptor??
[  392.636292][ T5936] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  392.855444][ T9697] binder: 9696:9697 ioctl 4018620d 0 returned -22
[  393.156444][   T24] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  393.168239][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input23
[  393.683290][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.705643][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.765379][   T24] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  394.196771][   T24] usb 5-1: USB disconnect, device number 32
[  394.418780][ T9716] random: crng reseeded on system resumption
[  394.787023][ T9715] fido_id[9715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  395.697955][ T9729] binder: 9723:9729 ioctl c0306201 200000000600 returned -14
[  398.137466][ T9762] random: crng reseeded on system resumption
[  399.593215][ T9758] fuse: Bad value for 'fd'
[  400.163469][   T49] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  400.536306][   T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.283077][   T49] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  401.365054][   T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.392330][   T49] usb 5-1: config 0 descriptor??
[  402.606929][ T9778] binder: 9777:9778 ioctl 4018620d 0 returned -22
[  402.901612][   T49] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor
[  402.987906][ T9802] random: crng reseeded on system resumption
[  403.109051][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.122766][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.367424][   T49] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input24
[  403.522486][   T49] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  403.686629][   T49] usb 5-1: USB disconnect, device number 33
[  403.746850][ T9813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9813 comm=syz.1.1014
[  403.874765][ T9812] fido_id[9812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  404.305179][ T9824] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  404.403577][ T9824] bridge0: entered promiscuous mode
[  404.409622][ T9824] macvlan2: entered promiscuous mode
[  404.517614][   T30] audit: type=1400 audit(1767111212.556:410): avc:  denied  { ioctl } for  pid=9818 comm="syz.1.1016" path="socket:[21089]" dev="sockfs" ino=21089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  404.628137][   T30] audit: type=1400 audit(1767111212.566:411): avc:  denied  { bind } for  pid=9818 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  405.196971][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  408.543511][ T9860] random: crng reseeded on system resumption
[  409.977356][ T9875] random: crng reseeded on system resumption
[  410.570513][ T9879] random: crng reseeded on system resumption
[  412.459289][ T9910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1037'.
[  412.479766][ T9908] netlink: 'syz.2.1038': attribute type 10 has an invalid length.
[  412.587858][ T9912] netlink: 'syz.2.1038': attribute type 10 has an invalid length.
[  413.908391][ T9908] bond0: (slave netdevsim0): Releasing backup interface
[  413.937513][ T9908] team0: Port device netdevsim0 added
[  414.571504][ T9932] netlink: 'syz.2.1044': attribute type 10 has an invalid length.
[  415.014155][ T9930] netlink: 'syz.2.1044': attribute type 10 has an invalid length.
[  415.994642][ T9930] team0: Port device netdevsim0 removed
[  416.381279][ T9930] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  416.508668][ T9942] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  416.518206][ T9942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  416.527798][ T9942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  417.535596][ T9970] netlink: 'syz.0.1055': attribute type 10 has an invalid length.
[  417.593597][ T9971] netlink: 'syz.0.1055': attribute type 10 has an invalid length.
[  418.432137][ T9970] bond0: (slave netdevsim0): Releasing backup interface
[  418.479897][ T9970] team0: Port device netdevsim0 added
[  419.618059][ T9996] random: crng reseeded on system resumption
[  420.565578][T10002] binder: 9998:10002 ioctl c0306201 200000000600 returned -14
[  425.155252][T10042] random: crng reseeded on system resumption
[  427.753451][   T49] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  427.903473][   T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  427.934788][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.953631][   T49] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  427.973206][   T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.984464][   T49] usb 1-1: config 0 descriptor??
