last executing test programs:

6m30.579981027s ago: executing program 0 (id=90):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000001a40)="455abf74ecee", 0x6}], 0x1, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c008)

6m29.445041826s ago: executing program 0 (id=95):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
getcwd(&(0x7f0000000480)=""/30, 0x1e)

6m25.937368571s ago: executing program 0 (id=109):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000000)={0x7, @raw_data="5499691b9331ff660dcfbb4a4030d50162cec25135f460c6161836e6518ff2908cb455fe96a102cf242d1f2e85dfec97edc39a9e5bca0237c72f37dbae62ac536d93baa88740ae6ae52186ab3061b5c60b4563d6d937e1fbd7690ebb5d85aaa7e08eff2443a8e756d865d4b5f2d75653f9c721651d846cf0d3421e61c586a41932b5b1b1b0d4645a0300158a08a46a4d5d52d3645b6fa2050ad4a24811080830fc961f45ecdfc75afd64646810d2877936142bbceb185f9ada1bb4a58e52ec49ab01c7da28c8868e"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x24)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
io_setup(0x6, &(0x7f0000001380)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000400b46c65f902a5da726c73f00b5ac9477fd006a32ae31110eb63082752649606498019da0fa3f8e8c8f06695626db9f8c15639a32e2ac0a1771bdb2a3ed385e23661dc23af091ccdd1408363cb3cef7228915c72c3405241c44c80ddb2fe6d135c0a8536f4df1eaaa5fe6f057de2f7188cd11268eb9bb6f3e2f776f9d3058f3487b2635f86c3cbd31acda69c44b596a1f34195d27d0a4940fdc377b47813bd861c218bd9fa90e5841a45256afa3c81ec5ab4c1a04a4071ab28af7ffd9d44f17776f5b2a12ebdbe62aa6863209178810484207043b94977c1c6569ba6b116ebe121ded01adef60eea11fe2ff6eb834af1fbde9864865d4be69a2f980a00ee1a39460cbb4c3def198a8bf549fc7dca41758a3cf928164ea5dc095af5f55de17858be26b83440614318fc0f1fdf709045807a6e34617eb913bc27004b2251bc5b6ab240d75d0259c134f2d95fe7543db551037fdc6298792cd742c60499e712d30090f22725840522505d86c0203445a9955899f77eadc060c352859d426fcbb7ffb962817e00d0e0170530ffa452b903537cbced8a5d49f9155dd04288e4e"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x7)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
ioctl$UI_DEV_DESTROY(r6, 0x5502)

6m23.985565199s ago: executing program 0 (id=114):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

6m23.74865213s ago: executing program 0 (id=116):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

6m23.433932349s ago: executing program 0 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x800, 0x1)

6m8.322287218s ago: executing program 32 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x800, 0x1)

5m46.450659673s ago: executing program 1 (id=246):
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

5m46.342609881s ago: executing program 1 (id=248):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5m45.286229165s ago: executing program 1 (id=252):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1)
ioctl$FIONREAD(r0, 0x8924, 0x0)

5m43.212712506s ago: executing program 1 (id=255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = dup(r0)
r4 = fcntl$dupfd(r1, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xda, 0xe5, 0xec, 0x10, 0xc72, 0x14, 0x148d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x7, 0x40, 0x2, [{{0x9, 0x4, 0xb0, 0x9, 0x0, 0x7e, 0x83, 0x9b, 0x6}}]}}]}}, 0x0)

5m40.611847235s ago: executing program 5 (id=169):
r0 = socket(0x2, 0x2, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0)
connect$unix(r0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x4)
getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff3, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20000000)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

5m37.97303651s ago: executing program 5 (id=267):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000010032bbd7001"], 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

5m37.734828628s ago: executing program 1 (id=270):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

5m37.346296187s ago: executing program 1 (id=272):
syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aabdaaaaaaaaaabbbbbbbbbbbb86dd60122d9200383afffc000000000000000000000000000000fe8000000000000000000000000000aa01039078000000006283677200082cff00000000000000000000000000000000ff02000000000000000000000000000184000a11"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x60b03, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000240), 0x1001)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m37.085370976s ago: executing program 5 (id=276):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1ae)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400))
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00')

5m36.151973583s ago: executing program 5 (id=278):
r0 = socket(0x2, 0x2, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0)
connect$unix(r0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x4)
getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff3, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20000000)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

5m35.187193296s ago: executing program 5 (id=282):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

5m35.130059844s ago: executing program 5 (id=283):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0)
fallocate(r3, 0x1, 0x100000000, 0x80000000)

5m20.445330205s ago: executing program 33 (id=272):
syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aabdaaaaaaaaaabbbbbbbbbbbb86dd60122d9200383afffc000000000000000000000000000000fe8000000000000000000000000000aa01039078000000006283677200082cff00000000000000000000000000000000ff02000000000000000000000000000184000a11"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x60b03, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = gettid()
ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000240), 0x1001)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m20.047501304s ago: executing program 34 (id=283):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0)
fallocate(r3, 0x1, 0x100000000, 0x80000000)

7.993631496s ago: executing program 2 (id=1736):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x4, 0x1, 0x56, 0x3})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6})

7.137420173s ago: executing program 2 (id=1739):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802)
write$binfmt_elf32(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x30}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}})

4.716918453s ago: executing program 3 (id=1747):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000040)=""/177, 0xb1)
socket$alg(0x26, 0x5, 0x0)
fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=<r5=>0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x54})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]})

4.4931951s ago: executing program 3 (id=1748):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x3, 0x0, 0x0, 0x2, 0x9, 0xfe, 0x1, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x8, 0x3, '\x00', 0x4, 0x8000000000002})

4.369369772s ago: executing program 3 (id=1749):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
socket$kcm(0xa, 0x3, 0x3a)
socket$rxrpc(0x21, 0x2, 0xa)
mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r3, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9})
syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')

4.031465251s ago: executing program 2 (id=1750):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x220540a9}, 0x0)

3.878129956s ago: executing program 2 (id=1751):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
fcntl$addseals(r3, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000})

3.822805731s ago: executing program 7 (id=1752):
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10000040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x1fff, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)

3.821589211s ago: executing program 6 (id=1753):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x3, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0xa6}, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @ib={0x1b, 0x66ec, 0x7fffffff, {"877235c90aa8e02cbd52aedd47933134"}, 0xffffffffffffffff, 0x7, 0x84}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r5, 0x1000000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.955836375s ago: executing program 7 (id=1755):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
socket$kcm(0xa, 0x3, 0x3a)
socket$rxrpc(0x21, 0x2, 0xa)
mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9})
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')

2.813060147s ago: executing program 6 (id=1757):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1)

2.685845599s ago: executing program 4 (id=1758):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000040)=""/177, 0xb1)
socket$alg(0x26, 0x5, 0x0)
fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=<r5=>0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x54})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]})

1.945651597s ago: executing program 7 (id=1759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x38b0, 0x2a}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "cef68f3a6d64d2ccb401d6d7669f301a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4045)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

1.913168387s ago: executing program 6 (id=1760):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, 0x0)

1.816965968s ago: executing program 2 (id=1761):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x4})
mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.810388298s ago: executing program 7 (id=1762):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x19, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x1, 0x100000, @local, 0x7}, 0x1c)

1.729547732s ago: executing program 4 (id=1763):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d9", 0x2b}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81f", 0xf1}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274ef", 0x20}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.669648724s ago: executing program 2 (id=1764):
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = accept4(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80, 0x80000)
socket(0x10, 0x3, 0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ptrace(0x10, 0x1)
socket(0xb, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
pipe(0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x80000)
listen(r0, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.669163881s ago: executing program 4 (id=1765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x2c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffff, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x5, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x2000000080000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x8, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53a, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x2, 0x40000000000006, 0xb, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]})

1.428183954s ago: executing program 4 (id=1766):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.309138785s ago: executing program 3 (id=1767):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ced, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)="d2ffb4"})

1.245345252s ago: executing program 4 (id=1768):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
io_setup(0xc, &(0x7f0000000180)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r8}, &(0x7f00000000c0)=0x8)
socket$key(0xf, 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}})
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

908.266188ms ago: executing program 6 (id=1769):
r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

906.560004ms ago: executing program 7 (id=1770):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073cc5234000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x5)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

