last executing test programs:

1m16.360881526s ago: executing program 2 (id=318):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
socket$caif_seqpacket(0x25, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f00000002c0))
setregid(r2, r2)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000013c0)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x1)
r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002001500000000000000000100000000000000050000"], 0x0, 0x2a, 0x0, 0x1}, 0x20)
syz_pidfd_open(r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0)

1m16.026318787s ago: executing program 2 (id=320):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x60, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x2000000, @local}}}}}}, 0x0)

1m15.243349629s ago: executing program 2 (id=321):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
socket$inet(0x2, 0x1, 0x100)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x100, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x7) (async)
r6 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xb) (async)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m14.259555486s ago: executing program 2 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x800000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0xf5ffffff)

1m13.666423448s ago: executing program 2 (id=330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
mkdir(&(0x7f0000000200)='./file1\x00', 0x161)
mount$fuse(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
timer_create(0x6, &(0x7f0000000340)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000240)="b817ffa7596f759bbab7c086f58fd23282eed6677bead3c5d46b01a449db1e3f3e3c7cccdeff88832a77b88b94e2aa1f2f25f1948712319208bdcd35cc6459cb22a5bc9797d595f305eb555fbd632ba8f23da2c29f4e58d8ec9e54f5140f4ea6a22691360c33fbf718c58edb8f93e9c7dd931de0edc083740cfffacac5dcd442be5d16f791f78347bc6a2197c6b738f5aaccb3652c2c382362e200520cb7be69e8bf329b0dad8219750883cf296e1e7695e99fe2184435", &(0x7f0000000300)="e8e3b24fa3ae27ce9ecc0a843c31639becb943dd125af41ca14c35c284714babf38ad9325353a97e"}}, &(0x7f0000000380))
write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x32314258, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}})
r4 = msgget$private(0x0, 0x401)
msgsnd(r4, &(0x7f0000000180)={0x2, "dc57d65f1f7c038e66e7d15fa9826c3d7d5ec4a4605fe3ed567cb11c5842ebf9681877a3de55f42c2fe5c27af238083ce02c458ca0f736f70d62df1fc84c728e74"}, 0x49, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0)

1m12.73066775s ago: executing program 2 (id=336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
dup(r6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118)

57.292428482s ago: executing program 32 (id=336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
dup(r6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118)

13.715754327s ago: executing program 5 (id=565):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd2(0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x1, 0x5, 0xad, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffc, 0x0, 0x4, 0xffffffff, 0x2, 0x344}, 0x0, 0x0)

11.18148868s ago: executing program 5 (id=570):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x3f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

11.127066248s ago: executing program 3 (id=572):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0000008000081f0000000000000021bbe5a1ffffffffb48026f952bc0f57c9587a84e5288d1c1b1308cbf4aaeed135ed50f1755dee25c706e38381f07399326f33afc5a6aa2a124c9dd49057e5265ca60849b0f968e98b2c0a059e8f7e94fbc6b5f8d276fb04c317c64a0fc2710967108071299210f8b429363aa3137dba754ad32ab087e3322447"], 0x0, 0x1a, 0x0, 0x1, 0x2}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
faccessat2(0xffffffffffffffff, 0x0, 0x40, 0x200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', <r2=>0x0, 0x7, 0x20, 0x8, 0x31, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x65, 0x0, 0xe, 0x6, 0x0, @loopback, @loopback}}}})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x9, 0x20}, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, 0x0, r3}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r3, 0x1, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
open(0x0, 0x80, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000030000000400000000000000000000000000000000000000ee33e73538f933519b4b000b1011e13f583f190b3eee12a5ce5eb145b6931f8e398d6478ac0fc85847e3694ab999df5cca05537e412bfd209a"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1, 0x8}}, './file0\x00'})
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x7a1, 0x101000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5e, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000004b40)={'veth1_to_team\x00', 0x8, 0xe})
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r9)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000005600)=ANY=[@ANYBLOB="1400af0f", @ANYRES16=r10, @ANYBLOB="010005000000fddbdf252b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
write$cgroup_pid(r6, &(0x7f0000000140), 0x12)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_misc(r11, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="185200005258bd6b805fe86e4f27c90285000010a3000040183300000400"/40], &(0x7f0000000040)='GPL\x00', 0x3e, 0x0, 0x0, 0x41100, 0x45, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x7f, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4a0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000000000750050000000a00", @ANYRES32=r2, @ANYBLOB="9447014948be221ba4b95131b419aad84cb91ff74a7d00bdd0669d38966f6e97fc4ac6733e928e6d"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0)

10.867520754s ago: executing program 5 (id=574):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8042)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000084)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_clone(0x18820000, &(0x7f00000000c0)="899ba6cce4a22867bda01fb6b39e12795a53deabdbe6236fc695ebb177150289d2a683c4b0fc33747086d2b89df37f50f916eff56e13d661321a6485ed042a7d7bef9b6bf2dd5cdd4a39cd729c4e0b8de855a27dfd57b125c999b71c4742c4f13e8bf7dad5de9839e7ae5127e8c8dd7c8733", 0x72, &(0x7f0000000000), &(0x7f0000000600), &(0x7f0000000640)="bdd8afdbb91e72889d7e9475f5ce83789ec3a1e46413a804b329a75f590135c5fccee56d2f459457dc08c294b532a1e9ca396298d5a5441e7a4bd8ad6a64ca15bbcba2e332741bf589cf518456b7ca18c15e1a7b7cb23f81f1249470359937ec5c86603d9f8c691a0eacfa4ebefab10cb1123e1e428cba373af28277b6c1ebdc3b8ce6141390ab825f95eaced4300dfc7e99a6b3ce2a82951950aaa3394353e71dbb25563ec01eed40bd2098027ba20032d5905fd68a2488068929ed7459")
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000800)=0xe8)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840), 0x400902, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000300)={0x2d8, 0x19, 0x110, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x1a0, 0xb6, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="50bb3ceba237214328c54bb67cd6d2c6fa90c3add866fc4a994da45567aa57c28e244415e2d7908f3344448e1b1462195166de331c2d84a1b796bb2c1d1ba0fdfda18ac1d7a8777c95b0dc9bc219d1ab57ddbb7d22f40d8cfc5acdcd444c5d7329f3f92e341833329267ea2cdd07e99741984fe5920cbfc61293ad3532c9d9fba2a62841852cacff1a8f8d6380270adbd71194dd146379c84fab7eb1a7f450a4fa33ac5ed86349ec4e1b0daccfcf0b18d83823882b246c5d9315881874f04c9a8c0b65efe64b07a33e82ec46e446d402f7302fb9e7c6ca75bf28261557d488796ade7d4986dd374282d01390910a13e4d128be461ea8", @generic="8bdfff831e1ae3846885f577ee3f154424ed7ae42207b88f4dc877eae34eaf12dd2431b71b94da220bfdd7ad68070633b4b09354df23e77baeb33c5700b117b2969912a5359b326c2a4cd8713039de2c24989530410c5911325bb9463640e752ee8fe86b1961a46ead7739eb264078a7b613c58f709c2295f6035dfdb897a6095cf85632edebeb7ba55e0774d8ac817ed86363ca0f4b0b54b04ffff668beaba0ed18"]}, @nested={0xfb, 0x75, 0x0, 0x1, [@nested={0x4, 0x87}, @nested={0x4, 0x4c}, @generic="645dd698953d43dff27e8c7424313392f816339ba20934bec59f0cca4eba8597abced106bc8d00aee54c8de4984fb7e62d93094e745469e88d9849232e58212d6b70346aa9cddbbe7a79ca1861a758e5e2faed525a09b3cf088ae0d973e3349b2405321ba2b07be8d5065940c879252578f3f6d73ec6ba315cf4a903d59cb4dcb3ecc56a3e928c39708ce1b09cdaec78064b2a1cc4b7faed35129342820d385d144e1dfef1687968ad9ea40bbf3ee05b35315a4fa0e771d9c64c0b7a6fe7332a47da0ce5358d47caea4eea146a9407", @typed={0x1c, 0xb9, 0x0, 0x0, @binary="3a05817f6a0d49acdf7226a86de4545c7d88db8a5fbbba96"}, @nested={0x4, 0x105}]}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@empty}, @nested={0x10, 0xa8, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x10d}]}, @typed={0xc, 0x14d, 0x0, 0x0, @u64=0x6}]}, 0x2d8}, {&(0x7f0000000ac0)={0x44c, 0x2, 0x100, 0x70bd28, 0x25dfdbfc, "", [@typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@mcast2}, @generic="e41249cc2fc44f8c65ceb6be70e08c41a10a04cd3f12238d78648ac5c7aadcc508e240178c46d1cf5c2654180366320908b8a8", @generic="76df5f5a93cfaed9fb1664e6e6a5fa618460904906c674689f334aaa6dd6a688b0cf35c28cc31e7b0899b95ce8553742eb66f4f4eb0329670d73f68b7af549b02086186f8013c7594ca62bd84f0c03c42380c919c9440b14c7bab74151d7822ed6037ece8a09828688204e2186faa93c67c48f9d551114eaeb861afb68e6480b13fb91f2113e41b2057825a98680", @typed={0x8, 0xc9, 0x0, 0x0, @u32=0x74d3}, @nested={0xad, 0x5f, 0x0, 0x1, [@typed={0x4, 0x12f}, @generic="7aa7e21b0b879edfb400cd361f240d44b1d21e5e97d54b92b2933016ecf63adcdcb2ed0847a88f68ee0c279ca06bcedf9babbed3d5c9f2fc005c9825e9ccddf868b85d28ec92a01298d54c7991f65d0947cf72d94999377ab4fc", @nested={0x4, 0x9b}, @generic="35fd6b367ecdbf93bbf801a55b0cb81cf25242fae9d86d99068a21d65103d5e7f72632d547385bc25d13ddfd54bb95bb9af500a2aa5ba16632dbb91f19f751af37ea5d", @typed={0x4, 0x4f}]}, @nested={0x2a9, 0xde, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x31}, @typed={0x8, 0xd2, 0x0, 0x0, @uid=r7}, @generic="36c127d4bf8e98069ebdf0ea20d7c76251f41fe80189cbe4addd1c6f85264bd006b8b46a8ab0d2ab3666a60a4973cd02b52b50ca122d399ce083cfa4ae602c45f0ef02f28f71ad9b5a46f325f438e73d1a6bf4dcce0b74ac998895143c1bac291804f953ed23bc0bc18ae174a1beb1afabb770f15403f0913892b793195992dfac15f88467e7c585d3e2021613053ab2ec0d812bdd3a14d5c9da90477ccfae86ab250af08c34060cc61c9891f7620515e0b621e710907b33", @generic="aae28a964307c914738290b1435f070d2cb62519d813e1163278e2c51a581c908a4fd29b4a9ae93f64bf147aa1c83c6b9a3eb22ff4da153469621e606f63dc6550b8ea5d79a3dcc155e35b9278bd67748c90d86f3a304bc4b0a766115db69bf0655ba7aa80ff44746fe11879c052c1b47da19f8bd1bd0ae331e67a4b3e9e13c2845583413f9e0337deb368cfb7993734f46d4817498d33b4f3301b68877039df2d0da28a0f26e249706302e6336a723770cd5a8e34c696986f48bca734a9842cc6d8b566b663d45ecf4b5538b58e077725c2", @generic="bbb4d78c3a9a89ae500c449aebb949582d37e52f9542042990947c7379f0eba30f7b778e4743ff1ecd2537130daaa28706044b911caac7678f8903104a6ef4b052b3c363327c42bdf472452c6e43df511206638de839cea256e403a49ddf7e1eaa30d30e38ef21772061e31e696835c40d2ac0d7a2a671488c1e01bc8e78094bba60fd59585efd92aa92f7d4631afdf840ba75b1250028908a4de02feec6bf6f4bdc79a7c55353133d4155ad30466d0077b4e366ec89f8847b860e0cc217727fee7a8b3e917f4b5008b7027778f6014d0ab4077482c921064460230004d505dc0445ca4afa2ee69411", @nested={0x4, 0xcd}, @generic="67dd9b508f7639a5b71ce1b39f71fc84f218395dac2685efa5de"]}]}, 0x44c}, {&(0x7f0000000f40)={0x204, 0x2f, 0x800, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x48, 0x0, 0x0, @pid=r6}, @nested={0x14, 0x145, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @u32}, @nested={0x4, 0x10f}, @nested={0x4, 0xc1}]}, @generic="f2db806f7e167b2e11d0671dd974eb5fc9e34724bc1014ced37fea09a25d99b8bfaef97df311d956eced93eb1b80ad1bd830018a115a588a4039bb3ff51b50a8dc93605f3a4715ac1e46844df85b60e1d6c7f61f91155cafd06f9923f708b87c449250e7303299ce65afda9427d8a235c67ea7af56052178b4ac6274ef3856c504835c22ebe89ed0ade79c6a5905f15dd4e5f97ae4561f189252dacc3c8b506d521a6e9c3933128db2d881676fa51cd5703fdb5ee21d460d92", @typed={0x8, 0x10e, 0x0, 0x0, @u32=0x80000001}, @generic="f845d575728d3975bd229d4642f5cdc3ca08716cdf7c57c609559dd772c5d4a65121e49273127b02230344c3c782cd269f2bf95aa66f60ef", @typed={0xd1, 0x112, 0x0, 0x0, @binary="008523f6851bc6c02e7b2f8569feee6f14523bd40ec4d73105fb2cc797cfdee42df1d9cf06173ce4d526628d7165b0bf751080a9bc8b2c987829dcb6167d33c746fc96244772d583c0ecf595857a629e6440ff6b4b75590828cd97b6a29bb050a8ad4ddf71ec0e808aaf0225b1268365b445671fa1e19b1f79ffb6872c7aab7334c9c922639d8237997195efd48bff6996fd6bf9d2d1ab5624d2251d444352e5cb1070ea43e81a0234a1a36eb40640d57515e13ae66211588da69cb64edff2a72c903db1485b9c6298328937d4"}, @typed={0x8, 0x72, 0x0, 0x0, @fd=r8}]}, 0x204}], 0x3, 0x0, 0x0, 0x1}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x64a80)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200000000000000000000000000000000e2298f3bafa3b530b191009a382b6a0f18e1164404aa05b7f2d5ee7179521c32c9c228dcc34b849e740d111e7295eb76ec0cbd42465e8a2836b222e9b7226089de08d63fc3a9d6a1d602a63ae4708d64be83f7e35eb4282bd02acd8bb04b15790f9ec6161a869f0cac63af33"], 0x50)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r9}, {@void, @max}})
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

9.595989541s ago: executing program 3 (id=576):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000140)={0x6, 0x47})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000440))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x188, r4, 0x8, 0x0, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xd238}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x74c9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2c000000}, {0x6, 0x11, 0xb}}]}, 0x188}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x400})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="283737001366582e1c84ee6c7afa6bf7a3eeb40d9709d1f0d13f96085d1d218bf3c3635087bb8d23501f2d9d2253a2c83c6baefface8b5912a28fc5d8a4028dfde51d4d4b5d6486fc658b7fa7da7cf197ef6378f9cb4c2c999b7c289e9cb49bae797911180c510421ac5b10858685bf606165401b438240065b7c9ab609c3ae781da4618347413be1547a3750a93e74a706dac17c2f0205806de947226645c41", @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0c00238005001e0001000000"], 0x28}}, 0x0)