[  428.063613][   T24] usb 3-1: Using ep0 maxpacket: 16
[  428.072191][   T24] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  428.247752][   T24] usb 3-1: config 1 has no interface number 0
[  428.255737][T10068] binder: 10066:10068 ioctl 4018620d 0 returned -22
[  428.262824][   T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  428.277901][   T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  428.290628][   T24] usb 3-1: config 1 interface 105 has no altsetting 0
[  428.320121][   T24] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  428.335290][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.350044][   T24] usb 3-1: Product: syz
[  428.358630][   T24] usb 3-1: Manufacturer: syz
[  428.368153][   T24] usb 3-1: SerialNumber: syz
[  428.390131][T10072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  428.397719][T10072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  428.483899][   T49] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[  428.509943][   T49] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input25
[  428.640241][   T49] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  428.683358][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.727450][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.809017][T10072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  428.859182][T10072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  429.609766][   T24] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  429.636010][  T931] usb 1-1: USB disconnect, device number 25
[  429.636579][   T24] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  429.847610][   T24] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:ee:d0:3b:7c:a7
[  429.992871][   T24] usb 3-1: USB disconnect, device number 20
[  430.013468][   T24] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  430.197569][   T24] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  430.260995][   T24] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  430.307933][   T24] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  434.485746][T10182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1105'.
[  434.916326][T10192] block nbd2: NBD_DISCONNECT
[  434.922047][T10192] block nbd2: Disconnected due to user request.
[  434.928882][T10192] block nbd2: shutting down sockets
[  436.046008][   T30] audit: type=1400 audit(1767111244.336:412): avc:  denied  { getopt } for  pid=10200 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  541.953441][    C1] ------------[ cut here ]------------
[  541.959587][    C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: syz.2.1110/10201
[  541.971377][    C1] Modules linked in:
[  541.975581][    C1] CPU: 1 UID: 0 PID: 10201 Comm: syz.2.1110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  541.986488][    C1] Tainted: [L]=SOFTLOCKUP
[  541.990784][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  542.000821][    C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.007734][    C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e6 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00
[  542.027319][    C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046
[  542.033364][    C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0
[  542.041305][    C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0
[  542.049334][    C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58
[  542.057299][    C1] R10: 0000000000000003 R11: ffff88807a7c0b30 R12: 1ffffffff1c02250
[  542.065250][    C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52
[  542.073199][    C1] FS:  00007fc6ab9f16c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000
[  542.082109][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.088661][    C1] CR2: 00007fc6ab9aef98 CR3: 000000003cc59000 CR4: 00000000003526f0
[  542.096607][    C1] Call Trace:
[  542.099868][    C1]  <IRQ>
[  542.102698][    C1]  rcu_core+0x4cf/0x15f0
[  542.106915][    C1]  ? tmigr_handle_remote+0x132/0x380
[  542.112172][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  542.117773][    C1]  ? __pfx_rcu_core+0x10/0x10
[  542.122424][    C1]  ? run_timer_base+0x121/0x190
[  542.127244][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  542.132413][    C1]  handle_softirqs+0x219/0x950