176.92133ms ago: executing program 4 (id=1771):
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xdd, 0xf8, 0xe, 0x10, 0x1}, 0x0, 0x0, 0x2, [{0xb3, &(0x7f0000000400)=@string={0xb3, 0x3, "3bd155447326b11d0c7dfa6ef110056942717e07f9a37142b233b7d41ca7bf8258d4fe18650e17c1945ddc53fa62c27b285a973af6b752fe0570faaa5cd359981fd3a8009946d702744eab8b6b30662675bab556e5b5a3655b2476b39b22356f82ffe3437af8c5b2b99e17a09ab1ba03d1ee53fbf4284176bddca6fe3432416f943d6be7510a96ae9e743f8dc3a8c9dff72aad753bbdad24fbc8b4fc7c95453156d10a745e2289240735a42f34923c8102"}}, {0x0, 0x0}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0)

116.747191ms ago: executing program 3 (id=1772):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32=0x0, @ANYBLOB="050000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB="061002000000000008002e"], 0x50}}, 0x0)

61.857914ms ago: executing program 6 (id=1773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000e5a418e7fb031312276d6494cf30"], 0x60}}, 0x20004004)

5.115256ms ago: executing program 7 (id=1774):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)

4.539507ms ago: executing program 6 (id=1775):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x5, 0x6, 0x1, 0x0, 0x7, 0xb, 0x651, 0x3, 0x9657, 0x3, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x41, 0x94d6, 0x0, 0x6, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x84)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"])
pipe2(&(0x7f0000000200), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