9.457691553s ago: executing program 5 (id=578):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x80ffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x6, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffffff, 0xb0, 0x0, 0x0, 0x0, 0x180000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}]}, 0x60}}, 0x84)

9.163661906s ago: executing program 5 (id=579):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x7200, 0x2, &(0x7f0000000180)="86ab"}], 0x1})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005cc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='GPL\x00')
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380})

7.523910177s ago: executing program 3 (id=583):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x1000000, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0})

7.211625941s ago: executing program 3 (id=586):
r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0xe)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109482) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x310, 0x25, 0x148, 0x310, 0x60, 0x408, 0x2a8, 0x2a8, 0x408, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3300e8ff7be97a766070e08867e988b0caf982b5c96d0063d870861917f0839f395f85d840971b5725f2cd24635ff2ec3953a4f4b2e6fade537c5c05291419c31e46e6ef903f03f342bf5995bfce28e9455114f5f6a21254ce95de7d306d22a4a7dd3810b86f7e520d4b225fdd52d41cd85d16cb7dc7100f917902fdae2f7c0b1d368de3582f09d422d3bf22649c8b394195e04c5a2e3a0fe9f0e0d06f4c2d34c4ef3af742b7d8dda466f4fbda2e06b39c562aaac1d268827030c357fbf1a6b3fb72183126f132f95f7d7e662c79259c17fc75f8efca8128c42628ca8b731ef09c713836d61cbf15ab01", @ANYRES16, @ANYBLOB="01000000007a3cd3620001000000040007800c00020000000000000000000c00060002b897d8d055c8bbf23a25919c350344e70f9054f2fe62b08e571c3bce17045a4a71a628a0f5f0cddbd2f0de20731d1cfcf2d237ff28b43c7d16b9b9a111247613bc2c74866dce24f73db6458241fc5f970e2540c08a8086e1dd9d5221c776c821fd3e13c2a449145d4b7d59569c832de26081134059af311ff93bf711ab8683963625771b4a022ef7ad3b0ae87f7dd1bf2883dcda4040d65b738a0d88c813a603173e21fa0378c7638cacf564443d51a4f4dafaea8d160f57db213534adcca269e6d2ee077b04118afbefeac906f9dff24cf51a71e5c7d44326f64db1b7375d1a5a34421f4796d67c9c43c5ac77539fe0f9bebbe1c810f2d2a31c1c96029ed3adcb00d89affe7e8835bad3055a33d716d1a0b5a8832ecd15b6857898df2966d3697866935fc1c031be78711a4d6a5a3ea5aec8419a3fe05a274a7d4789f9fdcf78728230dd82bbd555d805dee1b23a2c2696acee14862e891150bc30976953f3c2a0c895811c53029ad4974d043460841ed24cce11c8e4495ea17af49b2a61cf9f1567e380220b164a1650899aee0b6f5df5d20bd1b85e8ab937b"], 0x30}}, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x8, 0x3, "c392c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0)

5.2728321s ago: executing program 5 (id=594):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x80000)
r1 = syz_open_dev$dri(0x0, 0x3, 0x182000)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(0x0, 0x0)
r3 = dup2(r2, r2)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r3], 0x1b)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
sendmsg$nl_route(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket(0x6b, 0x80000, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x8000)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgget$private(0x0, 0xcb)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410072786500140033006c6f00000000000000000000000000006682aa5634041adfa64cfe5f22a9f4df835aec497372ac5f26b92b1116b0668ada0af94808277affd1fc0a6aa18c6a9e31e6e210d588eb5a1a25f05254c56af0b428cf8b1b80f1488e053c8109788ba57722d639e9dd6c53d7275d"], 0x38}, 0x1, 0x0, 0x0, 0x844}, 0x0)

4.671328274s ago: executing program 1 (id=595):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum64={0xb, 0x1, 0x0, 0x13, 0x0, 0x9, [{0xa, 0x8, 0x4}]}]}}, 0x0, 0x32, 0x0, 0x1, 0x9}, 0x28)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

3.90959843s ago: executing program 4 (id=600):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0xfffffffffffffffe, 0x3, {0x410000003, 0x8000010, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10100, 0x0, 0x80000}, &(0x7f0000000480), &(0x7f0000000300)=<r4=>0x0)
r5 = syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000005c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x3, 0x135}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f000042f000/0x4000)=nil, 0x4000, 0x2, 0x10, r5, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000010)
syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r12)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r12, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffeff6"})
io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

3.858984229s ago: executing program 3 (id=601):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getresuid(0x0, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00')
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

3.623959631s ago: executing program 1 (id=602):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f0000000040)="cb", 0xfffffdef)

3.48120027s ago: executing program 4 (id=603):
syz_usb_connect(0x0, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff000524060000052402", @ANYRES16], 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
syz_open_procfs$userns(r0, &(0x7f00000000c0))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

2.964182213s ago: executing program 1 (id=605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

2.773568361s ago: executing program 1 (id=606):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a0034000101010101010000080026006c090000800051802000008009000100b168fa316700000005000200020000000800030001ac0f"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x7d, 0x15, r6, 0x0, r5})
r7 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)

2.614841374s ago: executing program 0 (id=607):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x700000000, 0x10000)
fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x80040}, 0x1c)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.447775943s ago: executing program 0 (id=608):
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0)
futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50})
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
bind$bt_sco(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

2.302267666s ago: executing program 1 (id=609):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async)
syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x401) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=<r2=>0x0, @ANYBLOB="10000000000000001c0012800b00010062726b64676500000c000280080012"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r0) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
ppoll(&(0x7f0000000180)=[{r8, 0x3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$FS_IOC_GETFLAGS(r8, 0x5437, 0x0) (async, rerun: 32)
ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000000))

2.015766035s ago: executing program 1 (id=610):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0xffffffffffffffd6, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000780))
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000340))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x246402, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000300)='0', 0x1)
read$FUSE(r6, &(0x7f00000046c0)={0x2020}, 0x2020)
io_setup(0x6, &(0x7f0000000080)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4, r5, 0x0, 0x0, 0x2, 0x0, 0x0, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xbc4, r4, &(0x7f0000000240)="b17d20e259d38c7dc6ae48c667a67a856599e8b1782cb0426d28b38929ee9fd581c7e75b3fccfbb7351e4f554fe93aa95f38cc680de195ae5951a598eef44acf8f3d1e71214120874e901858f3467766a435416d17726861088971a34cfa84b732d8611d9bbbb33c2524d89645a3cf3388b3f207a15f1ac73b0cc8d4ae568c8c1dfed8edb7289f8e67aee07841dc7008f2cde661c4b4f2adcc0db010c5bc0b74575707bbbab080c17e3be300454364c2bbe31e", 0xb3, 0x7, 0x0, 0x3, r6}])
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="b5affe000000000000000100000010000280"], 0x24}}, 0x0)

1.534249405s ago: executing program 4 (id=611):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000003000000020000", 0x58}], 0x1)

1.334372409s ago: executing program 0 (id=612):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0x3b, 0x4a, 0x20, 0x5e0, 0x2005, 0xa9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0x15, 0xba, 0x77, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x4}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010, r2}, 0x18)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040), 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@acquire={0x13c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@remote}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0x13c}}, 0x0)
syslog(0x9, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4015010000002e72dd7cc77d56537e4c8f8a9355f69a76ec6d7a6cceb49b09a2a6df0e0138716b01717d2882cec3558987f0763c3fa026d08ec0e2313cc047206cbdea0c95a36ded35bf641f278baff030b23d7b8e38c97dcd8c37bc6ffe1d91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000002c0)={@llc={0x1a, 0x239, 0x6, 0x5, 0x1, 0xf7, @local}, {&(0x7f0000000080)=""/9, 0x9}, 0x0}, 0xa0)

1.334150656s ago: executing program 4 (id=613):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x1c, 0x0, 0x29, &(0x7f0000000380)="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"})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.143516707s ago: executing program 3 (id=614):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x2828000000000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYRESDEC], 0x50)

1.091415089s ago: executing program 4 (id=615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = dup(r4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x40045431, 0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)

372.563246ms ago: executing program 0 (id=616):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0xfffffffe, 0x4)

292.783871ms ago: executing program 0 (id=617):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x81, 0x4000000c, 0x35323645, 0x6, 0x3, [{0x80009, 0x4}, {0x0, 0x4}, {0x1b000000, 0x10010000}, {0x4, 0x8}, {0x2, 0x9a}, {0x55fe649d, 0x81}, {0x2c1, 0x8}, {0x3, 0x1}], 0x5, 0x56, 0x8, 0x0, 0x5}})

19.891304ms ago: executing program 4 (id=618):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0x3b, 0x4a, 0x20, 0x5e0, 0x2005, 0xa9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0x15, 0xba, 0x77, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x4}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010, r2}, 0x18)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040), 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@acquire={0x13c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@remote}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0x13c}}, 0x0)
syslog(0x9, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000002c0)={@llc={0x1a, 0x239, 0x6, 0x5, 0x1, 0xf7, @local}, {&(0x7f0000000080)=""/9, 0x9}, 0x0}, 0xa0)

0s ago: executing program 0 (id=619):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000180)={0x6, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00008f8000/0x4000)=nil, 0x4000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f00000f4000/0x11000)=nil, 0x11000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0xa, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0x4, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0)

kernel console output (not intermixed with test programs):