[  542.137154][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  542.142415][    C1]  __irq_exit_rcu+0x109/0x170
[  542.147500][    C1]  irq_exit_rcu+0x9/0x30
[  542.151716][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  542.157319][    C1]  </IRQ>
[  542.160222][    C1]  <TASK>
[  542.163136][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  542.169095][    C1] RIP: 0010:lock_acquire+0x133/0x330
[  542.174360][    C1] Code: 00 65 8b 05 d7 fa 18 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 97 b3 18 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 <fa> 48 c7 c7 3c e5 bb 8d e8 d0 12 de 09 45 89 e0 89 e9 44 89 ea 65
[  542.194108][    C1] RSP: 0018:ffffc9000dcb7a40 EFLAGS: 00000246
[  542.200143][    C1] RAX: ffff88807a7c0000 RBX: ffff88803cc4ef18 RCX: 0000000000000001
[  542.208084][    C1] RDX: 0000000000000000 RSI: ffffffff8b7ad25e RDI: ffffed1007989de3
[  542.216023][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  542.223963][    C1] R10: 0000000000013b6b R11: ffff88807a7c0b30 R12: 0000000000000001
[  542.231901][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  542.239844][    C1]  ? _raw_spin_lock+0x2e/0x40
[  542.244505][    C1]  ? move_pages+0x157e/0x5070
[  542.249172][    C1]  _raw_spin_lock+0x2e/0x40
[  542.253655][    C1]  ? move_pages+0x2b4c/0x5070
[  542.258307][    C1]  move_pages+0x2b4c/0x5070
[  542.262788][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  542.267956][    C1]  ? __pfx_move_pages+0x10/0x10
[  542.272784][    C1]  ? find_held_lock+0x2b/0x80
[  542.277434][    C1]  ? __might_fault+0xe3/0x190
[  542.282116][    C1]  ? __might_fault+0xe3/0x190
[  542.286794][    C1]  userfaultfd_ioctl+0x607/0x3930
[  542.291820][    C1]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  542.297274][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  542.302304][    C1]  ? hook_file_ioctl_common+0x144/0x410
[  542.307829][    C1]  ? selinux_file_ioctl+0x180/0x270
[  542.313010][    C1]  ? selinux_file_ioctl+0xb4/0x270
[  542.318183][    C1]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  542.323624][    C1]  ? __x64_sys_ioctl+0x18e/0x210
[  542.328536][    C1]  __x64_sys_ioctl+0x18e/0x210
[  542.333286][    C1]  do_syscall_64+0xcd/0xf80
[  542.337772][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.343637][    C1] RIP: 0033:0x7fc6aab8f749
[  542.348025][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.367610][    C1] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  542.376004][    C1] RAX: ffffffffffffffda RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  542.383948][    C1] RDX: 0000200000000100 RSI: 00000000c028aa05 RDI: 0000000000000007
[  542.391888][    C1] RBP: 00007fc6aac13f91 R08: 0000000000000000 R09: 0000000000000000
[  542.400013][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.407954][    C1] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  542.415902][    C1]  </TASK>
[  542.418904][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  542.426761][    C1] CPU: 1 UID: 0 PID: 10201 Comm: syz.2.1110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  542.437659][    C1] Tainted: [L]=SOFTLOCKUP
[  542.441948][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  542.451969][    C1] Call Trace:
[  542.455217][    C1]  <IRQ>
[  542.458045][    C1]  dump_stack_lvl+0x3d/0x1f0
[  542.462618][    C1]  vpanic+0x640/0x6f0
[  542.466586][    C1]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.472900][    C1]  panic+0xca/0xd0
[  542.476606][    C1]  ? __pfx_panic+0x10/0x10
[  542.481009][    C1]  ? check_panic_on_warn+0x1f/0xb0
[  542.486091][    C1]  check_panic_on_warn+0xab/0xb0
[  542.490997][    C1]  __warn+0x108/0x3c0
[  542.494946][    C1]  __report_bug+0x2a0/0x520
[  542.499417][    C1]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.505713][    C1]  ? __pfx___report_bug+0x10/0x10
[  542.510705][    C1]  ? find_held_lock+0x2b/0x80
[  542.515357][    C1]  ? __lock_acquire+0x436/0x2890
[  542.520271][    C1]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.526575][    C1]  report_bug+0xb2/0x220
[  542.530798][    C1]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.537107][    C1]  handle_bug+0x127/0x260
[  542.541416][    C1]  exc_invalid_op+0x17/0x50