0s ago: executing program 3 (id=1776):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x207, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x1101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x4f29, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0xda, 0x7, 0x7, 0x2000000c}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x2d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x1}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0x6aa, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x8, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x10000003, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x86, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x7, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x6}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x977, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x8}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xbc, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x405, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x84, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x8, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0x8}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x7, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x9, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7ffffffc}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0xc800)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@name, &(0x7f0000000280)=0x10, 0x80000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x0, 0x2, 0x7ffffffe], 0x80a0000})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  271.667591][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  271.850209][    T9] usb 8-1: Using ep0 maxpacket: 16
[  271.954056][    T9] usb 8-1: config 64 has an invalid interface number: 176 but max is 0
[  272.084416][    T9] usb 8-1: config 64 has no interface number 0
[  272.173549][    T9] usb 8-1: config 64 interface 176 has no altsetting 0
[  272.242402][    T9] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  272.264334][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.301781][    T9] usb 8-1: Product: syz
[  272.313460][    T9] usb 8-1: Manufacturer: syz
[  272.326861][    T9] usb 8-1: SerialNumber: syz
[  272.808679][    T9] peak_usb 8-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  272.826581][    T9] peak_usb 8-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  272.901481][    T9] peak_usb 8-1:64.176: probe with driver peak_usb failed with error -71
[  272.954100][    T9] usb 8-1: USB disconnect, device number 4
[  273.020172][ T8555] sp0: Synchronizing with TNC
[  274.650139][ T8565] netlink: 'syz.6.762': attribute type 10 has an invalid length.
[  274.711019][ T8565] netlink: 40 bytes leftover after parsing attributes in process `syz.6.762'.
[  274.774801][ T8565] batman_adv: batadv0: Adding interface: virt_wifi0
[  274.781562][ T8565] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.808212][ T8565] batman_adv: batadv0: Interface activated: virt_wifi0
[  275.956781][ T8594] input: syz0 as /devices/virtual/input/input15
[  279.977843][ T8632] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  280.694224][ T8643] input: syz0 as /devices/virtual/input/input16
[  282.590187][ T2144] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  282.781768][ T2144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.802284][ T2144] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  282.822182][ T2144] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  282.834367][ T2144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.873219][ T2144] usb 4-1: Product: syz
[  282.900045][ T2144] usb 4-1: Manufacturer: syz
[  282.904697][ T2144] usb 4-1: SerialNumber: syz
[  282.935588][ T2144] usb 4-1: config 0 descriptor??
[  283.420191][  T950] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  283.600250][  T950] usb 5-1: device descriptor read/64, error -71
[  284.342357][  T950] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  284.481317][  T950] usb 5-1: device descriptor read/64, error -71
[  284.610502][  T950] usb usb5-port1: attempt power cycle
[  284.615499][ T5125] Bluetooth: hci3: link tx timeout
[  284.623663][ T5125] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.632308][ T5825] Bluetooth: hci3: link tx timeout
[  284.637440][ T5825] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.645161][ T5825] Bluetooth: hci3: link tx timeout
[  284.650434][ T5825] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.658526][ T5825] Bluetooth: hci3: link tx timeout
[  284.663711][ T5825] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.960239][  T950] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  285.001962][  T950] usb 5-1: device descriptor read/8, error -71
[  285.240059][  T950] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  285.260557][  T950] usb 5-1: device descriptor read/8, error -71
[  285.333474][ T5866] usb 4-1: USB disconnect, device number 23
[  285.372550][  T950] usb usb5-port1: unable to enumerate USB device
[  285.670687][ T5866] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  285.874569][ T8708] IPv6: Can't replace route, no match found
[  285.919259][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  286.036235][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  286.046118][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.064771][ T5866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.183369][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.346455][ T5866] usb 4-1: config 0 descriptor??
[  286.356899][ T5866] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  286.670068][ T5815] Bluetooth: hci3: command 0x0406 tx timeout
[  288.076946][ T8726] trusted_key: encrypted_key: insufficient parameters specified
[  288.112757][ T5125] Bluetooth: hci2: command 0x0406 tx timeout
[  288.310058][ T5866] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  288.369564][ T2144] usb 4-1: USB disconnect, device number 24
[  288.464482][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.486019][ T5866] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  288.557685][ T5866] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  288.566964][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.587516][ T5866] usb 8-1: Product: syz
[  288.591931][ T5866] usb 8-1: Manufacturer: syz
[  288.596547][ T5866] usb 8-1: SerialNumber: syz
[  288.604065][ T5866] usb 8-1: config 0 descriptor??
[  289.086668][   T30] audit: type=1400 audit(1747536945.576:313): avc:  denied  { map } for  pid=8745 comm="syz.6.820" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  289.138005][   T30] audit: type=1400 audit(1747536945.606:314): avc:  denied  { call } for  pid=8745 comm="syz.6.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  289.291092][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'.
[  290.000127][ T5910] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  291.273903][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.384128][ T5866] usb 8-1: USB disconnect, device number 5
[  291.392372][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  291.469692][ T5910] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  291.511907][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.569125][ T5910] usb 5-1: config 0 descriptor??
[  291.581960][ T2144] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  291.708607][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.838'.
[  291.748950][ T2144] usb 3-1: config 0 has no interfaces?
[  291.757158][ T2144] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  291.766692][ T2144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.776111][ T2144] usb 3-1: Product: syz
[  291.781340][ T2144] usb 3-1: Manufacturer: syz
[  291.786004][ T2144] usb 3-1: SerialNumber: syz
[  291.797976][ T2144] usb 3-1: config 0 descriptor??
[  291.800354][   T30] audit: type=1400 audit(1747536948.276:315): avc:  denied  { ioctl } for  pid=8766 comm="syz.4.827" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  292.184957][   T30] audit: type=1400 audit(1747536948.616:316): avc:  denied  { ioctl } for  pid=8774 comm="syz.2.832" path="socket:[20766]" dev="sockfs" ino=20766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  292.671770][ T5910] ath6kl: Failed to submit usb control message: -110
[  292.678620][ T5910] ath6kl: unable to send the bmi data to the device: -110
[  292.685795][ T5910] ath6kl: Unable to send get target info: -110
[  292.695322][ T5910] ath6kl: Failed to init ath6kl core: -110
[  292.710001][ T5910] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110
[  292.940407][ T5910] usb 5-1: USB disconnect, device number 22
[  293.010346][ T2144] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  293.184494][ T2144] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  293.204005][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.226786][   T30] audit: type=1400 audit(1747536949.706:317): avc:  denied  { bind } for  pid=8818 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  293.248631][ T8819] lo speed is unknown, defaulting to 1000
[  293.277947][ T2144] usb 7-1: Product: syz
[  293.293753][ T2144] usb 7-1: Manufacturer: syz
[  293.295887][ T5864] usb 3-1: USB disconnect, device number 23
[  293.298409][ T2144] usb 7-1: SerialNumber: syz
[  293.309207][    T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  293.327611][   T30] audit: type=1400 audit(1747536949.716:318): avc:  denied  { write } for  pid=8818 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  293.348251][   T30] audit: type=1400 audit(1747536949.756:319): avc:  denied  { setopt } for  pid=8818 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  293.371795][ T2144] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  293.398237][   T30] audit: type=1400 audit(1747536949.886:320): avc:  denied  { firmware_load } for  pid=5910 comm="kworker/1:8" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  293.501749][ T5910] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  293.611621][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.642931][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  293.670047][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.781924][    T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  293.782595][ T2144] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  293.793598][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.843873][    T9] usb 4-1: Product: syz
[  293.854589][    T9] usb 4-1: Manufacturer: syz
[  293.868733][    T9] usb 4-1: SerialNumber: syz
[  293.888448][    T9] usb 4-1: config 0 descriptor??
[  293.903031][    T9] usb 4-1: ucan: probing device on interface #0
[  293.910888][    T9] usb 4-1: ucan: invalid EP count (0)
[  293.916283][    T9] usb 4-1: ucan: probe failed; try to update the device firmware
[  293.960650][ T2144] usb 3-1: Using ep0 maxpacket: 16
[  293.984040][ T2144] usb 3-1: config 64 has an invalid interface number: 176 but max is 0
[  294.004159][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.7.850'.
[  294.013513][ T2144] usb 3-1: config 64 has no interface number 0
[  294.019729][ T2144] usb 3-1: config 64 interface 176 has no altsetting 0
[  294.053321][    T9] usb 7-1: USB disconnect, device number 9
[  294.075853][ T2144] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  294.111505][ T2144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.119552][ T2144] usb 3-1: Product: syz
[  294.150071][ T2144] usb 3-1: Manufacturer: syz
[  294.154713][ T2144] usb 3-1: SerialNumber: syz
[  294.217225][   T30] audit: type=1400 audit(1747536950.706:321): avc:  denied  { connect } for  pid=8836 comm="syz.7.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  294.425054][ T2144] peak_usb 3-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  294.452263][ T2144] peak_usb 3-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  294.530395][ T2144] peak_usb 3-1:64.176: probe with driver peak_usb failed with error -71
[  294.548674][ T2144] usb 3-1: USB disconnect, device number 24
[  294.604614][ T5910] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  294.622400][ T5910] ath9k_htc: Failed to initialize the device