119.858386][   T43] usb 3-1: Manufacturer: syz
[  119.858439][   T43] usb 3-1: SerialNumber: syz
[  119.860352][ T6625] CPU: 0 UID: 0 PID: 6625 Comm: syz.3.195 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  119.860378][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.860388][ T6625] Call Trace:
[  119.860394][ T6625]  <TASK>
[  119.860402][ T6625]  dump_stack_lvl+0x16c/0x1f0
[  119.860433][ T6625]  should_fail_ex+0x512/0x640
[  119.860456][ T6625]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  119.860484][ T6625]  should_failslab+0xc2/0x120
[  119.860509][ T6625]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  119.860531][ T6625]  ? __alloc_skb+0x2b2/0x380
[  119.860558][ T6625]  __alloc_skb+0x2b2/0x380
[  119.860581][ T6625]  ? __pfx___alloc_skb+0x10/0x10
[  119.860602][ T6625]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  119.860625][ T6625]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  119.860655][ T6625]  netlink_alloc_large_skb+0x69/0x130
[  119.860676][ T6625]  netlink_sendmsg+0x6a1/0xdd0
[  119.860698][ T6625]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.860725][ T6625]  ____sys_sendmsg+0xa95/0xc70
[  119.860745][ T6625]  ? copy_msghdr_from_user+0x10a/0x160
[  119.860769][ T6625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.860798][ T6625]  ___sys_sendmsg+0x134/0x1d0
[  119.860824][ T6625]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.860846][ T6625]  ? __lock_acquire+0x622/0x1c90
[  119.860904][ T6625]  __sys_sendmsg+0x16d/0x220
[  119.860929][ T6625]  ? __pfx___sys_sendmsg+0x10/0x10
[  119.860969][ T6625]  do_syscall_64+0xcd/0x4c0
[  119.860996][ T6625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.861013][ T6625] RIP: 0033:0x7f4410f8e929
[  119.861028][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.861044][ T6625] RSP: 002b:00007f4411e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.861061][ T6625] RAX: ffffffffffffffda RBX: 00007f44111b5fa0 RCX: 00007f4410f8e929
[  119.861073][ T6625] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  119.861083][ T6625] RBP: 00007f4411e11090 R08: 0000000000000000 R09: 0000000000000000
[  119.861099][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.861109][ T6625] R13: 0000000000000000 R14: 00007f44111b5fa0 R15: 00007fff2451fc18
[  119.861132][ T6625]  </TASK>
[  119.873950][   T43] usb 3-1: config 0 descriptor??
[  119.875379][ T6611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  119.875507][ T6611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  119.892680][   T43] ums-usbat 3-1:0.230: USB Mass Storage device detected
[  119.927205][   T43] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  119.937873][ T6633] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.086464][ T6611] input: syz0 as /devices/virtual/input/input10
[  120.098989][   T30] audit: type=1400 audit(1751188815.632:389): avc:  denied  { ioctl } for  pid=6628 comm="syz.4.196" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  121.178724][   T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  121.302526][ T6647] input: syz1 as /devices/virtual/input/input11
[  121.330119][   T55] usb 4-1: device descriptor read/64, error -71
[  121.472352][   T30] audit: type=1400 audit(1751188817.002:390): avc:  denied  { ioctl } for  pid=6643 comm="syz.0.199" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  121.690086][  T974] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  121.700088][   T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  121.840011][   T55] usb 4-1: device descriptor read/64, error -71
[  121.842416][  T974] usb 5-1: config 0 has no interfaces?
[  121.855229][  T974] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.868489][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  121.876878][  T974] usb 5-1: SerialNumber: syz
[  121.885822][  T974] usb 5-1: config 0 descriptor??
[  121.950414][   T55] usb usb4-port1: attempt power cycle
[  122.113543][  T974] usb 5-1: USB disconnect, device number 8
[  122.167592][   T30] audit: type=1400 audit(1751188817.702:391): avc:  denied  { ioctl } for  pid=6653 comm="syz.1.202" path="socket:[11332]" dev="sockfs" ino=11332 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  122.220063][   T30] audit: type=1400 audit(1751188817.742:392): avc:  denied  { connect } for  pid=6653 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  122.241911][   T30] audit: type=1400 audit(1751188817.742:393): avc:  denied  { execute_no_trans } for  pid=6654 comm="syz.0.203" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  122.330313][   T55] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  122.353004][   T55] usb 4-1: device descriptor read/8, error -71
[  122.595211][   T30] audit: type=1400 audit(1751188818.122:394): avc:  denied  { connect } for  pid=6657 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  122.634632][   T30] audit: type=1400 audit(1751188818.122:395): avc:  denied  { setopt } for  pid=6657 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  122.655444][   T55] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  122.667237][   T30] audit: type=1400 audit(1751188818.122:396): avc:  denied  { bind } for  pid=6657 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  122.690846][   T55] usb 4-1: device descriptor read/8, error -71
[  122.826874][   T30] audit: type=1400 audit(1751188818.132:397): avc:  denied  { write } for  pid=6657 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  122.827380][   T55] usb usb4-port1: unable to enumerate USB device
[  123.764709][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'.
[  123.775302][ T6675] netlink: 'syz.3.208': attribute type 5 has an invalid length.
[  123.802662][   T43] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5
[  123.844057][   T43] usb 3-1: USB disconnect, device number 7
[  123.952090][   T30] audit: type=1400 audit(1751188819.472:398): avc:  denied  { write } for  pid=6674 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  124.051394][   T30] audit: type=1400 audit(1751188819.582:399): avc:  denied  { write } for  pid=6674 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  124.098801][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'.
[  124.680873][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.211'.
[  124.944043][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[  124.990407][ T6695] 8021q: adding VLAN 0 to HW filter on device team1
[  125.024962][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.035509][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.059844][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.079537][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.941687][  T974] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  126.080104][  T974] usb 1-1: device descriptor read/64, error -71
[  126.110028][   T55] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  126.270963][   T55] usb 4-1: Using ep0 maxpacket: 8
[  126.284185][   T55] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.294784][   T55] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  126.304260][   T55] usb 4-1: config 7 has no interface number 0
[  126.330078][  T974] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  126.427918][   T55] usb 4-1: string descriptor 0 read error: -22
[  126.437690][   T55] usb 4-1: New USB device found, idVendor=cde6, idProduct=20cf, bcdDevice=df.a4
[  126.446999][   T55] usb 4-1: New USB device strings: Mfr=211, Product=238, SerialNumber=3
[  126.600847][  T974] usb 1-1: device descriptor read/64, error -71
[  126.995365][   T55] usbhid 4-1:7.67: couldn't find an input interrupt endpoint
[  127.122838][  T974] usb usb1-port1: attempt power cycle
[  127.207200][ T6697] netlink: 'syz.3.215': attribute type 4 has an invalid length.
[  127.252201][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.266093][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.336666][   T55] usb 4-1: USB disconnect, device number 9
[  127.521566][  T974] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  127.533115][ T6720] Illegal XDP return value 4294967274 on prog  (id 55) dev syz_tun, expect packet loss!
[  127.560800][  T974] usb 1-1: device descriptor read/8, error -71
[  128.191059][  T974] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  128.225503][  T974] usb 1-1: device descriptor read/8, error -71
[  128.345016][  T974] usb usb1-port1: unable to enumerate USB device
[  129.474702][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  129.474720][   T30] audit: type=1400 audit(1751188824.942:404): avc:  denied  { sqpoll } for  pid=6729 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.693966][   T30] audit: type=1400 audit(1751188824.942:405): avc:  denied  { read write } for  pid=6729 comm="syz.3.223" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  129.721082][   T30] audit: type=1400 audit(1751188824.942:406): avc:  denied  { open } for  pid=6729 comm="syz.3.223" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  129.755707][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.758103][   T30] audit: type=1400 audit(1751188824.942:407): avc:  denied  { ioctl } for  pid=6729 comm="syz.3.223" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  129.797769][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.162412][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.185621][ T6751] tipc: Started in network mode
[  130.190601][ T6751] tipc: Node identity 86416cb0cbda, cluster identity 4711
[  130.201674][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.231056][ T6751] syzkaller0: entered promiscuous mode
[  130.276957][ T6751] syzkaller0: entered allmulticast mode
[  130.333031][ T6751] syzkaller0: MTU too low for tipc bearer
[  130.338939][ T6751] tipc: Disabling bearer <eth:syzkaller0>
[  130.359133][ T6754] mmap: syz.4.228 (6754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  130.493307][   T30] audit: type=1400 audit(1751188826.032:408): avc:  denied  { mount } for  pid=6745 comm="syz.0.227" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  130.519061][ T6751] netlink: 'syz.0.227': attribute type 10 has an invalid length.
[  130.527009][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.536573][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.093395][ T6751] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  131.103909][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  131.114228][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:7 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  131.114250][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  131.114259][ T5828] Workqueue: hci4 hci_rx_work
[  131.114280][ T5828] Call Trace:
[  131.114284][ T5828]  <TASK>
[  131.114290][ T5828]  dump_stack_lvl+0x16c/0x1f0
[  131.114308][ T5828]  sysfs_warn_dup+0x7f/0xa0
[  131.114325][ T5828]  sysfs_create_dir_ns+0x24b/0x2b0
[  131.114340][ T5828]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  131.114356][ T5828]  ? find_held_lock+0x2b/0x80
[  131.114373][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  131.114385][ T5828]  kobject_add_internal+0x2c4/0x9b0
[  131.114405][ T5828]  kobject_add+0x16e/0x240
[  131.114416][ T5828]  ? __pfx_kobject_add+0x10/0x10
[  131.114427][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  131.114439][ T5828]  ? kobject_put+0xab/0x5a0
[  131.114459][ T5828]  device_add+0x288/0x1a70
[  131.114477][ T5828]  ? __pfx_dev_set_name+0x10/0x10
[  131.114488][ T5828]  ? __pfx_device_add+0x10/0x10
[  131.114504][ T5828]  ? mgmt_send_event_skb+0x2fb/0x460
[  131.114524][ T5828]  hci_conn_add_sysfs+0x17e/0x230
[  131.114542][ T5828]  le_conn_complete_evt+0x1075/0x1d70
[  131.114560][ T5828]  ? rcu_is_watching+0x12/0xc0
[  131.114574][ T5828]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  131.114588][ T5828]  ? hci_event_packet+0x459/0x11c0
[  131.114607][ T5828]  hci_le_conn_complete_evt+0x23c/0x370
[  131.114626][ T5828]  hci_le_meta_evt+0x354/0x5e0
[  131.114642][ T5828]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  131.114659][ T5828]  hci_event_packet+0x685/0x11c0
[  131.114674][ T5828]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  131.114691][ T5828]  ? __pfx_hci_event_packet+0x10/0x10
[  131.114707][ T5828]  ? kcov_remote_start+0x3c9/0x6d0
[  131.114720][ T5828]  ? lockdep_hardirqs_on+0x7c/0x110
[  131.114738][ T5828]  hci_rx_work+0x2c5/0x16b0
[  131.114755][ T5828]  ? rcu_is_watching+0x12/0xc0
[  131.114770][ T5828]  process_one_work+0x9cc/0x1b70
[  131.114786][ T5828]  ? __pfx_process_one_work+0x10/0x10
[  131.114801][ T5828]  ? assign_work+0x1a0/0x250
[  131.114820][ T5828]  worker_thread+0x6c8/0xf10
[  131.114836][ T5828]  ? __pfx_worker_thread+0x10/0x10
[  131.114860][ T5828]  kthread+0x3c2/0x780
[  131.114871][ T5828]  ? __pfx_kthread+0x10/0x10
[  131.114882][ T5828]  ? rcu_is_watching+0x12/0xc0
[  131.114900][ T5828]  ? __pfx_kthread+0x10/0x10
[  131.114910][ T5828]  ret_from_fork+0x5d4/0x6f0
[  131.114925][ T5828]  ? __pfx_kthread+0x10/0x10
[  131.114935][ T5828]  ret_from_fork_asm+0x1a/0x30
[  131.114954][ T5828]  </TASK>
[  131.114971][ T5828] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  131.450566][ T5828] Bluetooth: hci4: failed to register connection device
[  131.566563][   T30] audit: type=1400 audit(1751188827.102:409): avc:  denied  { remount } for  pid=6755 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  131.966217][ T6775] Sensor A: =================  START STATUS  =================
[  131.973866][ T6775] Sensor A: Test Pattern: 75% Colorbar
[  131.979423][ T6775] Sensor A: Show Information: All
[  131.984558][ T6775] Sensor A: Vertical Flip: false
[  131.989571][ T6775] Sensor A: Horizontal Flip: false
[  131.994809][ T6775] Sensor A: Brightness: 128
[  131.999412][ T6775] Sensor A: Contrast: 128
[  132.004293][ T6775] Sensor A: Hue: 0
[  132.008093][ T6775] Sensor A: Saturation: 128
[  132.013009][ T6775] Sensor A: ==================  END STATUS  ==================
[  132.054514][   T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  132.285725][ T6774] PKCS7: Unknown OID: [5] (bad)
[  132.301965][ T6774] PKCS7: Only support pkcs7_signedData type
[  132.333449][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.339839][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  132.440036][   T43] usb 2-1: Using ep0 maxpacket: 8
[  132.459222][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.486404][   T43] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  132.563031][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.580665][   T43] usb 2-1: config 0 descriptor??
[  132.596245][   T43] usb 2-1: bad CDC descriptors
[  132.602572][   T43] cdc_acm 2-1:0.0: Control and data interfaces are not separated!
[  132.619545][   T43] cdc_acm 2-1:0.0: This needs exactly 3 endpoints
[  132.632611][   T43] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22
[  132.649653][ T6785] Scaler: =================  START STATUS  =================
[  132.667647][ T6785] Scaler: ==================  END STATUS  ==================
[  132.675328][   T55] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  132.691176][   T30] audit: type=1400 audit(1751188828.232:410): avc:  denied  { ioctl } for  pid=6784 comm="syz.4.239" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  132.743192][   T30] audit: type=1400 audit(1751188828.282:411): avc:  denied  { setattr } for  pid=6786 comm="syz.0.240" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.773476][   T30] audit: type=1400 audit(1751188828.312:412): avc:  denied  { write } for  pid=6786 comm="syz.0.240" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.805429][   T30] audit: type=1400 audit(1751188828.312:413): avc:  denied  { open } for  pid=6786 comm="syz.0.240" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.830332][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  132.854192][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.861250][   T55] usb 4-1: config 0 has no interfaces?
[  132.898306][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.045010][   T55] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  133.054539][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.062565][   T55] usb 4-1: Product: syz
[  133.066791][   T55] usb 4-1: Manufacturer: syz
[  133.071452][   T55] usb 4-1: SerialNumber: syz
[  133.220431][ T5869] usb 2-1: USB disconnect, device number 16
[  133.246302][   T55] usb 4-1: config 0 descriptor??
[  133.264953][   T24] usb 3-1: Using ep0 maxpacket: 32
[  133.273810][   T24] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023
[  133.287288][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  133.298772][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  133.308723][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.317150][   T24] usb 3-1: Product: syz
[  133.323143][   T24] usb 3-1: Manufacturer: syz
[  133.327743][   T24] usb 3-1: SerialNumber: syz
[  133.336273][ T6783] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  133.531029][   T51] Bluetooth: hci4: command tx timeout
[  133.547823][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.557906][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.776469][ T6820] Sensor A: =================  START STATUS  =================
[  135.784102][ T6820] Sensor A: Test Pattern: 75% Colorbar
[  135.790198][ T6820] Sensor A: Show Information: All
[  135.795240][ T6820] Sensor A: Vertical Flip: false
[  135.800713][ T6820] Sensor A: Horizontal Flip: false
[  135.805845][ T6820] Sensor A: Brightness: 128
[  135.810389][ T6820] Sensor A: Contrast: 128
[  135.814726][ T6820] Sensor A: Hue: 0
[  135.818468][ T6820] Sensor A: Saturation: 128
[  135.823027][ T6820] Sensor A: ==================  END STATUS  ==================
[  136.077718][  T974] usb 4-1: USB disconnect, device number 10
[  136.144305][   T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[  136.159476][   T24] usb 3-1: USB disconnect, device number 8
[  136.178557][   T24] usblp0: removed
[  136.260233][ T6832] netlink: 'syz.3.251': attribute type 1 has an invalid length.
[  136.309860][ T6834] 9pnet_fd: Insufficient options for proto=fd
[  136.631859][ T6832] veth3: entered promiscuous mode
[  136.643104][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  136.643116][   T30] audit: type=1400 audit(1751188832.172:424): avc:  denied  { getopt } for  pid=6830 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  136.815175][   T30] audit: type=1400 audit(1751188832.262:425): avc:  denied  { append } for  pid=6842 comm="syz.3.255" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  136.838822][ T6843] ubi31: attaching mtd0
[  136.844202][ T6843] ubi31: scanning is finished
[  136.848896][ T6843] ubi31: empty MTD device detected
[  136.862720][   T30] audit: type=1400 audit(1751188832.362:426): avc:  denied  { execute } for  pid=6844 comm="syz.0.256" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  136.922229][   T30] audit: type=1400 audit(1751188832.422:427): avc:  denied  { create } for  pid=6842 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  136.990077][   T30] audit: type=1400 audit(1751188832.432:428): avc:  denied  { sys_admin } for  pid=6842 comm="syz.3.255" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  137.185622][ T6843] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  137.193791][ T6843] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  137.201154][ T6843] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  137.208154][ T6843] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  137.215617][ T6843] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  137.222485][ T6843] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  137.230923][ T6843] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 450607742