[  542.545897][    C1]  asm_exc_invalid_op+0x1a/0x20
[  542.550719][    C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  542.557639][    C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e6 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00
[  542.577217][    C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046
[  542.583259][    C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0
[  542.591197][    C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0
[  542.599145][    C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58
[  542.607082][    C1] R10: 0000000000000003 R11: ffff88807a7c0b30 R12: 1ffffffff1c02250
[  542.615032][    C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52
[  542.622975][    C1]  ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0
[  542.629277][    C1]  rcu_core+0x4cf/0x15f0
[  542.633491][    C1]  ? tmigr_handle_remote+0x132/0x380
[  542.638744][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  542.644344][    C1]  ? __pfx_rcu_core+0x10/0x10
[  542.648992][    C1]  ? run_timer_base+0x121/0x190
[  542.653813][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  542.658981][    C1]  handle_softirqs+0x219/0x950
[  542.663720][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  542.668978][    C1]  __irq_exit_rcu+0x109/0x170
[  542.673631][    C1]  irq_exit_rcu+0x9/0x30
[  542.677847][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  542.683459][    C1]  </IRQ>
[  542.686369][    C1]  <TASK>
[  542.689271][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  542.695227][    C1] RIP: 0010:lock_acquire+0x133/0x330
[  542.700479][    C1] Code: 00 65 8b 05 d7 fa 18 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 97 b3 18 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 <fa> 48 c7 c7 3c e5 bb 8d e8 d0 12 de 09 45 89 e0 89 e9 44 89 ea 65
[  542.720054][    C1] RSP: 0018:ffffc9000dcb7a40 EFLAGS: 00000246
[  542.726085][    C1] RAX: ffff88807a7c0000 RBX: ffff88803cc4ef18 RCX: 0000000000000001
[  542.734028][    C1] RDX: 0000000000000000 RSI: ffffffff8b7ad25e RDI: ffffed1007989de3
[  542.741974][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  542.749910][    C1] R10: 0000000000013b6b R11: ffff88807a7c0b30 R12: 0000000000000001
[  542.757847][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  542.765788][    C1]  ? _raw_spin_lock+0x2e/0x40
[  542.770435][    C1]  ? move_pages+0x157e/0x5070
[  542.775178][    C1]  _raw_spin_lock+0x2e/0x40
[  542.779647][    C1]  ? move_pages+0x2b4c/0x5070
[  542.784299][    C1]  move_pages+0x2b4c/0x5070
[  542.788782][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  542.793958][    C1]  ? __pfx_move_pages+0x10/0x10
[  542.798783][    C1]  ? find_held_lock+0x2b/0x80
[  542.803430][    C1]  ? __might_fault+0xe3/0x190
[  542.808075][    C1]  ? __might_fault+0xe3/0x190
[  542.812734][    C1]  userfaultfd_ioctl+0x607/0x3930
[  542.817743][    C1]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  542.823175][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  542.828172][    C1]  ? hook_file_ioctl_common+0x144/0x410
[  542.833693][    C1]  ? selinux_file_ioctl+0x180/0x270
[  542.838862][    C1]  ? selinux_file_ioctl+0xb4/0x270
[  542.843940][    C1]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  542.849382][    C1]  ? __x64_sys_ioctl+0x18e/0x210
[  542.854298][    C1]  __x64_sys_ioctl+0x18e/0x210
[  542.859029][    C1]  do_syscall_64+0xcd/0xf80
[  542.863505][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.869362][    C1] RIP: 0033:0x7fc6aab8f749
[  542.873746][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.893320][    C1] RSP: 002b:00007fc6ab9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  542.901699][    C1] RAX: ffffffffffffffda RBX: 00007fc6aade5fa0 RCX: 00007fc6aab8f749
[  542.909636][    C1] RDX: 0000200000000100 RSI: 00000000c028aa05 RDI: 0000000000000007
[  542.917602][    C1] RBP: 00007fc6aac13f91 R08: 0000000000000000 R09: 0000000000000000
[  542.925544][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.933482][    C1] R13: 00007fc6aade6038 R14: 00007fc6aade5fa0 R15: 00007ffce0f7cda8
[  542.941425][    C1]  </TASK>
[  543.998300][    C1] Shutting down cpus with NMI
[  544.003281][    C1] Kernel Offset: disabled
[  544.007591][    C1] Rebooting in 86400 seconds..