[  294.631274][ T5866] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  294.653307][   T30] audit: type=1400 audit(1747536951.146:322): avc:  denied  { append } for  pid=8845 comm="syz.6.855" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  294.653387][    T9] usb 7-1: ath9k_htc: USB layer deinitialized
[  294.704775][   T30] audit: type=1400 audit(1747536951.176:323): avc:  denied  { write } for  pid=8845 comm="syz.6.855" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  294.739246][   T30] audit: type=1400 audit(1747536951.176:324): avc:  denied  { write } for  pid=8845 comm="syz.6.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  294.761702][   T30] audit: type=1400 audit(1747536951.186:325): avc:  denied  { read } for  pid=8845 comm="syz.6.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  294.835110][ T5866] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  294.845446][ T5866] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  294.857951][ T5866] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  294.871349][ T5866] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  294.880855][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.908693][ T5866] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  294.975515][ T5866] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2
[  295.200093][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  295.278570][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.311276][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.362613][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.440038][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  295.456559][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.465417][    T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  295.478405][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.486772][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.498454][    T9] usb 7-1: config 0 descriptor??
[  296.334974][ T5866] usb 4-1: USB disconnect, device number 25
[  296.340968][   T30] audit: type=1400 audit(1747536952.826:326): avc:  denied  { read } for  pid=8836 comm="syz.7.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  296.381145][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.389818][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.600246][    T9] ath6kl: Failed to submit usb control message: -110
[  296.609373][    T9] ath6kl: unable to send the bmi data to the device: -110
[  296.618539][    T9] ath6kl: Unable to send get target info: -110
[  296.630685][    T9] ath6kl: Failed to init ath6kl core: -110
[  296.644768][    T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110
[  296.763475][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'.
[  296.844574][    T9] usb 7-1: USB disconnect, device number 10
[  297.013068][ T8886] random: crng reseeded on system resumption
[  297.510461][   T30] audit: type=1400 audit(1747536953.496:327): avc:  denied  { append } for  pid=8875 comm="syz.2.863" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  297.549333][   T30] audit: type=1400 audit(1747536953.506:328): avc:  denied  { append } for  pid=8875 comm="syz.2.863" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  297.685335][ T2144] usb 8-1: USB disconnect, device number 6
[  297.921764][   T30] audit: type=1400 audit(1747536953.506:329): avc:  denied  { open } for  pid=8875 comm="syz.2.863" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  298.043189][ T5866] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  298.705648][ T5866] usb 4-1: Using ep0 maxpacket: 16
[  299.331252][ T5866] usb 4-1: config 64 has an invalid interface number: 176 but max is 0
[  299.339634][ T5866] usb 4-1: config 64 has no interface number 0
[  299.345908][ T5866] usb 4-1: config 64 interface 176 has no altsetting 0
[  299.360636][ T5866] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  299.369850][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.379997][ T5866] usb 4-1: Product: syz
[  299.384154][ T5866] usb 4-1: Manufacturer: syz
[  299.388729][ T5866] usb 4-1: SerialNumber: syz
[  299.740831][ T5866] peak_usb 4-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  299.752594][   T30] audit: type=1400 audit(1747536956.226:330): avc:  denied  { setopt } for  pid=8910 comm="syz.7.874" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  299.858829][ T5866] peak_usb 4-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  300.489851][ T8918] bridge1: entered promiscuous mode
[  300.532229][ T5866] peak_usb 4-1:64.176: probe with driver peak_usb failed with error -71
[  300.568765][ T8921] IPv6: Can't replace route, no match found
[  300.592825][ T5866] usb 4-1: USB disconnect, device number 26
[  301.450084][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  301.650062][    T9] usb 3-1: device descriptor read/64, error -71
[  301.910263][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  302.040406][    T9] usb 3-1: device descriptor read/64, error -71
[  302.213148][    T9] usb usb3-port1: attempt power cycle
[  302.575488][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  302.600661][    T9] usb 3-1: device descriptor read/8, error -71
[  302.860172][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  302.891518][    T9] usb 3-1: device descriptor read/8, error -71
[  303.038413][    T9] usb usb3-port1: unable to enumerate USB device
[  304.350084][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  305.070146][    T9] usb 3-1: Using ep0 maxpacket: 16
[  305.144206][    T9] usb 3-1: config 64 has an invalid interface number: 176 but max is 0
[  305.211050][    T9] usb 3-1: config 64 has no interface number 0
[  305.237710][    T9] usb 3-1: config 64 interface 176 has no altsetting 0
[  305.252047][    T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  305.262299][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.273329][    T9] usb 3-1: Product: syz
[  305.277903][    T9] usb 3-1: Manufacturer: syz
[  305.287317][    T9] usb 3-1: SerialNumber: syz
[  305.516604][    T9] peak_usb 3-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  305.544075][    T9] peak_usb 3-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  305.700693][    T9] peak_usb 3-1:64.176: probe with driver peak_usb failed with error -71
[  305.728348][    T9] usb 3-1: USB disconnect, device number 29
[  306.300275][ T5863] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  306.567580][ T5863] usb 5-1: device descriptor read/64, error -71
[  306.830173][ T5863] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  306.880086][ T5866] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  306.980276][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  306.991581][ T5863] usb 5-1: device descriptor read/64, error -71
[  307.040042][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  307.045929][ T5866] usb 3-1: no configurations
[  307.050570][ T5866] usb 3-1: can't read configurations, error -22
[  307.105959][ T5863] usb usb5-port1: attempt power cycle
[  307.220028][ T5866] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  307.229676][    T9] usb 7-1: config 0 has no interfaces?
[  307.239267][    T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  307.248459][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.258901][    T9] usb 7-1: Product: syz
[  307.266979][    T9] usb 7-1: Manufacturer: syz
[  307.278376][    T9] usb 7-1: SerialNumber: syz
[  307.298092][    T9] usb 7-1: config 0 descriptor??
[  307.390443][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  307.422413][ T5866] usb 3-1: no configurations
[  307.427042][ T5866] usb 3-1: can't read configurations, error -22
[  307.450069][ T5863] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  307.481030][ T5863] usb 5-1: device descriptor read/8, error -71
[  307.585427][ T5866] usb usb3-port1: attempt power cycle
[  308.598582][ T9002] input: syz0 as /devices/virtual/input/input17
[  309.040195][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  309.062517][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  309.068147][ T5866] usb 3-1: no configurations
[  309.072901][ T5866] usb 3-1: can't read configurations, error -22
[  309.269202][ T5866] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  309.420568][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  309.426145][ T5866] usb 3-1: no configurations
[  309.430880][ T5866] usb 3-1: can't read configurations, error -22
[  309.437964][ T5866] usb usb3-port1: unable to enumerate USB device
[  310.361805][ T5866] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  310.526397][ T9034] netlink: 368 bytes leftover after parsing attributes in process `syz.4.912'.
[  310.570033][ T5866] usb 3-1: Using ep0 maxpacket: 16
[  310.579848][ T5866] usb 3-1: config 64 has an invalid interface number: 176 but max is 0
[  310.593447][ T5866] usb 3-1: config 64 has no interface number 0
[  310.603284][ T5866] usb 3-1: config 64 interface 176 has no altsetting 0
[  310.616327][ T5866] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  310.625490][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.635516][ T5866] usb 3-1: Product: syz
[  310.650199][ T5863] usb 7-1: USB disconnect, device number 11
[  310.664979][ T5866] usb 3-1: Manufacturer: syz
[  310.695241][ T5866] usb 3-1: SerialNumber: syz
[  310.815395][   T30] audit: type=1400 audit(1747536967.296:331): avc:  denied  { name_bind } for  pid=9033 comm="syz.3.913" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  311.816057][   T30] audit: type=1400 audit(1747536967.296:332): avc:  denied  { node_bind } for  pid=9033 comm="syz.3.913" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  312.017528][ T5866] peak_usb 3-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  312.058469][ T5866] peak_usb 3-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  312.072553][ T9047] bond1: entered promiscuous mode
[  312.077591][ T9047] bond1: entered allmulticast mode
[  312.087767][ T9047] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.305234][   T30] audit: type=1400 audit(1747536968.796:333): avc:  denied  { map } for  pid=9045 comm="syz.6.916" path="socket:[21206]" dev="sockfs" ino=21206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  312.348961][ T9047] bond1 (unregistering): Released all slaves
[  312.500746][ T5866] peak_usb 3-1:64.176: probe with driver peak_usb failed with error -71
[  312.511956][ T5866] usb 3-1: USB disconnect, device number 34
[  314.263834][ T9076] sp0: Synchronizing with TNC
[  315.770692][ T9092] siw: device registration error -23
[  316.764998][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  316.771480][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.213090][   T30] audit: type=1400 audit(1747536973.696:334): avc:  denied  { write } for  pid=9098 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  317.272076][   T30] audit: type=1400 audit(1747536973.696:335): avc:  denied  { nlmsg_write } for  pid=9098 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  317.630189][  T950] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  318.434024][ T9124] sp0: Synchronizing with TNC
[  318.542619][ T5864] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  318.661993][  T950] usb 8-1: Using ep0 maxpacket: 16
[  318.760471][  T950] usb 8-1: config 64 has an invalid interface number: 176 but max is 0
[  318.768860][  T950] usb 8-1: config 64 has no interface number 0
[  318.785552][  T950] usb 8-1: config 64 interface 176 has no altsetting 0
[  318.805617][  T950] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  318.827600][  T950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.836906][  T950] usb 8-1: Product: syz
[  318.842172][  T950] usb 8-1: Manufacturer: syz
[  318.846793][  T950] usb 8-1: SerialNumber: syz
[  318.991355][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.020131][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.044337][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  320.011181][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.023823][  T950] peak_usb 8-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  320.253045][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.261229][  T950] peak_usb 8-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  320.276748][ T5864] usb 4-1: config 0 descriptor??
[  320.351806][  T950] peak_usb 8-1:64.176: probe with driver peak_usb failed with error -71