[  137.240928][ T6843] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  137.251633][ T6852] ubi31: background thread "ubi_bgt31d" started, PID 6852
[  137.275239][ T6849] delete_channel: no stack
[  137.718664][   T30] audit: type=1400 audit(1751188833.252:429): avc:  denied  { read } for  pid=6862 comm="syz.1.261" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  137.763323][ T6863] netfs: Couldn't get user pages (rc=-14)
[  137.807180][   T30] audit: type=1800 audit(1751188833.292:430): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.261" name="/" dev="9p" ino=65538 res=0 errno=0
[  138.295257][   T30] audit: type=1400 audit(1751188833.832:431): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  138.376712][ T6870] 9pnet_virtio: no channels available for device 
[  138.410183][ T5828] Bluetooth: hci5: command 0x1003 tx timeout
[  138.416468][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  138.447702][   T30] audit: type=1400 audit(1751188833.982:432): avc:  denied  { bind } for  pid=6869 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  138.552725][ T5869] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  138.640000][   T30] audit: type=1400 audit(1751188834.172:433): avc:  denied  { setopt } for  pid=6877 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  138.716680][ T6884] smc: net device lo applied user defined pnetid SYZ1
[  138.753315][ T5869] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  138.769339][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.811217][ T5869] usb 4-1: config 0 has no interface number 0
[  138.835553][ T5869] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  138.848460][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.870104][ T5869] usb 4-1: Product: syz
[  138.878783][ T5869] usb 4-1: Manufacturer: syz
[  138.891176][ T5869] usb 4-1: SerialNumber: syz
[  138.915494][ T5869] usb 4-1: config 0 descriptor??
[  139.543735][ T6898] netlink: 180 bytes leftover after parsing attributes in process `syz.4.270'.
[  139.565147][ T6898] netlink: 'syz.4.270': attribute type 1 has an invalid length.
[  139.625238][ T6898] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.738661][ T6903] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.537721][ T6903] bond1: (slave ipip0): The slave device specified does not support setting the MAC address
[  140.562250][ T6903] bond1: (slave ipip0): Error -95 calling set_mac_address
[  141.326641][ T5869] usb 4-1: USB disconnect, device number 11
[  141.659145][ T6929] atomic_op ffff88803397f998 conn xmit_atomic 0000000000000000
[  141.979446][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  141.979457][   T30] audit: type=1400 audit(1751188837.512:440): avc:  denied  { connect } for  pid=6934 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  144.188372][ T6948] Sensor A: =================  START STATUS  =================
[  144.196021][ T6948] Sensor A: Test Pattern: 75% Colorbar
[  144.201581][ T6948] Sensor A: Show Information: All
[  144.206627][ T6948] Sensor A: Vertical Flip: false
[  144.211617][ T6948] Sensor A: Horizontal Flip: false
[  144.216747][ T6948] Sensor A: Brightness: 128
[  144.221291][ T6948] Sensor A: Contrast: 128
[  144.225635][ T6948] Sensor A: Hue: 0
[  144.229368][ T6948] Sensor A: Saturation: 128
[  144.233945][ T6948] Sensor A: ==================  END STATUS  ==================
[  145.130731][   T30] audit: type=1400 audit(1751188840.672:441): avc:  denied  { map } for  pid=6960 comm="syz.2.290" path="/dev/vsock" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  146.126171][   T30] audit: type=1400 audit(1751188841.662:442): avc:  denied  { bind } for  pid=6971 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  146.174583][ T6967] Cannot find set identified by id 0 to match
[  146.230375][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  146.400255][   T24] usb 5-1: Using ep0 maxpacket: 8
[  146.431060][   T24] usb 5-1: config 0 has an invalid interface number: 204 but max is 0
[  146.444672][   T24] usb 5-1: config 0 has no interface number 0
[  146.760873][   T24] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c
[  146.770198][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.778200][   T24] usb 5-1: Product: syz
[  146.782517][   T24] usb 5-1: Manufacturer: syz
[  146.787119][   T24] usb 5-1: SerialNumber: syz
[  146.800425][   T30] audit: type=1326 audit(1751188842.332:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  146.860603][   T24] usb 5-1: config 0 descriptor??
[  146.886583][   T24] flexcop_usb: set interface failed.
[  146.901023][   T24] b2c2_flexcop_usb 5-1:0.204: probe with driver b2c2_flexcop_usb failed with error -22
[  146.915590][   T30] audit: type=1326 audit(1751188842.362:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.028329][   T30] audit: type=1326 audit(1751188842.362:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365019][   T30] audit: type=1326 audit(1751188842.362:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365062][   T30] audit: type=1326 audit(1751188842.362:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365098][   T30] audit: type=1326 audit(1751188842.362:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365134][   T30] audit: type=1326 audit(1751188842.362:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365170][   T30] audit: type=1326 audit(1751188842.362:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365206][   T30] audit: type=1326 audit(1751188842.362:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365238][   T30] audit: type=1326 audit(1751188842.372:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365271][   T30] audit: type=1326 audit(1751188842.372:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.365307][   T30] audit: type=1326 audit(1751188842.372:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x7ffc0000
[  147.369421][ T6995] overlayfs: failed to clone upperpath
[  147.470163][  T974] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  147.699120][   T43] usb 5-1: USB disconnect, device number 9
[  147.860202][  T974] usb 3-1: Using ep0 maxpacket: 32
[  147.882740][  T974] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  147.900152][  T974] usb 3-1: config 0 has no interface number 0
[  147.920679][  T974] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  147.935612][  T974] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  147.981747][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.989898][  T974] usb 3-1: Product: syz
[  147.997774][  T974] usb 3-1: Manufacturer: syz
[  148.002876][  T974] usb 3-1: SerialNumber: syz
[  148.014343][  T974] usb 3-1: config 0 descriptor??
[  148.022578][  T974] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  148.033142][  T974] em28xx 3-1:0.132: Video interface 132 found:
[  148.102375][ T7006] block device autoloading is deprecated and will be removed.
[  148.427109][  T974] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  148.648218][  T974] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  149.425338][  T974] em28xx 3-1:0.132: board has no eeprom
[  149.518279][  T974] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  149.563826][  T974] em28xx 3-1:0.132: analog set to bulk mode.
[  149.571525][ T5862] em28xx 3-1:0.132: Registering V4L2 extension
[  149.609219][  T974] usb 3-1: USB disconnect, device number 9
[  149.659393][  T974] em28xx 3-1:0.132: Disconnecting em28xx
[  151.367679][ T5862] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  151.407072][ T5862] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  151.478048][ T5862] em28xx 3-1:0.132: No AC97 audio processor
[  151.591005][ T5862] usb 3-1: Decoder not found
[  151.595636][ T5862] em28xx 3-1:0.132: failed to create media graph
[  151.602235][ T5862] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  151.794875][ T5862] em28xx 3-1:0.132: Remote control support is not available for this card.
[  151.838080][  T974] em28xx 3-1:0.132: Closing input extension
[  151.879118][  T974] em28xx 3-1:0.132: Freeing device
[  152.111335][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  152.111351][   T30] audit: type=1400 audit(1751188847.652:487): avc:  denied  { setopt } for  pid=7045 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  152.180780][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  152.220764][   T30] audit: type=1400 audit(1751188847.672:488): avc:  denied  { write } for  pid=7045 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  152.358284][   T30] audit: type=1400 audit(1751188847.892:489): avc:  denied  { getopt } for  pid=7051 comm="syz.4.311" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  152.453588][   T43] usb 4-1: Using ep0 maxpacket: 32
[  152.989127][   T30] audit: type=1400 audit(1751188848.472:490): avc:  denied  { create } for  pid=7051 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  153.013278][   T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  153.275476][   T43] usb 4-1: config 0 has no interface number 0
[  153.288615][   T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.311750][   T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  153.360090][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.368110][   T43] usb 4-1: Product: syz
[  153.508277][   T43] usb 4-1: Manufacturer: syz
[  153.513395][   T43] usb 4-1: SerialNumber: syz
[  153.535538][   T43] usb 4-1: config 0 descriptor??
[  153.573329][   T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  153.608195][   T43] em28xx 4-1:0.132: Video interface 132 found:
[  154.282043][   T43] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  154.345356][ T7076] fuse: Bad value for 'fd'
[  154.454444][ T7082] FAULT_INJECTION: forcing a failure.
[  154.454444][ T7082] name failslab, interval 1, probability 0, space 0, times 0
[  154.467358][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.1.329 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  154.467383][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  154.467394][ T7082] Call Trace:
[  154.467400][ T7082]  <TASK>
[  154.467406][ T7082]  dump_stack_lvl+0x16c/0x1f0
[  154.467437][ T7082]  should_fail_ex+0x512/0x640
[  154.467460][ T7082]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  154.467486][ T7082]  should_failslab+0xc2/0x120
[  154.467511][ T7082]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  154.467535][ T7082]  ? security_file_alloc+0x34/0x2b0
[  154.467570][ T7082]  security_file_alloc+0x34/0x2b0
[  154.467596][ T7082]  init_file+0x93/0x4c0
[  154.467624][ T7082]  alloc_empty_file+0x73/0x1e0
[  154.467642][ T7082]  alloc_file_pseudo+0x13a/0x230
[  154.467660][ T7082]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  154.467678][ T7082]  ? do_raw_spin_unlock+0x172/0x230
[  154.467702][ T7082]  __anon_inode_getfile+0xf7/0x3a0
[  154.467732][ T7082]  anon_inode_getfd+0x52/0xb0
[  154.467758][ T7082]  __x64_sys_fsopen+0x18b/0x240
[  154.467776][ T7082]  do_syscall_64+0xcd/0x4c0
[  154.467803][ T7082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.467821][ T7082] RIP: 0033:0x7f55b0f8e929
[  154.467835][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.467852][ T7082] RSP: 002b:00007f55b1d6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  154.467869][ T7082] RAX: ffffffffffffffda RBX: 00007f55b11b5fa0 RCX: 00007f55b0f8e929
[  154.467881][ T7082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  154.467891][ T7082] RBP: 00007f55b1d6f090 R08: 0000000000000000 R09: 0000000000000000
[  154.467901][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.467911][ T7082] R13: 0000000000000001 R14: 00007f55b11b5fa0 R15: 00007ffefe2f0cb8
[  154.467934][ T7082]  </TASK>
[  154.492635][   T30] audit: type=1400 audit(1751188849.972:491): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  154.682972][   T43] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  154.691733][   T43] em28xx 4-1:0.132: board has no eeprom
[  154.731415][ T7089] netlink: 33912 bytes leftover after parsing attributes in process `syz.1.333'.
[  154.750221][   T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  154.764333][   T43] em28xx 4-1:0.132: analog set to bulk mode.
[  154.785558][ T5869] em28xx 4-1:0.132: Registering V4L2 extension
[  154.816916][   T30] audit: type=1400 audit(1751188850.342:492): avc:  denied  { mount } for  pid=7090 comm="syz.2.330" name="/" dev="autofs" ino=13319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  154.867681][ T7091] binfmt_misc: register: failed to install interpreter file ./file0
[  154.871999][ T5869] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  154.887194][   T43] usb 4-1: USB disconnect, device number 12
[  154.899409][   T43] em28xx 4-1:0.132: Disconnecting em28xx
[  154.906851][   T30] audit: type=1400 audit(1751188850.402:493): avc:  denied  { mounton } for  pid=7090 comm="syz.2.330" path="/69/file1/file1" dev="autofs" ino=12451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  155.300352][ T7089] binder: Bad value for 'max'
[  155.515614][   T30] audit: type=1400 audit(1751188851.052:494): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  155.525200][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'.
[  155.565912][ T5869] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  155.596105][ T5869] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  155.613002][ T5869] em28xx 4-1:0.132: No AC97 audio processor
[  155.638850][ T5869] usb 4-1: Decoder not found
[  155.651359][ T5869] em28xx 4-1:0.132: failed to create media graph
[  155.659758][ T7103] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  155.667595][ T5869] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  155.777300][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'.
[  155.786649][   T30] audit: type=1400 audit(1751188851.312:495): avc:  denied  { ioctl } for  pid=7104 comm="syz.3.337" path="socket:[12462]" dev="sockfs" ino=12462 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  156.298156][ T5869] em28xx 4-1:0.132: Remote control support is not available for this card.
[  156.306968][   T43] em28xx 4-1:0.132: Closing input extension
[  156.317695][   T43] em28xx 4-1:0.132: Freeing device
[  156.503200][ T7116] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  156.649749][ T7127] netlink: 'syz.1.342': attribute type 2 has an invalid length.
[  156.870412][   T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  156.950234][   T30] audit: type=1400 audit(1751188852.492:496): avc:  denied  { name_connect } for  pid=7134 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  156.980049][ T5869] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  157.466959][   T30] audit: type=1400 audit(1751188852.562:497): avc:  denied  { accept } for  pid=7134 comm="syz.0.346" lport=59015 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.539987][   T43] usb 4-1: Using ep0 maxpacket: 8
[  157.546798][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.557790][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.560110][ T5862] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  157.567778][ T5869] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  157.584601][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.593365][   T43] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  157.603504][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.613545][ T5869] usb 2-1: config 0 descriptor??
[  157.618691][   T43] usb 4-1: Product: syz
[  157.622976][   T43] usb 4-1: Manufacturer: syz
[  157.629628][   T43] usb 4-1: SerialNumber: syz
[  157.635983][   T43] usb 4-1: config 0 descriptor??
[  157.642930][   T43] gspca_main: sq930x-2.14.0 probing 2770:930c
[  157.732114][ T5862] usb 5-1: not running at top speed; connect to a high speed hub
[  157.741799][ T5862] usb 5-1: config 1 interface 0 has no altsetting 0
[  157.750346][ T5862] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40
[  157.759409][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.767461][ T5862] usb 5-1: Product: 錯逄笛캼娮ᱻ놈�領둰ￚ￿룿⹜ᾎﴊ᣶껙爸覨쑫�긴㒎㶼�阘俜࠷�蔈�銲추㳘䒲΄鵈㗈좨�Ƌ빠綦蕊䊹⃌撯�쉘꺠혥單᠛�넰飤曅��䶴⑰욢檵�줠᱅婵�䶳᭵ᖯ⿣�ౣ䗚컕��᠊韹햪趘�ヂ⋰袵㵅黗넠�㞂⢮濟氇�剋ゲ崄㮹츻㪤惸펛
[  157.801577][ T5862] usb 5-1: Manufacturer: 瘒힔⮧鶋⤷⚬簩�챖輠舊둑➯齥�깜⅕ᷳ㼤盕狰Է䢪��⎪⇤쨀�뱅�ﱛ�쳈궇圂箮땖피뙃溚삈뾺䷺ꔋ錸
[  157.821114][ T5862] usb 5-1: SerialNumber: ꗘ䬟⒅鿸⨾䅬刟�ⴚ㩫䂉�ॷ禊ᵗ铣姭挅䩟�ﴒ銠⛜䄖�ެ���욦㟃ᆘ뀊�ߊ扛ꪷ贄䴅헟黻佞�⠛怀뵥뮢桶贵
[  158.061557][ T5869] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  158.076100][ T5869] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  158.087550][ T5869] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input12
[  158.109094][ T5869] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  158.193538][ T5862] usbhid 5-1:1.0: can't add hid device: -71
[  158.199555][ T5862] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  158.222084][ T5862] usb 5-1: USB disconnect, device number 10
[  158.270503][   T30] audit: type=1400 audit(1751188853.802:498): avc:  denied  { create } for  pid=7146 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  158.295364][   T30] audit: type=1400 audit(1751188853.802:499): avc:  denied  { bind } for  pid=7146 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  158.317106][   T30] audit: type=1400 audit(1751188853.802:500): avc:  denied  { connect } for  pid=7136 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  158.349009][   T30] audit: type=1400 audit(1751188853.872:501): avc:  denied  { accept } for  pid=7136 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  158.489361][   T30] audit: type=1400 audit(1751188854.022:502): avc:  denied  { listen } for  pid=7130 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  159.041761][   T30] audit: type=1400 audit(1751188854.192:503): avc:  denied  { ioctl } for  pid=7123 comm="syz.3.341" path="socket:[13420]" dev="sockfs" ino=13420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  159.095305][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  159.112310][   T43] gspca_sq930x: reg_w 0305 fd00 failed -110
[  159.118342][   T43] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  159.126607][   T30] audit: type=1400 audit(1751188854.202:504): avc:  denied  { bind } for  pid=7123 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  159.240175][ T5869] usb 2-1: reset high-speed USB device number 17 using dummy_hcd
[  159.321373][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  160.133901][  T974] usb 4-1: USB disconnect, device number 13
[  160.498489][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short
[  160.623677][   T55] usb 2-1: USB disconnect, device number 17
[  160.644045][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -71
[  160.674548][ T5862] usb 5-1: can't read configurations, error -71
[  160.860098][  T974] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  160.922884][ T7175] geneve2: entered promiscuous mode
[  160.928110][ T7175] geneve2: entered allmulticast mode
[  161.158236][  T974] usb 4-1: device descriptor read/64, error -71