[  320.370260][  T950] usb 8-1: USB disconnect, device number 7
[  321.286785][ T5864] usbhid 4-1:0.0: can't add hid device: -71
[  321.325061][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  321.467135][ T5864] usb 4-1: USB disconnect, device number 27
[  322.300156][ T5812] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  322.580046][ T5812] usb 3-1: Using ep0 maxpacket: 16
[  322.664768][ T5812] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  322.738623][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  322.812881][ T5812] usb 3-1: Product: syz
[  322.852893][ T5812] usb 3-1: Manufacturer: syz
[  322.872286][ T5812] usb 3-1: SerialNumber: syz
[  322.908622][ T5812] usb 3-1: config 0 descriptor??
[  324.680507][ T5812] usb 3-1: USB disconnect, device number 35
[  324.739666][ T9190] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  324.920309][ T5910] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  325.210154][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.560103][ T2144] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  325.717930][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.749103][ T2144] usb 3-1: device descriptor read/64, error -71
[  325.811015][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  325.956907][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.027885][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.090034][ T2144] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  326.140950][ T5910] usb 5-1: config 0 descriptor??
[  326.230771][ T2144] usb 3-1: device descriptor read/64, error -71
[  326.237320][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'.
[  326.353876][ T2144] usb usb3-port1: attempt power cycle
[  326.513787][ T9212] binder_alloc: 9211: binder_alloc_buf, no vma
[  326.574091][ T5910] usbhid 5-1:0.0: can't add hid device: -71
[  326.580182][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  326.623453][ T5910] usb 5-1: USB disconnect, device number 27
[  326.755462][ T2144] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  326.800967][ T2144] usb 3-1: device descriptor read/8, error -71
[  327.147820][   T30] audit: type=1400 audit(1747536983.606:336): avc:  denied  { getopt } for  pid=9220 comm="syz.6.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.348011][ T2144] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  327.430033][ T2144] usb 3-1: device descriptor read/8, error -71
[  327.798477][ T2144] usb usb3-port1: unable to enumerate USB device
[  329.163271][ T2144] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  329.570131][ T5863] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  330.141449][ T2144] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  330.165418][ T2144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.206355][ T2144] usb 3-1: config 0 descriptor??
[  330.222430][ T5863] usb 5-1: device descriptor read/64, error -71
[  330.226945][ T2144] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  330.460881][ T5863] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  330.670199][ T5863] usb 5-1: device descriptor read/64, error -71
[  330.900730][ T5863] usb usb5-port1: attempt power cycle
[  331.380197][ T5863] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  331.418446][ T9308] netlink: 368 bytes leftover after parsing attributes in process `syz.3.999'.
[  331.446596][ T9308] geneve2: entered promiscuous mode
[  331.451954][ T9308] geneve2: entered allmulticast mode
[  331.497338][ T2144] gspca_stv06xx: I2C: Read error writing address: -71
[  331.509113][ T2144] usb 3-1: USB disconnect, device number 40
[  331.575118][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.997'.
[  331.597893][ T5812] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  331.605684][ T5863] usb 5-1: device descriptor read/8, error -71
[  331.791969][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.803341][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.814906][ T5812] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.828152][ T5812] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.837301][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.849366][ T5812] usb 8-1: config 0 descriptor??
[  331.860068][ T5863] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  331.880701][ T5863] usb 5-1: device descriptor read/8, error -71
[  332.033708][ T5863] usb usb5-port1: unable to enumerate USB device
[  332.865786][ T5812] usbhid 8-1:0.0: can't add hid device: -71
[  332.871825][ T5812] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  332.885239][ T5812] usb 8-1: USB disconnect, device number 8
[  333.220756][   T30] audit: type=1400 audit(1747536989.716:337): avc:  denied  { bind } for  pid=9329 comm="syz.7.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  333.262766][   T30] audit: type=1400 audit(1747536989.736:338): avc:  denied  { name_bind } for  pid=9329 comm="syz.7.1010" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  333.316254][   T30] audit: type=1400 audit(1747536989.736:339): avc:  denied  { node_bind } for  pid=9329 comm="syz.7.1010" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  333.339451][   T30] audit: type=1400 audit(1747536989.776:340): avc:  denied  { watch watch_reads } for  pid=9324 comm="syz.6.1008" path="pipe:[22846]" dev="pipefs" ino=22846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  333.409865][   T30] audit: type=1400 audit(1747536989.896:341): avc:  denied  { name_bind } for  pid=9335 comm="syz.7.1011" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  334.520088][ T2144] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  334.740061][ T2144] usb 4-1: device descriptor read/64, error -71
[  335.007278][ T2144] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  335.080001][ T5910] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  335.340406][ T2144] usb 4-1: device descriptor read/64, error -71
[  335.360089][ T5910] usb 8-1: Using ep0 maxpacket: 8
[  335.374629][ T5910] usb 8-1: config 0 has no interfaces?
[  335.390155][ T5910] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  335.404868][ T5910] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  335.433198][ T5910] usb 8-1: Product: syz
[  335.450255][ T2144] usb usb4-port1: attempt power cycle
[  335.506674][ T5910] usb 8-1: Manufacturer: syz
[  335.521360][ T5910] usb 8-1: SerialNumber: syz
[  335.527755][ T9360] vivid-000: disconnect
[  335.555067][ T5910] usb 8-1: config 0 descriptor??
[  335.769019][ T9347] vivid-000: reconnect
[  335.789183][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.798488][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.825004][ T9355] program syz.7.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  335.850060][ T2144] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  335.872203][ T5812] usb 8-1: USB disconnect, device number 9
[  335.881051][ T2144] usb 4-1: device descriptor read/8, error -71
[  336.641285][ T2144] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  336.907302][ T2144] usb 4-1: device not accepting address 31, error -71
[  336.935465][ T9381] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  336.950424][ T2144] usb usb4-port1: unable to enumerate USB device
[  337.088792][ T9381] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  337.133773][ T5866] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  337.818664][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  337.882029][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  337.932205][ T5866] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  338.006695][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.046149][ T5866] usb 3-1: config 0 descriptor??
[  338.240160][ T2144] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  338.420073][ T2144] usb 4-1: Using ep0 maxpacket: 16
[  338.430175][ T2144] usb 4-1: config 64 has an invalid interface number: 176 but max is 0
[  338.438556][ T2144] usb 4-1: config 64 has no interface number 0
[  338.448703][ T2144] usb 4-1: config 64 interface 176 has no altsetting 0
[  339.050974][ T2144] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  339.060305][ T2144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.068326][ T2144] usb 4-1: Product: syz
[  339.073712][ T5866] ath6kl: Failed to submit usb control message: -110
[  339.082098][ T2144] usb 4-1: Manufacturer: syz
[  339.100019][ T5866] ath6kl: unable to send the bmi data to the device: -110
[  339.107189][ T5866] ath6kl: Unable to send get target info: -110
[  339.113474][ T2144] usb 4-1: SerialNumber: syz
[  339.144307][ T5866] ath6kl: Failed to init ath6kl core: -110
[  339.151687][ T5866] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110
[  339.391987][ T2144] peak_usb 4-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  339.425335][ T9447] sp0: Synchronizing with TNC
[  339.427984][ T2144] peak_usb 4-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  340.081594][ T2144] peak_usb 4-1:64.176: probe with driver peak_usb failed with error -71
[  340.113681][ T2144] usb 4-1: USB disconnect, device number 32
[  340.147147][ T5910] usb 3-1: USB disconnect, device number 41
[  340.260117][ T5863] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  340.410040][ T5863] usb 5-1: device descriptor read/64, error -71
[  341.390116][ T5863] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  341.700028][ T5863] usb 5-1: device descriptor read/64, error -71
[  341.760031][ T2144] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  341.880029][ T5910] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  341.920427][ T2144] usb 7-1: Using ep0 maxpacket: 8
[  341.957680][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.967276][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.011564][ T5863] usb usb5-port1: attempt power cycle
[  342.120178][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.140533][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.164896][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  342.620088][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  342.629236][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.660236][ T5910] usb 4-1: config 0 descriptor??
[  342.986347][   T30] audit: type=1400 audit(1747536999.476:342): avc:  denied  { ioctl } for  pid=9482 comm="syz.2.1048" path="socket:[23235]" dev="sockfs" ino=23235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  343.146632][ T9486] sp0: Synchronizing with TNC
[  343.358862][ T5910] usbhid 4-1:0.0: can't add hid device: -71
[  344.240063][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  344.314182][ T5910] usb 4-1: USB disconnect, device number 33
[  344.623703][ T2144] usb 7-1: unable to get BOS descriptor or descriptor too short
[  344.644320][ T2144] usb 7-1: unable to read config index 0 descriptor/start: -71
[  344.658422][ T2144] usb 7-1: can't read configurations, error -71
[  344.750412][ T5866] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  344.816729][ T9511] fuse: Unknown parameter 'use00000000000000000000'
[  344.930718][ T5866] usb 5-1: Using ep0 maxpacket: 16
[  344.939866][ T5866] usb 5-1: config 64 has an invalid interface number: 176 but max is 0
[  344.957571][ T5866] usb 5-1: config 64 has no interface number 0
[  344.972870][ T5866] usb 5-1: config 64 interface 176 has no altsetting 0
[  344.989031][ T5866] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  345.008453][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.029910][ T5866] usb 5-1: Product: syz
[  345.037068][ T5866] usb 5-1: Manufacturer: syz
[  345.044398][ T5866] usb 5-1: SerialNumber: syz
[  346.025957][ T5866] peak_usb 5-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  346.034513][ T5866] peak_usb 5-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  346.218493][ T5866] peak_usb 5-1:64.176: probe with driver peak_usb failed with error -71
[  346.243616][ T5866] usb 5-1: USB disconnect, device number 35
[  346.336022][ T9536] input: syz1 as /devices/virtual/input/input18
[  346.372766][ T9535] syz_tun: entered allmulticast mode
[  346.393204][ T9532] syz_tun: left allmulticast mode
[  346.909145][ T9548] fuse: Unknown parameter 'use00000000000000000000'
[  346.919653][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1069'.
[  346.928873][ T9544] bond0: entered promiscuous mode
[  347.074483][ T9551] sp0: Synchronizing with TNC
[  347.867101][ T9561] syzkaller1: entered promiscuous mode
[  347.874735][ T9561] syzkaller1: entered allmulticast mode
[  347.995489][ T5864] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  349.140431][ T5812] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  349.180409][ T5864] usb 5-1: Using ep0 maxpacket: 16
[  349.195990][ T5864] usb 5-1: config 64 has an invalid interface number: 176 but max is 0
[  349.205627][ T5864] usb 5-1: config 64 has no interface number 0
[  349.215700][ T5864] usb 5-1: config 64 interface 176 has no altsetting 0
[  349.310138][ T5812] usb 3-1: Using ep0 maxpacket: 32
[  349.333833][ T5812] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  349.712487][ T5812] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  349.744798][ T5864] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  349.880672][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  349.892916][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.951796][ T5864] usb 5-1: Product: syz
[  349.975769][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  349.996533][ T5864] usb 5-1: Manufacturer: syz
[  350.059265][ T5864] usb 5-1: SerialNumber: syz
[  350.064470][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  350.099333][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  350.174530][ T5864] peak_usb 5-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  350.195209][ T5812] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  350.213974][ T5864] peak_usb 5-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  350.241197][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.255704][ T5812] usb 3-1: config 0 descriptor??
[  350.310934][ T5864] peak_usb 5-1:64.176: probe with driver peak_usb failed with error -71
[  350.330132][ T5864] usb 5-1: USB disconnect, device number 36
[  350.356797][ T9598] binder: 9597:9598 ioctl 4018620d 0 returned -22
[  350.381203][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  350.405457][ T9600] fuse: Unknown parameter 'user_i00000000000000000000'
[  350.415926][ T9598] lo speed is unknown, defaulting to 1000
[  350.441839][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'.
[  350.470928][ T5812] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  350.491927][ T5812] usb 3-1: USB disconnect, device number 42
[  350.514415][ T5812] usblp0: removed
[  350.520043][    T9] usb 8-1: device descriptor read/64, error -71
[  351.350070][    T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  351.428190][ T9610] capability: warning: `syz.6.1094' uses 32-bit capabilities (legacy support in use)
[  351.480116][ T5812] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  351.487874][    T9] usb 8-1: device descriptor read/64, error -71
[  351.836203][ T5812] usb 3-1: Using ep0 maxpacket: 32
[  352.032273][    T9] usb usb8-port1: attempt power cycle
[  352.377940][ T5812] usb 3-1: device descriptor read/all, error -71
[  352.391836][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'.
[  352.710020][    T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  352.730287][ T5866] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  352.750661][    T9] usb 8-1: device descriptor read/8, error -71
[  352.900438][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  352.907366][ T5866] usb 7-1: config 64 has an invalid interface number: 176 but max is 0
[  352.916243][ T5866] usb 7-1: config 64 has no interface number 0
[  352.923263][ T5866] usb 7-1: config 64 interface 176 has no altsetting 0
[  352.937937][ T5866] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  352.947356][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.956349][ T5866] usb 7-1: Product: syz
[  352.964893][ T5866] usb 7-1: Manufacturer: syz
[  352.969510][ T5866] usb 7-1: SerialNumber: syz
[  352.990060][    T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  353.010531][    T9] usb 8-1: device descriptor read/8, error -71
[  353.036817][ T9635] fuse: Unknown parameter 'user_i00000000000000000000'
[  353.120407][    T9] usb usb8-port1: unable to enumerate USB device
[  353.191807][ T5866] peak_usb 7-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  353.210889][ T5866] peak_usb 7-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  353.291325][ T5866] peak_usb 7-1:64.176: probe with driver peak_usb failed with error -71
[  353.305710][ T5866] usb 7-1: USB disconnect, device number 14
[  353.319618][ T5864] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  353.490145][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  353.504928][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.528043][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.551371][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  353.577232][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.592523][ T5864] usb 4-1: config 0 descriptor??
[  353.606911][ T5864] hub 4-1:0.0: USB hub found
[  353.630060][ T5812] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  353.664638][   T30] audit: type=1400 audit(1747537010.156:343): avc:  denied  { read } for  pid=9643 comm="syz.4.1107" path="socket:[23893]" dev="sockfs" ino=23893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  353.799725][ T5812] usb 3-1: Using ep0 maxpacket: 8
[  354.582052][ T5812] usb 3-1: too many configurations: 249, using maximum allowed: 8
[  354.600752][ T5864] hub 4-1:0.0: 1 port detected
[  354.627124][ T5812] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff
[  354.731951][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  354.750377][ T5812] usb 3-1: Product: syz
[  354.754911][ T5812] usb 3-1: Manufacturer: syz
[  354.759542][ T5812] usb 3-1: SerialNumber: syz
[  354.770701][ T5812] usb 3-1: config 0 descriptor??
[  354.976704][ T9665] process 'syz.6.1109' launched './file2' with NULL argv: empty string added
[  355.071943][   T30] audit: type=1400 audit(1747537011.486:344): avc:  denied  { execute_no_trans } for  pid=9656 comm="syz.6.1109" path="/134/file2" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  355.077162][ T5864] usb 4-1: USB disconnect, device number 34
[  355.270112][  T950] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  355.451257][  T950] usb 7-1: Using ep0 maxpacket: 16
[  355.579881][  T950] usb 7-1: unable to get BOS descriptor or descriptor too short
[  355.594451][  T950] usb 7-1: config 1 interface 0 has no altsetting 0
[  355.607001][  T950] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  355.621962][  T950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.631517][ T5812] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration
[  355.649304][ T9662] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.683379][  T950] usb 7-1: Product: syz
[  355.722678][ T5812] usb 3-1: USB disconnect, device number 45
[  355.751416][  T950] usb 7-1: Manufacturer: syz
[  355.754502][ T9662] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.767053][ T9662] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.773317][  T950] usb 7-1: SerialNumber: syz
[  355.870112][ T9662] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.033183][ T9677] futex_wake_op: syz.7.1116 tries to shift op by 32; fix this program
[  356.342022][   T58] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  356.416378][ T5864] IPVS: starting estimator thread 0...
[  356.535829][   T58] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  356.542289][ T9680] IPVS: using max 75 ests per chain, 180000 per kthread
[  356.574555][   T58] usb 4-1: config 0 has no interface number 0
[  356.593115][   T58] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  356.610107][ T5812] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  356.633905][   T58] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  356.648354][   T58] usb 4-1: config 0 interface 230 has no altsetting 0
[  356.784474][   T58] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  356.809444][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.835194][ T5812] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  356.852536][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.955353][ T5812] usb 8-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  356.959977][   T58] usb 4-1: Product: syz
[  356.968111][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.986529][   T58] usb 4-1: Manufacturer: syz
[  356.987281][ T5812] usb 8-1: config 0 descriptor??
[  357.004568][   T58] usb 4-1: SerialNumber: syz
[  357.028488][   T58] usb 4-1: config 0 descriptor??
[  357.041811][ T9675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  357.059793][ T9675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  357.190966][   T58] ums-usbat 4-1:0.230: USB Mass Storage device detected
[  357.310236][   T58] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  357.326960][ T9679] netlink: 'syz.7.1116': attribute type 2 has an invalid length.
[  357.350258][ T9679] ave_0: entered promiscuous mode
[  357.926074][  T950] usbhid 7-1:1.0: can't add hid device: -71
[  357.944658][  T950] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  358.004127][  T950] usb 7-1: USB disconnect, device number 15
[  358.228819][   T30] audit: type=1400 audit(1747537014.716:345): avc:  denied  { create } for  pid=9701 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  358.633415][  T950] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  358.830158][  T950] usb 7-1: Using ep0 maxpacket: 16
[  358.844561][  T950] usb 7-1: config 64 has an invalid interface number: 176 but max is 0
[  358.855155][  T950] usb 7-1: config 64 has no interface number 0
[  359.388093][  T950] usb 7-1: config 64 interface 176 has no altsetting 0
[  359.401185][  T950] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d
[  359.410564][  T950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.419521][  T950] usb 7-1: Product: syz
[  359.423731][  T950] usb 7-1: Manufacturer: syz
[  359.428733][  T950] usb 7-1: SerialNumber: syz
[  359.443850][   T30] audit: type=1400 audit(1747537015.936:346): avc:  denied  { listen } for  pid=9716 comm="syz.4.1128" lport=58804 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  359.508351][ T5866] usb 8-1: USB disconnect, device number 14
[  359.519924][   T58] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5
[  359.525113][   T30] audit: type=1400 audit(1747537015.986:347): avc:  denied  { accept } for  pid=9716 comm="syz.4.1128" lport=58804 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  359.637580][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'.
[  359.649078][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'.
[  359.694873][  T950] peak_usb 7-1:64.176 can0: unable to request usb[type=0 value=1] err=-71
[  359.711032][  T950] peak_usb 7-1:64.176: unable to read PCAN-USB X6 firmware info (err -71)
[  359.781404][  T950] peak_usb 7-1:64.176: probe with driver peak_usb failed with error -71
[  359.798240][  T950] usb 7-1: USB disconnect, device number 16
[  360.070356][ T5866] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  360.230583][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  360.271136][ T5866] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.300507][ T5866] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.312559][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  360.351014][ T5866] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  360.359433][ T5866] usb 3-1: Product: syz
[  360.377179][ T5866] usb 3-1: Manufacturer: syz
[  360.395040][ T5866] hub 3-1:4.0: USB hub found
[  360.407461][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1136'.
[  360.651676][ T5866] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  361.370539][ T5866] usb 3-1: USB disconnect, device number 46
[  361.535638][   T58] usb 4-1: USB disconnect, device number 35
[  363.284006][   T58] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  363.583400][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.743962][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.759006][   T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  363.788242][   T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  363.826967][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.857492][   T58] usb 3-1: config 0 descriptor??