[  162.010126][   T55] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  162.021311][  T974] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  162.039422][ T7195] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[  162.169505][  T974] usb 4-1: device descriptor read/64, error -71
[  162.180003][   T55] usb 2-1: Using ep0 maxpacket: 32
[  162.221412][   T55] usb 2-1: unable to read config index 0 descriptor/start: -61
[  162.229187][   T55] usb 2-1: can't read configurations, error -61
[  162.880061][   T55] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  163.050089][   T55] usb 2-1: Using ep0 maxpacket: 32
[  163.060631][   T55] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.076143][   T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  163.086341][   T55] usb 2-1: can't read configurations, error -61
[  163.103664][   T55] usb usb2-port1: attempt power cycle
[  163.151137][  T974] usb usb4-port1: attempt power cycle
[  163.251431][   T24] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  163.379053][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.390864][   T24] usb 5-1: config 0 has no interface number 0
[  163.398191][   T24] usb 5-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.430053][   T24] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  163.440941][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.448994][   T24] usb 5-1: Product: syz
[  163.454740][   T24] usb 5-1: Manufacturer: syz
[  163.459681][   T24] usb 5-1: SerialNumber: syz
[  163.492871][   T24] usb 5-1: config 0 descriptor??
[  163.510573][   T55] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  163.531901][   T55] usb 2-1: Using ep0 maxpacket: 32
[  163.567153][   T55] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.608729][   T55] usb 2-1: can't read configurations, error -61
[  163.821020][   T55] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  163.856495][   T55] usb 2-1: Using ep0 maxpacket: 32
[  163.886756][   T55] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.897471][   T55] usb 2-1: can't read configurations, error -61
[  163.917446][   T55] usb usb2-port1: unable to enumerate USB device
[  164.225179][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'.
[  164.350054][   T30] audit: type=1400 audit(1751188859.882:505): avc:  denied  { read } for  pid=7216 comm="syz.3.372" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  164.755235][   T30] audit: type=1400 audit(1751188860.292:506): avc:  denied  { ioctl } for  pid=7235 comm="syz.1.377" path="socket:[13564]" dev="sockfs" ino=13564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  164.781642][   T30] audit: type=1400 audit(1751188860.292:507): avc:  denied  { setopt } for  pid=7235 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  164.801859][   T30] audit: type=1400 audit(1751188860.292:508): avc:  denied  { read } for  pid=7235 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  164.821825][   T30] audit: type=1400 audit(1751188860.362:509): avc:  denied  { write } for  pid=7235 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  164.936203][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'.
[  164.947643][   T30] audit: type=1400 audit(1751188860.472:510): avc:  denied  { write } for  pid=7238 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  164.982542][   T30] audit: type=1400 audit(1751188860.522:511): avc:  denied  { mount } for  pid=7238 comm="syz.3.378" name="/" dev="rpc_pipefs" ino=13578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  165.862454][   T30] audit: type=1400 audit(1751188860.602:512): avc:  denied  { bind } for  pid=7238 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  165.906455][   T24] usb 5-1: USB disconnect, device number 13
[  166.289682][   T30] audit: type=1400 audit(1751188861.822:513): avc:  denied  { read write } for  pid=7254 comm="syz.4.384" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  166.831736][   T30] audit: type=1400 audit(1751188861.852:514): avc:  denied  { open } for  pid=7254 comm="syz.4.384" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  167.058340][ T7274] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.061034][ T7274] tipc: Invalid UDP bearer configuration
[  167.069402][ T7274] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  167.286521][ T7279] kvm: MWAIT instruction emulated as NOP!
[  170.230065][ T5813] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  170.237695][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  170.450114][ T5941] usb 4-1: Using ep0 maxpacket: 32
[  170.455753][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  170.471200][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.485963][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  170.500132][ T5813] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  170.521214][ T5941] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  170.530787][ T5813] usb 5-1: config 0 has no interface number 0
[  170.537018][ T5813] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  170.550880][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.616346][ T5941] usb 4-1: config 0 descriptor??
[  170.637660][ T5813] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  170.686011][ T5941] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  170.703646][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.762915][ T5813] usb 5-1: Product: syz
[  170.806692][ T5813] usb 5-1: Manufacturer: syz
[  170.860917][ T5813] usb 5-1: SerialNumber: syz
[  170.920688][ T5813] usb 5-1: config 0 descriptor??
[  170.938732][ T5813] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  170.950088][ T5813] em28xx 5-1:0.132: Video interface 132 found:
[  171.164123][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  171.164139][   T30] audit: type=1400 audit(1751188866.702:516): avc:  denied  { setattr } for  pid=7306 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  171.286438][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  171.296199][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  171.305650][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  171.318563][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  171.328301][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  171.338145][ T5813] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  171.364534][   T30] audit: type=1400 audit(1751188866.892:517): avc:  denied  { mounton } for  pid=7308 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  172.256341][   T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.317522][ T7322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38492 sclass=netlink_route_socket pid=7322 comm=syz.1.402
[  172.459526][   T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.495109][ T5813] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  172.531584][ T7299] em28xx 5-1:0.132: failed to trigger read from i2c address 0x28 (error=-5)
[  172.543357][ T5813] em28xx 5-1:0.132: board has no eeprom
[  172.577312][   T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.610330][ T5813] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  172.760128][ T5813] em28xx 5-1:0.132: analog set to bulk mode.
[  172.768280][ T5941] em28xx 5-1:0.132: Registering V4L2 extension
[  172.787210][ T5813] usb 5-1: USB disconnect, device number 14
[  172.803964][ T7308] chnl_net:caif_netlink_parms(): no params data found
[  172.816396][ T5813] em28xx 5-1:0.132: Disconnecting em28xx
[  173.011177][   T30] audit: type=1400 audit(1751188868.532:518): avc:  denied  { watch } for  pid=7329 comm="syz.1.405" path="/79" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  173.086368][   T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.114104][ T5941] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  173.121391][ T5941] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  173.152706][ T5941] em28xx 5-1:0.132: No AC97 audio processor
[  173.178394][ T5941] usb 5-1: Decoder not found
[  173.193628][ T5941] em28xx 5-1:0.132: failed to create media graph
[  173.218003][ T5941] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  173.232484][ T5941] em28xx 5-1:0.132: Remote control support is not available for this card.
[  173.241304][ T5813] em28xx 5-1:0.132: Closing input extension
[  173.255323][ T5813] em28xx 5-1:0.132: Freeing device
[  173.324664][ T7344] netlink: 'syz.4.408': attribute type 1 has an invalid length.
[  173.332537][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'.
[  173.374965][ T5828] Bluetooth: hci5: command tx timeout
[  173.507902][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.512810][   T30] audit: type=1400 audit(1751188869.002:519): avc:  denied  { append } for  pid=7343 comm="syz.4.408" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.520041][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.557741][ T7308] bridge_slave_0: entered allmulticast mode
[  173.564536][   T24] usb 4-1: USB disconnect, device number 17
[  173.569294][ T7308] bridge_slave_0: entered promiscuous mode
[  173.619733][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.627585][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.636721][ T7308] bridge_slave_1: entered allmulticast mode
[  173.646838][ T7308] bridge_slave_1: entered promiscuous mode
[  173.705599][ T7354] : entered promiscuous mode
[  173.713856][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.723905][ T7357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.730133][ T5813] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  173.759481][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'.
[  173.771754][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.836378][   T76] bridge_slave_1: left allmulticast mode
[  173.853910][   T76] bridge_slave_1: left promiscuous mode
[  173.860826][   T76] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.898826][   T76] bridge_slave_0: left allmulticast mode
[  173.908379][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.922222][   T76] bridge_slave_0: left promiscuous mode
[  173.927955][   T76] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.935712][ T5813] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  173.945544][ T5813] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  173.954772][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.974823][ T5813] usb 5-1: config 0 descriptor??
[  174.120113][   T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  174.239649][   T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.255420][ T7350] loop6: detected capacity change from 0 to 63
[  174.271227][   T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.284287][   T76] bond0 (unregistering): Released all slaves
[  174.291388][   T24] usb 4-1: Using ep0 maxpacket: 32
[  174.345934][ T6051] Buffer I/O error on dev loop6, logical block 0, async page read
[  174.354213][   T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  174.363912][   T24] usb 4-1: config 0 has no interface number 0
[  174.371028][   T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.391152][ T6051] Buffer I/O error on dev loop6, logical block 0, async page read
[  174.404790][   T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  174.414498][ T6051] Buffer I/O error on dev loop6, logical block 0, async page read
[  174.422986][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.435741][ T6051] Buffer I/O error on dev loop6, logical block 0, async page read
[  174.444060][   T24] usb 4-1: Product: syz
[  174.456596][   T24] usb 4-1: Manufacturer: syz
[  174.462514][ T6051] Buffer I/O error on dev loop6, logical block 0, async page read
[  174.472609][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'.
[  174.473256][   T24] usb 4-1: SerialNumber: syz
[  174.493726][   T24] usb 4-1: config 0 descriptor??
[  174.495731][   T76] bond1 (unregistering): Released all slaves
[  174.512582][   T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  174.525711][   T24] em28xx 4-1:0.132: Video interface 132 found:
[  174.543201][ T7308] team0: Port device team_slave_0 added
[  174.543678][ T7368] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.415'.
[  174.568240][ T7308] team0: Port device team_slave_1 added
[  174.632134][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.639210][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.688088][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.732112][   T55] tipc: Node number set to 1302031536
[  174.756372][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.763529][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.790033][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.875753][ T7308] hsr_slave_0: entered promiscuous mode
[  174.883023][ T7308] hsr_slave_1: entered promiscuous mode
[  174.889087][ T7308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.899545][ T7308] Cannot create hsr debugfs directory
[  174.924563][   T24] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  174.946166][   T76] hsr_slave_0: left promiscuous mode
[  174.951752][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  174.963877][   T76] hsr_slave_1: left promiscuous mode
[  174.970417][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.977942][   T76] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.989459][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.997762][   T76] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.035631][   T76] veth1_macvtap: left promiscuous mode
[  175.043096][   T76] veth0_macvtap: left promiscuous mode
[  175.051644][   T76] veth1_vlan: left promiscuous mode
[  175.057174][   T76] veth0_vlan: left promiscuous mode
[  175.110109][ T5941] usb 2-1: Using ep0 maxpacket: 32
[  175.127226][ T5941] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  175.150199][ T5941] usb 2-1: config 0 has no interface number 0
[  175.166030][ T5941] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  175.198764][ T5941] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  175.220053][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.232356][ T5941] usb 2-1: Product: syz
[  175.243046][ T5941] usb 2-1: Manufacturer: syz
[  175.247748][ T5941] usb 2-1: SerialNumber: syz
[  175.265112][ T5941] usb 2-1: config 0 descriptor??
[  175.290289][ T5941] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  175.301968][ T5941] em28xx 2-1:0.132: Video interface 132 found:
[  175.452436][ T5828] Bluetooth: hci5: command tx timeout
[  175.614178][   T76] team0 (unregistering): Port device team_slave_1 removed
[  175.666822][   T76] team0 (unregistering): Port device team_slave_0 removed
[  175.689744][ T5941] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  176.097521][   T76] smc: removing net device lo with user defined pnetid SYZ1
[  176.263955][   T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  176.272857][   T24] em28xx 4-1:0.132: board has no eeprom
[  176.303839][ T7362] em28xx 4-1:0.132: failed to trigger read from i2c address 0x28 (error=-5)
[  176.333571][ T5862] usb 5-1: USB disconnect, device number 15
[  176.343160][   T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  176.362615][ T7372] em28xx 4-1:0.132: failed to trigger read from i2c address 0x28 (error=-5)
[  176.365573][   T24] em28xx 4-1:0.132: analog set to bulk mode.
[  176.389580][ T5869] em28xx 4-1:0.132: Registering V4L2 extension
[  176.433476][   T24] usb 4-1: USB disconnect, device number 18
[  176.444549][ T5941] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  176.447648][   T24] em28xx 4-1:0.132: Disconnecting em28xx
[  176.489343][ T5941] em28xx 2-1:0.132: board has no eeprom
[  176.564964][ T5941] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  176.587635][ T5869] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  176.597752][ T5941] em28xx 2-1:0.132: analog set to bulk mode.
[  176.627593][ T5869] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  176.632661][ T5941] usb 2-1: USB disconnect, device number 22
[  176.656491][ T5941] em28xx 2-1:0.132: Disconnecting em28xx
[  176.665787][ T5869] em28xx 4-1:0.132: No AC97 audio processor
[  176.725358][ T5869] usb 4-1: Decoder not found
[  176.730093][ T5862] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  176.770090][ T5869] em28xx 4-1:0.132: failed to create media graph
[  176.776474][ T5869] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  176.816502][ T7308] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  176.824967][ T5869] em28xx 4-1:0.132: Remote control support is not available for this card.
[  176.841447][   T24] em28xx 4-1:0.132: Closing input extension
[  176.847480][ T5813] em28xx 2-1:0.132: Registering V4L2 extension
[  176.854280][ T7308] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  176.861966][   T24] em28xx 4-1:0.132: Freeing device
[  176.898736][ T7308] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  176.905455][ T5862] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  176.905480][ T5862] usb 5-1: config 0 has no interface number 0
[  176.905515][ T5862] usb 5-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  176.907139][ T5862] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  176.963854][ T7308] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  176.998399][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.026901][ T5862] usb 5-1: Product: syz
[  177.070372][ T5862] usb 5-1: Manufacturer: syz
[  177.075020][ T5862] usb 5-1: SerialNumber: syz
[  177.240887][ T5862] usb 5-1: config 0 descriptor??
[  177.531013][ T5828] Bluetooth: hci5: command tx timeout
[  177.840815][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.992869][ T5813] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  178.035166][ T5813] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  178.049508][ T7308] 8021q: adding VLAN 0 to HW filter on device team0
[  178.089576][ T5813] em28xx 2-1:0.132: No AC97 audio processor
[  178.134796][ T5813] usb 2-1: Decoder not found
[  178.149162][ T5813] em28xx 2-1:0.132: failed to create media graph
[  178.163860][ T5813] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  178.178125][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.185299][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.200397][ T5813] em28xx 2-1:0.132: Remote control support is not available for this card.
[  178.218703][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.225558][ T5941] em28xx 2-1:0.132: Closing input extension
[  178.225850][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.365146][ T5941] em28xx 2-1:0.132: Freeing device
[  178.632951][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.695923][ T7444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.422'.
[  179.106931][   T30] audit: type=1400 audit(1751188874.612:520): avc:  denied  { ioctl } for  pid=7459 comm="syz.3.427" path="socket:[13231]" dev="sockfs" ino=13231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  179.432643][ T7308] veth0_vlan: entered promiscuous mode
[  179.464909][ T5813] usb 5-1: USB disconnect, device number 16
[  179.539072][ T7308] veth1_vlan: entered promiscuous mode
[  179.618139][ T5828] Bluetooth: hci5: command tx timeout
[  179.631830][ T7475] netlink: 104 bytes leftover after parsing attributes in process `syz.1.429'.
[  179.804164][ T7308] veth0_macvtap: entered promiscuous mode
[  179.837509][ T7475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=7475 comm=syz.1.429