[  363.859851][ T9792] sctp: [Deprecated]: syz.6.1148 (pid 9792) Use of int in max_burst socket option deprecated.
[  363.859851][ T9792] Use struct sctp_assoc_value instead
[  364.170292][  T950] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  364.547061][  T950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.570741][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.587740][  T950] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  364.608049][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.650075][  T950] usb 7-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  364.657419][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.690679][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.708356][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.708356][  T950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.744001][   T58] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  364.765429][   T58] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  364.766981][  T950] usb 7-1: config 0 descriptor??
[  364.791658][   T58] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  364.834312][   T58] usb 3-1: USB disconnect, device number 47
[  364.889814][  T950] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  365.337129][   T30] audit: type=1400 audit(1747537021.826:348): avc:  denied  { listen } for  pid=9816 comm="syz.4.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  366.416016][ T5812] usb 7-1: USB disconnect, device number 17
[  366.501262][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'.
[  366.513753][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'.
[  366.626379][ T9858] netlink: 'syz.3.1162': attribute type 5 has an invalid length.
[  366.640037][   T58] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  366.647764][ T9858] netlink: 'syz.3.1162': attribute type 5 has an invalid length.
[  366.663316][ T9858] netlink: 'syz.3.1162': attribute type 5 has an invalid length.
[  366.786711][   T30] audit: type=1400 audit(1747537023.256:349): avc:  denied  { ioctl } for  pid=9859 comm="syz.2.1165" path="/dev/sg0" dev="devtmpfs" ino=747 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  366.812018][    C0] vkms_vblank_simulate: vblank timer overrun
[  366.931944][   T58] usb 5-1: unable to get BOS descriptor or descriptor too short
[  366.976915][ T9873] bridge_slave_0: default FDB implementation only supports local addresses
[  366.995230][   T58] usb 5-1: not running at top speed; connect to a high speed hub
[  367.160899][   T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.171206][   T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.186406][   T58] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.195907][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.210118][   T58] usb 5-1: Product: syz
[  367.214262][   T58] usb 5-1: Manufacturer: syz
[  367.218910][   T58] usb 5-1: SerialNumber: syz
[  367.543231][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  367.646485][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1175'.
[  368.128145][ T9909] netlink: 'syz.7.1183': attribute type 10 has an invalid length.
[  368.137572][ T9909] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  368.147837][ T9909] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  369.084643][   T30] audit: type=1400 audit(1747537025.576:350): avc:  denied  { create } for  pid=9921 comm="syz.7.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  369.171385][   T58] usb 5-1: 0:2 : does not exist
[  369.256056][   T58] usb 5-1: USB disconnect, device number 37
[  369.770145][ T5812] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  369.969815][ T5812] usb 4-1: config 0 has no interfaces?
[  370.000368][ T5812] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  370.028098][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.043311][ T5812] usb 4-1: Product: syz
[  370.048784][ T5812] usb 4-1: Manufacturer: syz
[  370.053646][ T5812] usb 4-1: SerialNumber: syz
[  370.069641][   T30] audit: type=1400 audit(1747537026.556:351): avc:  denied  { shutdown } for  pid=9937 comm="syz.4.1194" lport=36201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  370.092368][ T5812] usb 4-1: config 0 descriptor??
[  370.141588][ T9942] input: syz0 as /devices/virtual/input/input19
[  371.040665][   T30] audit: type=1400 audit(1747537027.536:352): avc:  denied  { append } for  pid=9927 comm="syz.3.1190" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  372.294522][   T30] audit: type=1400 audit(1747537028.786:353): avc:  denied  { name_bind } for  pid=9980 comm="syz.7.1204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  372.943565][ T5812] usb 4-1: USB disconnect, device number 36
[  372.994515][   T30] audit: type=1400 audit(1747537029.486:354): avc:  denied  { append } for  pid=9985 comm="syz.3.1205" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  373.748526][T10005] usb usb8: usbfs: process 10005 (syz.6.1210) did not claim interface 0 before use
[  373.801611][ T9999] lo speed is unknown, defaulting to 1000
[  374.031606][T10015] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  374.105384][ T5866] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  374.304164][ T5866] usb 7-1: Using ep0 maxpacket: 32
[  374.323224][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.393476][ T5866] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  374.420248][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.426587][T10024] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1216'.
[  374.449995][ T5866] usb 7-1: Product: syz
[  374.454184][ T5866] usb 7-1: Manufacturer: syz
[  374.468425][ T5866] usb 7-1: SerialNumber: syz
[  374.482714][ T5866] usb 7-1: config 0 descriptor??
[  376.021859][T10030] syz.4.1216 (10030): drop_caches: 1
[  376.062967][T10031] syz.4.1216 (10031): drop_caches: 1
[  378.040465][ T5812] usb 7-1: USB disconnect, device number 18
[  378.211712][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.218026][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.578768][   T30] audit: type=1400 audit(1747537035.066:355): avc:  denied  { mount } for  pid=10064 comm="syz.2.1230" name="/" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  378.619505][ T5866] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  380.153062][ T5866] usb 8-1: config 0 has no interfaces?
[  380.717259][ T5866] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  380.925435][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.933699][ T5866] usb 8-1: Product: syz
[  380.937870][ T5866] usb 8-1: Manufacturer: syz
[  380.949988][ T5866] usb 8-1: SerialNumber: syz
[  380.957603][ T5866] usb 8-1: config 0 descriptor??
[  381.070366][T10091] binder: 10090:10091 ioctl 4018620d 0 returned -22
[  381.162704][ T5910] usb 8-1: USB disconnect, device number 15
[  385.144847][T10145] lo speed is unknown, defaulting to 1000
[  385.780554][ T5812] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  385.870052][ T5863] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  385.940341][ T5812] usb 8-1: Using ep0 maxpacket: 8
[  385.949753][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.965894][ T5812] usb 8-1: config 0 has no interfaces?
[  385.973715][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.983976][ T5812] usb 8-1: config 0 has no interfaces?
[  385.990268][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.000448][ T5812] usb 8-1: config 0 has no interfaces?
[  386.006690][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.016819][ T5812] usb 8-1: config 0 has no interfaces?
[  386.022404][ T5812] usb 8-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  386.031660][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.041751][ T5812] usb 8-1: config 0 descriptor??
[  386.050068][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  386.055542][ T5863] usb 4-1: no configurations
[  386.060382][ T5863] usb 4-1: can't read configurations, error -22
[  386.200068][ T5863] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  386.332222][ T5812] usb 8-1: USB disconnect, device number 16
[  386.350005][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  386.355591][ T5863] usb 4-1: no configurations
[  386.360278][ T5863] usb 4-1: can't read configurations, error -22
[  386.366982][ T5863] usb usb4-port1: attempt power cycle
[  386.710111][ T5863] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  386.730996][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  386.736721][ T5863] usb 4-1: no configurations
[  386.742750][ T5863] usb 4-1: can't read configurations, error -22
[  386.806812][   T30] audit: type=1400 audit(1747537043.296:356): avc:  denied  { create } for  pid=10186 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  386.906681][ T5863] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  386.952665][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  386.959388][ T5863] usb 4-1: no configurations
[  386.965192][ T5863] usb 4-1: can't read configurations, error -22
[  386.984448][ T5863] usb usb4-port1: unable to enumerate USB device
[  387.370138][ T5910] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  387.515822][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1269'.
[  387.540635][ T5910] usb 8-1: Using ep0 maxpacket: 8
[  387.558789][ T5910] usb 8-1: too many configurations: 249, using maximum allowed: 8
[  387.579835][ T5910] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff
[  387.596642][T10207] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  387.603955][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  387.618438][ T5910] usb 8-1: Product: syz
[  387.625562][ T5910] usb 8-1: Manufacturer: syz
[  387.631616][T10207] batman_adv: batadv0: Removing interface: virt_wifi0
[  387.638507][ T5910] usb 8-1: SerialNumber: syz
[  387.649110][ T5910] usb 8-1: config 0 descriptor??
[  387.860094][ T5866] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  387.876259][ T5910] mdc800 8-1:0.0: probe fails -> wrong Number of Configuration
[  387.889762][ T5910] usb 8-1: USB disconnect, device number 17
[  388.010000][ T5866] usb 5-1: Using ep0 maxpacket: 32
[  388.016713][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  388.028009][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  388.039287][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  388.054104][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  388.063232][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  388.071581][ T5866] usb 5-1: Product: syz
[  388.075725][ T5866] usb 5-1: Manufacturer: syz
[  388.080835][ T5866] usb 5-1: SerialNumber: syz
[  388.089174][ T5866] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input20
[  388.530646][T10214] input: syz0 as /devices/virtual/input/input21
[  389.066789][ T5910] usb 5-1: USB disconnect, device number 38
[  389.218397][ T5910] appletouch 5-1:1.0: input: appletouch disconnected
[  389.775762][T10239] ptrace attach of "./syz-executor exec"[7204] was attempted by "./syz-executor exec"[10239]
[  389.826985][   T30] audit: type=1400 audit(1747537046.286:357): avc:  denied  { create } for  pid=10226 comm="syz.6.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  391.020042][ T5866] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  391.036657][T10248] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.046143][T10248] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.055492][T10248] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.064469][T10248] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.183602][ T5866] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  391.197380][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.220330][ T5866] usb 5-1: config 0 descriptor??
[  391.840468][   T30] audit: type=1400 audit(1747537048.326:358): avc:  denied  { write } for  pid=10264 comm="syz.7.1289" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  392.141121][ T5866] ath6kl: Failed to submit usb control message: -71
[  392.147790][ T5866] ath6kl: unable to send the bmi data to the device: -71
[  392.155161][ T5866] ath6kl: Unable to send get target info: -71
[  392.162125][ T5866] ath6kl: Failed to init ath6kl core: -71
[  392.168819][ T5866] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  392.221282][ T5866] usb 5-1: USB disconnect, device number 39