[  180.323658][ T7308] veth1_macvtap: entered promiscuous mode
[  180.368479][ T5813] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  180.415586][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.437470][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.467080][ T7308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.496194][ T7308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.505447][ T7308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.514559][ T7308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.541460][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  180.548341][ T5813] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  180.577463][ T5813] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  180.604453][ T5813] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.638201][ T5813] usb 2-1: config 1 interface 0 has no altsetting 0
[  180.660382][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=d5a8, bcdDevice= 0.00
[  180.693856][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.706567][ T5813] usb 2-1: Product: syz
[  180.711524][ T5813] usb 2-1: Manufacturer: syz
[  180.716282][ T5813] usb 2-1: SerialNumber: syz
[  180.730330][ T5941] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  180.879991][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  180.934711][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.960117][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.962090][ T5813] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xD5A8
[  180.992700][ T5941] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  181.033296][ T5941] usb 5-1: config 0 has no interface number 0
[  181.039465][ T5941] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  181.079619][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.093355][ T5941] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  181.107797][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.127799][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.135764][ T5941] usb 5-1: Product: syz
[  181.157133][ T5941] usb 5-1: Manufacturer: syz
[  181.179261][   T30] audit: type=1400 audit(1751188876.712:521): avc:  denied  { mounton } for  pid=7308 comm="syz-executor" path="/root/syzkaller.FnmMZy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  181.215357][ T5941] usb 5-1: SerialNumber: syz
[  181.228940][ T5941] usb 5-1: config 0 descriptor??
[  181.253050][ T5941] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  181.265902][ T5941] em28xx 5-1:0.132: Video interface 132 found:
[  181.297381][   T30] audit: type=1400 audit(1751188876.762:522): avc:  denied  { mount } for  pid=7308 comm="syz-executor" name="/" dev="gadgetfs" ino=7172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  181.361250][   T30] audit: type=1400 audit(1751188876.822:523): avc:  denied  { read write } for  pid=7472 comm="syz.1.429" name="lp0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  181.512649][ T5876] usb 2-1: USB disconnect, device number 23
[  181.520803][   T30] audit: type=1400 audit(1751188876.822:524): avc:  denied  { open } for  pid=7472 comm="syz.1.429" path="/dev/usb/lp0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  181.551126][   T30] audit: type=1400 audit(1751188876.832:525): avc:  denied  { ioctl } for  pid=7472 comm="syz.1.429" path="/dev/usb/lp0" dev="devtmpfs" ino=2952 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  182.115624][ T5941] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  182.267522][ T5876] usblp0: removed
[  182.429416][ T5941] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  182.439275][ T5941] em28xx 5-1:0.132: board has no eeprom
[  182.907120][ T5941] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  182.946871][ T7517] tipc: Started in network mode
[  183.018784][ T7517] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  183.087543][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'.
[  183.180014][ T5941] em28xx 5-1:0.132: analog set to bulk mode.
[  183.190167][ T7517] tipc: Enabled bearer <eth:team0>, priority 0
[  183.191909][ T5813] em28xx 5-1:0.132: Registering V4L2 extension
[  183.218222][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.436'.
[  183.289753][ T5941] usb 5-1: USB disconnect, device number 17
[  183.425605][ T5941] em28xx 5-1:0.132: Disconnecting em28xx
[  183.690209][   T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  183.753436][ T5813] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  183.761705][ T5813] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  183.780878][ T5813] em28xx 5-1:0.132: No AC97 audio processor
[  184.310046][ T5876] tipc: Node number set to 11578026
[  184.371256][   T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  184.379507][   T10] usb 2-1: config 0 has no interface number 0
[  184.386496][ T5813] usb 5-1: Decoder not found
[  184.401336][ T5813] em28xx 5-1:0.132: failed to create media graph
[  184.485653][   T10] usb 2-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  184.498996][ T5813] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  184.530859][ T5813] em28xx 5-1:0.132: Remote control support is not available for this card.
[  184.542684][   T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  184.552045][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.570031][ T5941] em28xx 5-1:0.132: Closing input extension
[  184.651896][ T7551] use of bytesused == 0 is deprecated and will be removed in the future,
[  184.660680][ T7551] use the actual size instead.
[  184.675914][   T10] usb 2-1: Product: syz
[  184.682786][ T7551] netlink: 'syz.5.444': attribute type 3 has an invalid length.
[  184.693099][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'.
[  184.701938][ T7551] netlink: 312 bytes leftover after parsing attributes in process `syz.5.444'.
[  184.710892][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'.
[  184.850085][   T10] usb 2-1: Manufacturer: syz
[  184.854733][   T10] usb 2-1: SerialNumber: syz
[  184.862812][ T5941] em28xx 5-1:0.132: Freeing device
[  184.898912][   T10] usb 2-1: config 0 descriptor??
[  185.504538][   T30] audit: type=1400 audit(1751188881.042:526): avc:  denied  { read } for  pid=7560 comm="syz.5.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.620215][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  185.628467][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  185.637635][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  186.392471][ T7576] FAULT_INJECTION: forcing a failure.
[  186.392471][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.421245][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.5.451 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  186.421274][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.421285][ T7576] Call Trace:
[  186.421291][ T7576]  <TASK>
[  186.421298][ T7576]  dump_stack_lvl+0x16c/0x1f0
[  186.421328][ T7576]  should_fail_ex+0x512/0x640
[  186.421355][ T7576]  _copy_from_user+0x2e/0xd0
[  186.421380][ T7576]  bpf_test_init.isra.0+0xe2/0x140
[  186.421409][ T7576]  bpf_prog_test_run_xdp+0x4f0/0x1590
[  186.421446][ T7576]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  186.421475][ T7576]  ? __might_fault+0xc0/0x190
[  186.421503][ T7576]  ? fput+0x70/0xf0
[  186.421529][ T7576]  ? __bpf_prog_get+0x97/0x2a0
[  186.421549][ T7576]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  186.421576][ T7576]  __sys_bpf+0x1488/0x4d80
[  186.421603][ T7576]  ? __pfx___sys_bpf+0x10/0x10
[  186.421627][ T7576]  ? ksys_write+0x190/0x250
[  186.421652][ T7576]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  186.421693][ T7576]  ? fput+0x70/0xf0
[  186.421719][ T7576]  ? ksys_write+0x1ac/0x250
[  186.421739][ T7576]  ? __pfx_ksys_write+0x10/0x10
[  186.421764][ T7576]  __x64_sys_bpf+0x78/0xc0
[  186.421787][ T7576]  ? lockdep_hardirqs_on+0x7c/0x110
[  186.421811][ T7576]  do_syscall_64+0xcd/0x4c0
[  186.421838][ T7576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.421856][ T7576] RIP: 0033:0x7f990ab8e929
[  186.421871][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.421888][ T7576] RSP: 002b:00007f990b9fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  186.421905][ T7576] RAX: ffffffffffffffda RBX: 00007f990adb5fa0 RCX: 00007f990ab8e929
[  186.421916][ T7576] RDX: 0000000000000057 RSI: 0000200000000240 RDI: 000000000000000a
[  186.421927][ T7576] RBP: 00007f990b9fb090 R08: 0000000000000000 R09: 0000000000000000
[  186.421937][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.421947][ T7576] R13: 0000000000000000 R14: 00007f990adb5fa0 R15: 00007fff35c3e838
[  186.421970][ T7576]  </TASK>
[  186.650323][ T5869] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  186.713344][ T5941] usb 2-1: USB disconnect, device number 24
[  187.385319][ T5869] usb 4-1: Using ep0 maxpacket: 32
[  187.438026][ T5869] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  187.493449][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.771309][ T5869] usb 4-1: config 0 descriptor??
[  187.860455][ T7602] sg_write: data in/out 49020/1 bytes for SCSI command 0x1c-- guessing data in;
[  187.860455][ T7602]    program syz.5.455 not setting count and/or reply_len properly
[  187.877359][ T5869] gspca_main: nw80x-2.14.0 probing 055f:d001
[  187.981555][   T30] audit: type=1400 audit(1751188883.342:527): avc:  denied  { mount } for  pid=7596 comm="syz.5.455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  188.061614][   T30] audit: type=1400 audit(1751188883.342:528): avc:  denied  { search } for  pid=7596 comm="syz.5.455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  188.087530][   T30] audit: type=1400 audit(1751188883.342:529): avc:  denied  { search } for  pid=7596 comm="syz.5.455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  188.111478][   T30] audit: type=1400 audit(1751188883.342:530): avc:  denied  { search } for  pid=7596 comm="syz.5.455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  188.136869][   T30] audit: type=1400 audit(1751188883.342:531): avc:  denied  { search } for  pid=7596 comm="syz.5.455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  188.397697][   T30] audit: type=1400 audit(1751188883.432:532): avc:  denied  { read append } for  pid=7596 comm="syz.5.455" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  188.452050][   T30] audit: type=1326 audit(1751188883.452:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.5.455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990ab8e929 code=0x0
[  188.500290][ T5869] gspca_nw80x: reg_r err -110
[  188.505065][ T5869] nw80x 4-1:0.0: probe with driver nw80x failed with error -110
[  188.514838][   T30] audit: type=1400 audit(1751188883.532:534): avc:  denied  { module_request } for  pid=7603 comm="syz.0.457" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  188.602075][ T5869] usb 4-1: USB disconnect, device number 19
[  188.625841][   T30] audit: type=1400 audit(1751188883.862:535): avc:  denied  { relabelfrom } for  pid=7570 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  189.024910][ T7624] capability: warning: `syz.5.459' uses 32-bit capabilities (legacy support in use)
[  191.138346][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[  191.430905][ T7668] netlink: 128 bytes leftover after parsing attributes in process `syz.1.469'.
[  191.460110][ T5862] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  191.583326][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'.
[  191.668291][ T5862] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  191.861633][ T5862] usb 4-1: config 0 has no interface number 0
[  191.941107][ T5862] usb 4-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  191.980794][ T5862] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  191.995179][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.015052][ T5862] usb 4-1: Product: syz
[  192.025523][ T5862] usb 4-1: Manufacturer: syz
[  192.037241][ T5862] usb 4-1: SerialNumber: syz
[  192.037309][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[  192.045752][ T5862] usb 4-1: config 0 descriptor??
[  192.206487][ T7679] team1: entered promiscuous mode
[  192.280324][ T7679] team1: entered allmulticast mode
[  192.343606][ T7689] netlink: 'syz.1.475': attribute type 21 has an invalid length.
[  192.546538][ T7689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.475'.
[  192.663737][ T7689] netlink: 'syz.1.475': attribute type 21 has an invalid length.
[  192.685548][ T7689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.475'.
[  193.300024][ T7696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7696 comm=syz.1.477
[  193.675161][ T5862] usb 4-1: USB disconnect, device number 20
[  193.715142][ T7720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  193.775877][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  193.782451][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  193.800061][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  193.931299][    C1] sd 0:0:1:0: [sda] tag#1610 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  193.941816][    C1] sd 0:0:1:0: [sda] tag#1610 CDB: Read(6) 08 00 9f d1 fe de
[  193.949577][    C1] sd 0:0:1:0: [sda] tag#1611 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  193.960026][    C1] sd 0:0:1:0: [sda] tag#1611 CDB: Read(6) 08 00 9f d1 fe de
[  193.967627][    C1] sd 0:0:1:0: [sda] tag#1612 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  193.978155][    C1] sd 0:0:1:0: [sda] tag#1612 CDB: Read(6) 08 00 9f d1 fe de
[  193.985599][    C1] sd 0:0:1:0: [sda] tag#1613 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  193.996036][    C1] sd 0:0:1:0: [sda] tag#1613 CDB: Read(6) 08 00 9f d1 fe de
[  194.004019][    C1] sd 0:0:1:0: [sda] tag#1614 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  194.014430][    C1] sd 0:0:1:0: [sda] tag#1614 CDB: Read(6) 08 00 9f d1 fe de
[  194.021823][    C1] sd 0:0:1:0: [sda] tag#1615 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  194.032224][    C1] sd 0:0:1:0: [sda] tag#1615 CDB: Read(6) 08 00 9f d1 fe de
[  194.039586][    C1] sd 0:0:1:0: [sda] tag#1616 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  194.049987][    C1] sd 0:0:1:0: [sda] tag#1616 CDB: Read(6) 08 00 9f d1 fe de
[  194.079992][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  194.087043][ T7741] trusted_key: syz.0.484 sent an empty control message without MSG_MORE.
[  194.116871][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.140286][ T5869] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  194.190017][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.229218][ T5869] usb 5-1: config 0 descriptor??
[  194.266872][ T5869] rndis_host 5-1:0.0: skipping garbage
[  194.309092][ T5869] usb 5-1: bad CDC descriptors
[  194.317415][ T5869] cdc_acm 5-1:0.0: skipping garbage
[  194.324919][ T5869] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  194.358943][ T5869] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  194.397130][ T5869] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  194.547557][ T7753] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.675572][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.873071][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.230361][ T5862] usb 5-1: USB disconnect, device number 18
[  195.360614][ T5869] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  195.677414][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short
[  195.711592][ T5869] usb 2-1: not running at top speed; connect to a high speed hub
[  195.840958][ T5869] usb 2-1: config 8 has an invalid interface number: 24 but max is 0
[  195.859612][ T5869] usb 2-1: config 8 has no interface number 0
[  195.861023][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  195.861037][   T30] audit: type=1400 audit(1751188891.392:538): avc:  denied  { open } for  pid=7771 comm="syz.3.497" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  195.939238][ T5869] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  195.967590][   T30] audit: type=1400 audit(1751188891.452:539): avc:  denied  { write } for  pid=7765 comm="syz.5.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  196.023976][   T30] audit: type=1400 audit(1751188891.472:540): avc:  denied  { ioctl } for  pid=7771 comm="syz.3.497" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  196.027191][ T5869] usb 2-1: config 8 interface 24 has no altsetting 0
[  196.048912][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.274278][ T7783] input: syz1 as /devices/virtual/input/input13
[  196.372279][ T5869] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  196.386513][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.423478][ T5869] usb 2-1: Product: syz
[  196.432497][ T5869] usb 2-1: Manufacturer: syz
[  196.571875][ T5869] usb 2-1: SerialNumber: syz
[  196.595452][ T7755] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  196.854624][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.888547][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.994970][   T30] audit: type=1400 audit(1751188893.122:541): avc:  denied  { create } for  pid=7803 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  198.145965][ T5869] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  198.198551][ T5869] usb 2-1: USB disconnect, device number 25
[  198.529995][ T5941] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  198.680674][ T5941] usb 5-1: Using ep0 maxpacket: 8
[  198.701026][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.720147][ T5941] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  198.739640][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.783555][ T5941] usb 5-1: config 0 descriptor??
[  198.800931][ T5941] rndis_host 5-1:0.0: skipping garbage
[  198.806457][ T5941] usb 5-1: bad CDC descriptors
[  198.829591][ T5941] cdc_acm 5-1:0.0: skipping garbage
[  198.837621][ T5941] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  198.845907][ T5941] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  198.855529][ T5941] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  199.006596][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.043622][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.252325][ T5941] usb 5-1: USB disconnect, device number 19
[  200.354656][ T7840] Sensor A: =================  START STATUS  =================
[  200.416193][ T7840] Sensor A: Test Pattern: 75% Colorbar
[  200.421892][ T7840] Sensor A: Show Information: All
[  200.426955][ T7840] Sensor A: Vertical Flip: false
[  200.431983][ T7840] Sensor A: Horizontal Flip: false
[  200.437157][ T7840] Sensor A: Brightness: 128
[  200.441805][ T7840] Sensor A: Contrast: 128
[  200.446168][ T7840] Sensor A: Hue: 0
[  200.450007][ T7840] Sensor A: Saturation: 128
[  200.454581][ T7840] Sensor A: ==================  END STATUS  ==================
[  201.368979][ T7858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  201.375732][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  201.386599][ T7858] vhci_hcd vhci_hcd.0: Device attached
[  201.402398][ T7858] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7)
[  201.408956][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.429330][ T7858] vhci_hcd vhci_hcd.0: Device attached
[  201.441083][ T7858] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9)
[  201.447646][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  201.540007][   T30] audit: type=1400 audit(1751188897.022:542): avc:  denied  { write } for  pid=7856 comm="syz.1.513" lport=50736 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  201.594846][ T7858] vhci_hcd vhci_hcd.0: Device attached
[  201.600522][ T5862] vhci_hcd: vhci_device speed not set
[  201.605600][   T30] audit: type=1400 audit(1751188897.032:543): avc:  denied  { setopt } for  pid=7856 comm="syz.1.513" lport=50736 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  201.634407][ T7871] trusted_key: encrypted_key: insufficient parameters specified
[  201.700198][ T5862] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  201.898848][ T7858] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  201.905490][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  202.251862][ T7877] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16)
[  202.258496][ T7877] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  202.410523][ T5869] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  202.463117][ T7858] vhci_hcd vhci_hcd.0: Device attached
[  202.469630][ T7883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  202.482987][ T7858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  202.493618][ T7877] vhci_hcd vhci_hcd.0: Device attached
[  202.580075][ T7858] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(22)
[  202.586733][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.652528][   T30] audit: type=1400 audit(1751188898.182:544): avc:  denied  { getopt } for  pid=7890 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  202.683054][   T30] audit: type=1400 audit(1751188898.192:545): avc:  denied  { ioctl } for  pid=7890 comm="syz.1.518" path="socket:[15036]" dev="sockfs" ino=15036 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  202.709800][ T5869] usb 4-1: Using ep0 maxpacket: 32
[  202.740326][ T5869] usb 4-1: config 0 has an invalid interface number: 169 but max is 0
[  202.752834][ T7858] vhci_hcd vhci_hcd.0: Device attached
[  202.765428][   T30] audit: type=1400 audit(1751188898.192:546): avc:  denied  { write } for  pid=7890 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  202.784331][ T5869] usb 4-1: config 0 has no interface number 0
[  202.810974][ T5869] usb 4-1: New USB device found, idVendor=05e0, idProduct=2005, bcdDevice=a9.e9
[  202.811182][ T7858] vhci_hcd vhci_hcd.0: port 0 already used
[  202.833198][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.872471][ T5869] usb 4-1: Product: syz
[  202.879509][ T5869] usb 4-1: Manufacturer: syz
[  202.886595][ T5869] usb 4-1: SerialNumber: syz
[  202.901291][ T5869] usb 4-1: config 0 descriptor??
[  202.911165][ T5869] ipaq 4-1:0.169: PocketPC PDA converter detected
[  202.927248][ T5869] usb 4-1: active config #0 != 1 ??
[  202.941074][ T7876] vhci_hcd: connection closed
[  202.945302][ T7884] vhci_hcd: connection closed
[  202.960495][ T7865] vhci_hcd: connection closed
[  202.965911][ T7863] vhci_hcd: connection closed
[  202.970817][ T7880] vhci_hcd: connection closed
[  202.976212][ T7861] vhci_hcd: connection reset by peer
[  202.986425][   T13] vhci_hcd: stop threads
[  203.015368][   T13] vhci_hcd: release socket
[  203.051222][   T13] vhci_hcd: disconnect device
[  203.083848][   T13] vhci_hcd: stop threads
[  203.088337][   T13] vhci_hcd: release socket
[  203.126286][   T13] vhci_hcd: disconnect device
[  203.507390][ T7907] sctp: [Deprecated]: syz.3.517 (pid 7907) Use of int in maxseg socket option.
[  203.507390][ T7907] Use struct sctp_assoc_value instead
[  204.013427][   T30] audit: type=1400 audit(1751188899.542:547): avc:  denied  { read } for  pid=7908 comm="syz.1.524" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  204.194205][   T13] vhci_hcd: stop threads
[  204.213614][   T30] audit: type=1400 audit(1751188899.542:548): avc:  denied  { open } for  pid=7908 comm="syz.1.524" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  204.242495][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.252200][   T30] audit: type=1400 audit(1751188899.542:549): avc:  denied  { ioctl } for  pid=7908 comm="syz.1.524" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  204.280009][   T13] vhci_hcd: release socket
[  204.288716][   T13] vhci_hcd: disconnect device
[  204.292248][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.321591][   T13] vhci_hcd: stop threads
[  204.328069][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'.
[  204.341604][   T13] vhci_hcd: release socket
[  204.357777][   T13] vhci_hcd: disconnect device
[  204.373096][   T13] vhci_hcd: stop threads
[  204.398124][   T13] vhci_hcd: release socket
[  204.412651][   T13] vhci_hcd: disconnect device
[  204.440011][   T13] vhci_hcd: stop threads
[  204.467972][   T13] vhci_hcd: release socket
[  204.489088][   T30] audit: type=1326 audit(1751188900.022:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.1.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55b0f8e929 code=0x0
[  204.513779][   T13] vhci_hcd: disconnect device
[  204.704878][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  204.899636][   T30] audit: type=1400 audit(1751188900.432:551): avc:  denied  { ioctl } for  pid=7927 comm="syz.0.528" path="socket:[15089]" dev="sockfs" ino=15089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  205.039975][   T10] usb 5-1: Using ep0 maxpacket: 32
[  205.047917][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  205.056444][   T10] usb 5-1: config 0 has no interface number 0
[  205.067309][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.094248][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  205.105269][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.113929][   T10] usb 5-1: Product: syz
[  205.119332][   T10] usb 5-1: Manufacturer: syz
[  205.125976][   T10] usb 5-1: SerialNumber: syz
[  205.152000][   T10] usb 5-1: config 0 descriptor??
[  205.175161][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  205.186791][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  205.287906][ T7945] netlink: 'syz.5.531': attribute type 2 has an invalid length.
[  205.313515][ T7945] netlink: 'syz.5.531': attribute type 1 has an invalid length.
[  205.510825][   T24] usb 4-1: USB disconnect, device number 21
[  205.569524][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  205.706368][ T7967] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.730073][ T7964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  205.736634][ T7964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  206.315367][ T7964] vhci_hcd vhci_hcd.0: Device attached
[  206.730253][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  206.739012][   T10] em28xx 5-1:0.132: board has no eeprom
[  206.739311][ T7920] em28xx 5-1:0.132: failed to trigger read from i2c address 0x28 (error=-5)
[  206.900157][   T55] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  206.971941][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  206.979818][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  207.221311][ T7964] team0: No ports can be present during mode change
[  207.276693][ T5813] em28xx 5-1:0.132: Registering V4L2 extension
[  207.356960][ T7970] vhci_hcd: connection closed
[  207.358377][   T13] vhci_hcd: stop threads
[  207.428164][   T13] vhci_hcd: release socket
[  207.433763][   T13] vhci_hcd: disconnect device
[  207.438575][ T5813] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  207.466598][   T10] usb 5-1: USB disconnect, device number 20
[  207.487970][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  207.533530][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  207.533547][   T30] audit: type=1400 audit(1751188903.072:558): avc:  denied  { create } for  pid=7993 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  207.611685][ T5862] vhci_hcd: vhci_device speed not set
[  207.746955][ T5813] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  207.937704][ T5813] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  208.109974][   T30] audit: type=1400 audit(1751188903.612:559): avc:  denied  { read } for  pid=8010 comm="syz.1.542" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  208.132771][ T5813] em28xx 5-1:0.132: No AC97 audio processor
[  208.146455][ T5813] usb 5-1: Decoder not found
[  208.158196][ T5813] em28xx 5-1:0.132: failed to create media graph
[  208.210702][ T5813] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  208.220032][   T30] audit: type=1400 audit(1751188903.612:560): avc:  denied  { open } for  pid=8010 comm="syz.1.542" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  208.264414][   T30] audit: type=1400 audit(1751188903.672:561): avc:  denied  { wake_alarm } for  pid=8004 comm="syz.4.541" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  208.286453][ T5813] em28xx 5-1:0.132: Remote control support is not available for this card.
[  208.295920][   T10] em28xx 5-1:0.132: Closing input extension
[  208.349267][   T10] em28xx 5-1:0.132: Freeing device
[  208.359759][ T8013] loop4: detected capacity change from 0 to 524255232
[  208.500769][ T8016] loop4: detected capacity change from 524255232 to 524287936
[  210.027046][ T5828] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  210.216545][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.232712][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.412212][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.674996][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.682536][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.693169][ T7994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=7994 comm=syz.0.539
[  210.861468][   T30] audit: type=1400 audit(1751188906.402:562): avc:  denied  { connect } for  pid=8053 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  211.233171][   T30] audit: type=1400 audit(1751188906.432:563): avc:  denied  { getopt } for  pid=8053 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  211.276168][   T30] audit: type=1400 audit(1751188906.482:564): avc:  denied  { write } for  pid=8053 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  211.812129][   T30] audit: type=1400 audit(1751188907.342:565): avc:  denied  { append } for  pid=8064 comm="syz.4.553" name="event3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  211.840411][ T8065] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  211.858172][ T8065] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  211.875808][   T30] audit: type=1400 audit(1751188907.372:566): avc:  denied  { append } for  pid=8064 comm="syz.4.553" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  212.228470][ T8065] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  212.490425][   T55] vhci_hcd: vhci_device speed not set
[  212.831934][   T30] audit: type=1400 audit(1751188908.372:567): avc:  denied  { create } for  pid=8080 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  212.851754][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.864774][   T30] audit: type=1400 audit(1751188908.402:568): avc:  denied  { connect } for  pid=8080 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  212.884787][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.902047][   T30] audit: type=1400 audit(1751188908.402:569): avc:  denied  { name_connect } for  pid=8080 comm="syz.5.557" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  213.175300][ T5869] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  213.307149][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'.
[  213.696624][ T5869] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  213.708822][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.719818][ T5869] usb 5-1: Product: syz
[  213.734188][ T5869] usb 5-1: Manufacturer: syz
[  213.738992][ T5869] usb 5-1: SerialNumber: syz
[  213.816999][ T5869] usb 5-1: config 0 descriptor??
[  214.540040][   T55] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  215.851003][ T5869] usb 5-1: Firmware version (0.0) predates our first public release.
[  215.948715][   T55] usb 4-1: Using ep0 maxpacket: 8
[  215.964687][ T5869] usb 5-1: Please update to version 0.2 or newer
[  215.998552][   T55] usb 4-1: config 162 has an invalid interface number: 95 but max is 1
[  216.037087][   T55] usb 4-1: config 162 has an invalid interface number: 172 but max is 1
[  216.084895][   T55] usb 4-1: config 162 has no interface number 0
[  216.155842][   T55] usb 4-1: config 162 has no interface number 1
[  216.162378][   T55] usb 4-1: config 162 interface 95 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  216.176271][   T55] usb 4-1: config 162 interface 172 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  216.187363][   T55] usb 4-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  216.209511][ T5869] usb 5-1: USB disconnect, device number 21
[  216.218536][   T55] usb 4-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  216.279664][   T55] usb 4-1: config 162 interface 172 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  216.380706][   T55] usb 4-1: config 162 interface 172 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  216.560131][   T55] usb 4-1: config 162 interface 95 has no altsetting 0
[  216.653305][   T30] audit: type=1400 audit(1751188912.152:570): avc:  denied  { create } for  pid=8131 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  216.674531][   T55] usb 4-1: config 162 interface 172 has no altsetting 0
[  216.682736][   T30] audit: type=1400 audit(1751188912.152:571): avc:  denied  { accept } for  pid=8131 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  216.704677][   T55] usb 4-1: string descriptor 0 read error: -71
[  216.952127][   T55] usb 4-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=d5.e1
[  216.968019][   T30] audit: type=1400 audit(1751188912.492:572): avc:  denied  { watch watch_reads } for  pid=8126 comm="syz.1.566" path="pipe:[16611]" dev="pipefs" ino=16611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  216.993202][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.093097][   T55] usb 4-1: can't set config #162, error -71
[  217.209996][   T55] usb 4-1: USB disconnect, device number 22
[  217.272467][   T30] audit: type=1400 audit(1751188912.802:573): avc:  denied  { create } for  pid=8145 comm="syz.0.571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  217.284647][ T8147] fuse: Unknown parameter './file0'
[  217.335832][   T30] audit: type=1400 audit(1751188912.812:574): avc:  denied  { mounton } for  pid=8145 comm="syz.0.571" path="/149/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  217.398169][ T8151] loop3: detected capacity change from 0 to 7
[  217.433939][   T30] audit: type=1400 audit(1751188912.902:575): avc:  denied  { create } for  pid=8149 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  217.460301][ T8151] Dev loop3: unable to read RDB block 7
[  217.469992][ T8151]  loop3: unable to read partition table
[  217.830022][ T5941] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  217.862817][   T30] audit: type=1400 audit(1751188913.092:576): avc:  denied  { connect } for  pid=8156 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  217.885774][ T8151] loop3: partition table beyond EOD, truncated
[  217.896390][   T30] audit: type=1400 audit(1751188913.152:577): avc:  denied  { write } for  pid=8156 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  217.930799][ T8151] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  218.069982][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  218.098051][ T5941] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  218.546074][ T5941] usb 5-1: config 0 has no interface number 0
[  218.557681][ T5941] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  218.588579][ T5941] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  218.661607][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.695333][ T5941] usb 5-1: Product: syz
[  218.703531][ T5941] usb 5-1: Manufacturer: syz
[  218.712122][ T5941] usb 5-1: SerialNumber: syz
[  218.840616][ T5941] usb 5-1: config 0 descriptor??
[  218.891441][ T5941] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  218.933506][ T5941] em28xx 5-1:0.132: Video interface 132 found:
[  218.976029][   T30] audit: type=1400 audit(1751188914.512:578): avc:  denied  { read } for  pid=8177 comm="syz.3.576" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  219.050449][   T30] audit: type=1400 audit(1751188914.512:579): avc:  denied  { open } for  pid=8177 comm="syz.3.576" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  219.322108][ T5941] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  219.418646][ T8195] FAULT_INJECTION: forcing a failure.
[  219.418646][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.432139][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.1.580 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  219.432165][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.432176][ T8195] Call Trace:
[  219.432182][ T8195]  <TASK>
[  219.432189][ T8195]  dump_stack_lvl+0x16c/0x1f0
[  219.432220][ T8195]  should_fail_ex+0x512/0x640
[  219.432247][ T8195]  _copy_to_user+0x32/0xd0
[  219.432274][ T8195]  simple_read_from_buffer+0xcb/0x170
[  219.432299][ T8195]  proc_fail_nth_read+0x197/0x270
[  219.432322][ T8195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.432346][ T8195]  ? rw_verify_area+0xcf/0x680
[  219.432365][ T8195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.432387][ T8195]  vfs_read+0x1e1/0xc60
[  219.432412][ T8195]  ? __pfx___mutex_lock+0x10/0x10
[  219.432438][ T8195]  ? __pfx_vfs_read+0x10/0x10
[  219.432466][ T8195]  ? __fget_files+0x20e/0x3c0
[  219.432497][ T8195]  ksys_read+0x12a/0x250
[  219.432518][ T8195]  ? __pfx_ksys_read+0x10/0x10
[  219.432546][ T8195]  do_syscall_64+0xcd/0x4c0
[  219.432573][ T8195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.432591][ T8195] RIP: 0033:0x7f55b0f8d33c
[  219.432606][ T8195] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  219.432623][ T8195] RSP: 002b:00007f55b1d2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  219.432641][ T8195] RAX: ffffffffffffffda RBX: 00007f55b11b6160 RCX: 00007f55b0f8d33c
[  219.432652][ T8195] RDX: 000000000000000f RSI: 00007f55b1d2d0a0 RDI: 0000000000000006
[  219.432663][ T8195] RBP: 00007f55b1d2d090 R08: 0000000000000000 R09: 0000000000000000
[  219.432674][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.432685][ T8195] R13: 0000000000000000 R14: 00007f55b11b6160 R15: 00007ffefe2f0cb8
[  219.432709][ T8195]  </TASK>
[  219.724723][ T5941] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  219.736209][ T5941] em28xx 5-1:0.132: board has no eeprom
[  220.291279][ T8178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  220.341671][ T8178] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  220.396999][ T8178] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  220.423199][ T8178] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  220.442133][ T8178] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  220.451285][ T8178] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  220.472188][ T8178] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  220.489141][ T8178] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  220.517291][ T8178] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  220.537503][ T8178] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  220.554664][ T8178] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  220.570664][ T8178] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  220.593942][ T8178] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  220.698641][ T5941] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  220.706682][ T5941] em28xx 5-1:0.132: analog set to bulk mode.
[  220.712781][ T5862] em28xx 5-1:0.132: Registering V4L2 extension
[  220.890066][ T5869] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  220.908006][   T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  221.050025][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  221.070518][ T5941] usb 5-1: USB disconnect, device number 22
[  221.072400][ T5941] em28xx 5-1:0.132: Disconnecting em28xx
[  221.119986][ T5869] usb 6-1: Using ep0 maxpacket: 32
[  221.130588][ T5869] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  221.130618][ T5869] usb 6-1: config 0 has no interface number 0
[  221.130652][ T5869] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  221.132368][ T5869] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  221.132393][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.132412][ T5869] usb 6-1: Product: syz
[  221.132426][ T5869] usb 6-1: Manufacturer: syz
[  221.132440][ T5869] usb 6-1: SerialNumber: syz
[  221.134661][ T5869] usb 6-1: config 0 descriptor??
[  221.137841][ T5869] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  221.137871][ T5869] em28xx 6-1:0.132: Video interface 132 found:
[  221.141983][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.142012][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  221.142047][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  221.142068][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.144615][   T24] usb 2-1: config 0 descriptor??
[  221.158923][   T30] audit: type=1400 audit(1751188916.692:580): avc:  denied  { append } for  pid=8219 comm="syz.3.586" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  221.242913][ T5862] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  221.242953][ T5862] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  221.242965][ T5862] em28xx 5-1:0.132: No AC97 audio processor
[  221.250124][ T5862] usb 5-1: Decoder not found
[  221.250144][ T5862] em28xx 5-1:0.132: failed to create media graph
[  221.250165][ T5862] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  221.252146][ T5862] em28xx 5-1:0.132: Remote control support is not available for this card.
[  221.252421][ T5941] em28xx 5-1:0.132: Closing input extension
[  221.284818][ T5941] em28xx 5-1:0.132: Freeing device
[  221.420046][   T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  221.718725][   T30] audit: type=1400 audit(1751188917.092:581): avc:  denied  { create } for  pid=8238 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  221.780438][ T5869] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  221.800370][   T55] usb 4-1: Using ep0 maxpacket: 32
[  222.296311][   T30] audit: type=1400 audit(1751188917.452:582): avc:  denied  { mount } for  pid=8240 comm="syz.0.589" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  222.319079][   T24] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  222.373049][   T30] audit: type=1400 audit(1751188917.462:583): avc:  denied  { search } for  pid=8240 comm="syz.0.589" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  222.421792][ T5869] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  222.430744][ T8252] SELinux: failed to load policy
[  222.430851][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[  222.457176][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'.
[  222.490238][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  222.496370][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[  222.516673][   T55] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  222.527943][ T5869] em28xx 6-1:0.132: board has no eeprom
[  222.570164][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  222.576317][   T55] usb 4-1: config 0 has no interface number 0
[  222.596679][   T30] audit: type=1400 audit(1751188917.462:584): avc:  denied  { search } for  pid=8240 comm="syz.0.589" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  222.622288][   T30] audit: type=1400 audit(1751188917.462:585): avc:  denied  { read open } for  pid=8240 comm="syz.0.589" path="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  222.645912][ T5869] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  222.654588][   T55] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  222.663775][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.671929][ T5869] em28xx 6-1:0.132: analog set to bulk mode.
[  222.678001][ T5876] em28xx 6-1:0.132: Registering V4L2 extension
[  222.688803][   T55] usb 4-1: Product: syz
[  222.693348][ T5869] usb 6-1: USB disconnect, device number 2
[  222.699950][   T55] usb 4-1: Manufacturer: syz
[  222.704601][   T55] usb 4-1: SerialNumber: syz
[  222.711500][ T5869] em28xx 6-1:0.132: Disconnecting em28xx
[  222.722459][   T55] usb 4-1: config 0 descriptor??
[  222.746095][   T55] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  222.754008][   T24] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[  222.767226][   T24] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[  222.900336][   T55] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  222.931682][   T24] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -32
[  222.991475][ T5941] usb 2-1: USB disconnect, device number 26
[  223.131047][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  223.409717][   T55] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  223.426234][   T55] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  223.726460][ T5876] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  223.765433][ T5876] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  223.794697][ T5876] em28xx 6-1:0.132: No AC97 audio processor
[  223.805206][ T5876] videodev: could not get a free minor
[  223.824318][ T5876] em28xx 6-1:0.132: unable to register video device (error=-23).
[  223.863830][ T5876] em28xx 6-1:0.132: Remote control support is not available for this card.
[  223.927056][ T5869] em28xx 6-1:0.132: Closing input extension
[  223.954457][ T5869] em28xx 6-1:0.132: Freeing device
[  223.981966][ T8291] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[  224.022685][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  224.022703][   T30] audit: type=1400 audit(1751188919.562:587): avc:  denied  { getopt } for  pid=8284 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  224.278917][   T30] audit: type=1400 audit(1751188919.812:588): avc:  denied  { create } for  pid=8298 comm="syz.4.599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  224.357634][ T8297] lo speed is unknown, defaulting to 1000
[  224.376015][ T8303] fuse: Bad value for 'fd'
[  224.403572][ T8297] lo speed is unknown, defaulting to 1000
[  224.436465][ T8297] lo speed is unknown, defaulting to 1000
[  224.577191][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  224.577207][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  224.577240][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[  224.656626][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout
[  224.865390][ T8314] sctp: [Deprecated]: syz.0.604 (pid 8314) Use of int in maxseg socket option.
[  224.865390][ T8314] Use struct sctp_assoc_value instead
[  224.906327][   T30] audit: type=1400 audit(1751188920.432:589): avc:  denied  { write } for  pid=8305 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  224.977272][   T30] audit: type=1400 audit(1751188920.432:590): avc:  denied  { nlmsg_write } for  pid=8305 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  225.110308][ T5869] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  225.149881][   T55] lo speed is unknown, defaulting to 1000
[  225.169688][ T8297] infiniband syz2: set active
[  225.181857][ T8297] infiniband syz2: added lo
[  225.204168][ T8297] syz2: rxe_create_cq: returned err = -12
[  225.218825][ T8297] infiniband syz2: Couldn't create ib_mad CQ
[  225.272535][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  225.279509][ T8297] infiniband syz2: Couldn't open port 1
[  225.295173][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.332758][ T5869] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  225.370532][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.483149][ T8297] RDS/IB: syz2: added
[  225.487683][ T8297] smc: adding ib device syz2 with port count 1
[  225.510208][ T5869] usb 5-1: config 0 descriptor??
[  225.528643][ T8297] smc:    ib device syz2 port 1 has pnetid 
[  225.551782][ T5869] usb 5-1: bad CDC descriptors
[  225.555343][   T10] lo speed is unknown, defaulting to 1000
[  225.579442][ T5869] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  225.616559][ T5869] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  225.625247][ T8297] lo speed is unknown, defaulting to 1000
[  225.660009][ T5869] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  225.665120][ T8329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  225.867201][   T30] audit: type=1400 audit(1751188921.302:591): avc:  denied  { write } for  pid=8315 comm="syz.4.603" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  225.912669][ T5869] usb 5-1: USB disconnect, device number 23
[  226.700834][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  226.731167][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout
[  226.873778][ T8297] lo speed is unknown, defaulting to 1000
[  227.040831][ T8358] sctp: [Deprecated]: syz.0.612 (pid 8358) Use of int in maxseg socket option.
[  227.040831][ T8358] Use struct sctp_assoc_value instead
[  227.055162][ T5869] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  227.280759][ T8297] lo speed is unknown, defaulting to 1000
[  227.379209][ T5869] usb 2-1: Using ep0 maxpacket: 8
[  227.559471][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  227.771954][ T5869] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  227.835388][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.878510][ T5869] usb 2-1: config 0 descriptor??
[  228.035786][ T8297] lo speed is unknown, defaulting to 1000
[  228.206919][ T5869] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  228.539987][   T55] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  240.340476][   T23] sched: DL replenish lagged too much
[  333.289887][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  333.296856][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8271/1:b..l
[  333.305156][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=20609, q=272 ncpus=2)
[  333.312867][    C1] task:syz.3.586       state:R  running task     stack:23608 pid:8271  tgid:8271  ppid:5818   task_flags:0x40064c flags:0x00004002
[  333.328049][    C1] Call Trace:
[  333.331325][    C1]  <TASK>
[  333.334256][    C1]  __schedule+0x116a/0x5de0
[  333.338781][    C1]  ? __pfx___schedule+0x10/0x10
[  333.343629][    C1]  ? css_rstat_updated+0x9d/0xd30
[  333.348662][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  333.353691][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  333.359061][    C1]  preempt_schedule_common+0x44/0xc0
[  333.364347][    C1]  preempt_schedule_thunk+0x16/0x30
[  333.369557][    C1]  _raw_spin_unlock+0x3e/0x50
[  333.374231][    C1]  unmap_page_range+0x106b/0x4350
[  333.379285][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  333.384689][    C1]  ? uprobe_munmap+0x20/0x5c0
[  333.389372][    C1]  unmap_single_vma.constprop.0+0x153/0x240
[  333.395272][    C1]  unmap_vmas+0x218/0x470
[  333.399608][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  333.404470][    C1]  ? mas_next_slot+0x12d3/0x21b0
[  333.409427][    C1]  exit_mmap+0x1b9/0xb90
[  333.413670][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  333.418456][    C1]  __mmput+0x12a/0x410
[  333.422527][    C1]  mmput+0x62/0x70
[  333.426244][    C1]  do_exit+0x7c4/0x2bd0
[  333.430405][    C1]  ? proc_coredump_connector+0x2d1/0x4f0
[  333.436036][    C1]  ? __pfx_do_exit+0x10/0x10
[  333.440638][    C1]  do_group_exit+0xd3/0x2a0
[  333.445148][    C1]  get_signal+0x2673/0x26d0
[  333.449664][    C1]  ? __pfx_get_signal+0x10/0x10
[  333.454517][    C1]  ? force_sig_fault+0xc4/0x100
[  333.459363][    C1]  ? __pfx_force_sig_fault+0x10/0x10
[  333.464646][    C1]  ? __local_bh_enable_ip+0xa4/0x120
[  333.469934][    C1]  arch_do_signal_or_restart+0x8f/0x7d0
[  333.475492][    C1]  ? find_held_lock+0x2b/0x80
[  333.480171][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  333.486337][    C1]  irqentry_exit_to_user_mode+0x12a/0x270
[  333.492062][    C1]  asm_exc_page_fault+0x26/0x30
[  333.496907][    C1] RIP: 0033:0x7f4410e4f837
[  333.501317][    C1] RSP: 002b:00007f4411db01a0 EFLAGS: 00010206
[  333.507378][    C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4410f8e929
[  333.515346][    C1] RDX: 00007f4411db01c0 RSI: 00007f4411db02f0 RDI: 000000000000000b
[  333.523314][    C1] RBP: 00007f4411010b39 R08: 0000000000000000 R09: 0000000000000000
[  333.531280][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  333.539245][    C1] R13: 0000000000000000 R14: 00007f44111b6160 R15: 00007fff2451fc18
[  333.547222][    C1]  </TASK>
[  333.550235][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g20609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  333.562810][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=16230
[  333.570687][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g20609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  333.582044][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  333.592005][    C1] rcu: RCU grace-period kthread stack dump:
[  333.597885][    C1] task:rcu_preempt     state:I stack:28744 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  333.609804][    C1] Call Trace:
[  333.613079][    C1]  <TASK>
[  333.616010][    C1]  __schedule+0x116a/0x5de0
[  333.620530][    C1]  ? __lock_acquire+0x622/0x1c90
[  333.625477][    C1]  ? __pfx___schedule+0x10/0x10
[  333.630331][    C1]  ? find_held_lock+0x2b/0x80
[  333.635015][    C1]  ? schedule+0x2d7/0x3a0
[  333.639349][    C1]  schedule+0xe7/0x3a0
[  333.643446][    C1]  schedule_timeout+0x123/0x290
[  333.648320][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  333.653706][    C1]  ? __pfx_process_timeout+0x10/0x10
[  333.658995][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  333.664803][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  333.670281][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  333.675052][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  333.680348][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  333.685553][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  333.690494][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  333.695368][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  333.701189][    C1]  rcu_gp_kthread+0x270/0x380
[  333.705873][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  333.711090][    C1]  ? rcu_is_watching+0x12/0xc0
[  333.715855][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  333.721058][    C1]  ? __kthread_parkme+0x19e/0x250
[  333.726086][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  333.731292][    C1]  kthread+0x3c2/0x780
[  333.735355][    C1]  ? __pfx_kthread+0x10/0x10
[  333.739939][    C1]  ? rcu_is_watching+0x12/0xc0
[  333.744705][    C1]  ? __pfx_kthread+0x10/0x10
[  333.749292][    C1]  ret_from_fork+0x5d4/0x6f0
[  333.753885][    C1]  ? __pfx_kthread+0x10/0x10
[  333.758473][    C1]  ret_from_fork_asm+0x1a/0x30
[  333.763249][    C1]  </TASK>
[  333.766262][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  333.772574][    C1] Sending NMI from CPU 1 to CPUs 0:
[  333.777783][    C0] NMI backtrace for cpu 0
[  333.777794][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  333.777811][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.777819][    C0] RIP: 0010:write_comp_data+0x0/0x90
[  333.777834][    C0] Code: 48 8b 05 4b c6 10 12 48 8b 80 30 16 00 00 e9 c7 a8 c7 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 17 c6 10 12 65 8b 05 28 c6
[  333.777847][    C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000046
[  333.777859][    C0] RAX: 0000000000000001 RBX: ffff88805eb97340 RCX: ffffffff89936eb8
[  333.777868][    C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
[  333.777876][    C0] RBP: ffff88805802d000 R08: 0000000000000005 R09: 0000000000000000
[  333.777884][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[  333.777892][    C0] R13: 0000000000000000 R14: ffff88805eb97340 R15: ffffffff89936d40
[  333.777900][    C0] FS:  0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000
[  333.777914][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  333.777930][    C0] CR2: 00007fd725de0d74 CR3: 000000001f6ca000 CR4: 00000000003526f0
[  333.777939][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  333.777947][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  333.777956][    C0] Call Trace:
[  333.777960][    C0]  <IRQ>
[  333.777965][    C0]  advance_sched+0x178/0xc80
[  333.777983][    C0]  ? find_held_lock+0x2b/0x80
[  333.778000][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  333.778016][    C0]  ? __pfx_advance_sched+0x10/0x10
[  333.778031][    C0]  __hrtimer_run_queues+0x202/0xad0
[  333.778048][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  333.778062][    C0]  ? read_tsc+0x9/0x20
[  333.778078][    C0]  hrtimer_interrupt+0x397/0x8e0
[  333.778098][    C0]  __sysvec_apic_timer_interrupt+0x108/0x3f0
[  333.778119][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  333.778138][    C0]  </IRQ>
[  333.778142][    C0]  <TASK>
[  333.778147][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  333.778162][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  333.778179][    C0] Code: ab 71 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 30 29 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  333.778192][    C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2
[  333.778202][    C0] RAX: 00000000008dad23 RBX: 0000000000000000 RCX: ffffffff8b80dc59
[  333.778210][    C0] RDX: 0000000000000000 RSI: ffffffff8de1a0c6 RDI: ffffffff8c157ca0
[  333.778219][    C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645
[  333.778227][    C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000
[  333.778235][    C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000
[  333.778246][    C0]  ? ct_kernel_exit+0x139/0x190
[  333.778268][    C0]  default_idle+0x13/0x20
[  333.778279][    C0]  default_idle_call+0x6d/0xb0
[  333.778290][    C0]  do_idle+0x391/0x510
[  333.778307][    C0]  ? __pfx_do_idle+0x10/0x10
[  333.778323][    C0]  ? trace_sched_exit_tp+0x31/0x130
[  333.778342][    C0]  cpu_startup_entry+0x4f/0x60
[  333.778358][    C0]  rest_init+0x16b/0x2b0
[  333.778370][    C0]  ? acpi_subsystem_init+0x133/0x180
[  333.778386][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  333.778404][    C0]  start_kernel+0x3ee/0x4d0
[  333.778422][    C0]  x86_64_start_reservations+0x18/0x30
[  333.778439][    C0]  x86_64_start_kernel+0x130/0x190
[  333.778455][    C0]  common_startup_64+0x13e/0x148
[  333.778473][    C0]  </TASK>