[  392.426662][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1292'.
[  392.439458][T10274] syz_tun: entered promiscuous mode
[  392.448415][T10274] syz_tun: left promiscuous mode
[  393.162607][T10302] sp0: Synchronizing with TNC
[  393.563920][   T30] audit: type=1400 audit(1747537050.056:359): avc:  denied  { read } for  pid=10306 comm="syz.7.1306" lport=54198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  393.709625][T10313] input: syz0 as /devices/virtual/input/input22
[  393.750250][ T5866] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  393.939387][ T5866] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  393.992164][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.081630][ T5866] usb 7-1: config 0 descriptor??
[  394.768506][ T5866] ath6kl: Failed to submit usb control message: -71
[  394.814889][ T5866] ath6kl: unable to send the bmi data to the device: -71
[  394.822495][ T5866] ath6kl: Unable to send get target info: -71
[  394.842366][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  394.856549][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'.
[  394.925319][   T30] audit: type=1400 audit(1747537051.326:360): avc:  denied  { bind } for  pid=10323 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  394.974564][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  395.001452][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  395.017600][   T30] audit: type=1400 audit(1747537051.326:361): avc:  denied  { setopt } for  pid=10323 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  395.019566][ T5866] ath6kl: Failed to init ath6kl core: -71
[  395.045558][T10333] capability: warning: `syz.4.1314' uses deprecated v2 capabilities in a way that may be insecure
[  395.090952][ T5866] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  395.124729][ T5866] usb 7-1: USB disconnect, device number 19
[  396.183252][T10360] input: syz0 as /devices/virtual/input/input23
[  396.210137][  T950] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  396.950088][T10357] sp0: Synchronizing with TNC
[  397.100216][  T950] usb 7-1: Using ep0 maxpacket: 32
[  397.117854][  T950] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.310178][  T950] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.324486][  T950] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  397.338589][  T950] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  397.347142][  T950] usb 7-1: Product: syz
[  397.354077][  T950] usb 7-1: Manufacturer: syz
[  397.368333][  T950] hub 7-1:4.0: USB hub found
[  397.376821][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'.
[  397.599000][T10376] netlink: 'syz.7.1329': attribute type 2 has an invalid length.
[  397.607138][   T30] audit: type=1400 audit(1747537054.086:362): avc:  denied  { setopt } for  pid=10373 comm="syz.7.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  397.631241][  T950] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  397.660784][  T950] usb 7-1: USB disconnect, device number 20
[  397.690860][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1331'.
[  398.210796][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1333'.
[  398.544913][T10399] sp0: Synchronizing with TNC
[  398.570023][ T5863] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  398.641024][  T950] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  398.657020][T10401] input: syz0 as /devices/virtual/input/input24
[  399.620152][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  399.637306][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  399.655680][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  399.685177][ T5863] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  399.694672][  T950] usb 8-1: Using ep0 maxpacket: 16
[  399.749804][  T950] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  399.784892][  T950] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  399.800102][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.894895][ T5863] usb 5-1: Product: syz
[  399.906948][T10409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1340'.
[  399.982381][T10409] sctp: [Deprecated]: syz.2.1340 (pid 10409) Use of struct sctp_assoc_value in delayed_ack socket option.
[  399.982381][T10409] Use struct sctp_sack_info instead
[  400.080193][ T5863] usb 5-1: Manufacturer: syz
[  400.084898][ T5863] usb 5-1: SerialNumber: syz
[  400.100086][ T5863] usb 5-1: config 0 descriptor??
[  400.113148][T10391] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  400.135503][  T950] usb 8-1: string descriptor 0 read error: -22
[  400.141890][  T950] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  400.150946][  T950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.162340][T10391] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  400.174975][ T5863] usb 5-1: ucan: probing device on interface #0
[  401.402931][ T5863] usb 5-1: ucan: could not read protocol version, ret=-110
[  401.412351][ T5863] usb 5-1: ucan: probe failed; try to update the device firmware
[  401.675897][ T5863] usb 5-1: USB disconnect, device number 40
[  402.001954][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  402.011190][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  402.229966][ T5910] usb 8-1: USB disconnect, device number 18
[  403.390365][ T5866] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  403.591470][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  403.945355][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  403.969963][ T5866] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  403.993081][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.009306][   T30] audit: type=1400 audit(1747537060.496:363): avc:  denied  { ioctl } for  pid=10452 comm="syz.4.1352" path="socket:[27181]" dev="sockfs" ino=27181 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  404.047293][ T5866] usb 7-1: config 0 descriptor??
[  404.221120][T10462] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[10462]
[  404.479349][ T5866] usbhid 7-1:0.0: can't add hid device: -71
[  404.499594][ T5866] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  404.520938][ T5866] usb 7-1: USB disconnect, device number 21
[  405.868978][T10492] syzkaller1: entered promiscuous mode
[  405.894675][T10492] syzkaller1: entered allmulticast mode
[  405.970455][   T30] audit: type=1400 audit(1747537062.466:364): avc:  denied  { create } for  pid=10493 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  406.040565][   T30] audit: type=1400 audit(1747537062.486:365): avc:  denied  { allowed } for  pid=10493 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  406.852541][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1378'.
[  406.880010][  T950] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  407.041895][  T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.117667][  T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.159041][  T950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  407.175312][  T950] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  407.184551][  T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.196514][  T950] usb 4-1: config 0 descriptor??
[  407.267836][T10529] ptrace attach of "./syz-executor exec"[7204] was attempted by "./syz-executor exec"[10529]
[  407.540125][ T5863] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  407.608998][  T950] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[  407.616852][  T950] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  407.629181][  T950] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  407.654810][  T950] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  407.691427][ T5863] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  407.701483][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0
[  407.716498][ T5863] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  407.746286][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  407.760068][ T5863] usb 5-1: Product: syz
[  407.766539][ T5863] usb 5-1: Manufacturer: syz
[  407.784387][ T5863] usb 5-1: SerialNumber: syz
[  407.806209][ T5863] usb 5-1: config 0 descriptor??
[  407.826152][ T5863] usb 5-1: selecting invalid altsetting 0
[  407.839137][   T58] usb 4-1: USB disconnect, device number 41
[  408.138258][   T30] audit: type=1400 audit(1747537064.626:366): avc:  denied  { create } for  pid=10530 comm="syz.4.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  408.250935][T10538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.269005][T10538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.290879][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'.
[  408.484997][T10544] No such timeout policy "syz0"
[  408.560426][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'.
[  408.569540][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'.
[  408.680032][ T5863] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  408.803025][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'.
[  408.938151][ T5863] usb 7-1: config 0 has no interfaces?
[  408.949036][ T5863] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  408.963336][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.976994][ T5863] usb 7-1: Product: syz
[  408.981281][ T5863] usb 7-1: Manufacturer: syz
[  408.986336][ T5863] usb 7-1: SerialNumber: syz
[  408.999022][ T5863] usb 7-1: config 0 descriptor??
[  409.234635][   T30] audit: type=1400 audit(1747537065.726:367): avc:  denied  { sqpoll } for  pid=10539 comm="syz.6.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  409.282683][T10542] netlink: 'syz.6.1385': attribute type 2 has an invalid length.
[  409.439285][T10560] input: syz0 as /devices/virtual/input/input25
[  409.769113][T10571] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[10571]
[  410.090010][ T5866] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  410.275362][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.292564][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.366920][ T5863] usb 5-1: USB disconnect, device number 41
[  410.381764][ T5866] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  410.395124][ T5866] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  410.406480][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.418718][ T5866] usb 8-1: config 0 descriptor??
[  410.878496][ T5866] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  410.900311][ T5866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  410.918333][ T5866] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  410.934927][ T5866] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  410.953327][   T30] audit: type=1400 audit(1747537067.446:368): avc:  denied  { name_connect } for  pid=10579 comm="syz.3.1399" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  411.080895][ T5863] usb 8-1: USB disconnect, device number 19
[  411.401627][ T5866] usb 7-1: USB disconnect, device number 22
[  411.477924][T10593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10593 comm=syz.4.1405
[  411.496644][   T30] audit: type=1400 audit(1747537067.986:369): avc:  denied  { lock } for  pid=10591 comm="syz.4.1405" path="socket:[27426]" dev="sockfs" ino=27426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  411.520970][    C0] vkms_vblank_simulate: vblank timer overrun
[  414.166425][T10643] input: syz0 as /devices/virtual/input/input26
[  415.169348][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'.
[  416.656174][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1426'.
[  416.770372][T10646] loop6: detected capacity change from 0 to 524287999
[  417.078899][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'.
[  417.088079][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'.
[  417.097125][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'.
[  417.160109][   T58] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  417.258159][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1436'.
[  417.330114][   T58] usb 5-1: Using ep0 maxpacket: 16
[  417.337464][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.349225][   T58] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  417.386445][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.399796][   T58] usb 5-1: config 0 descriptor??
[  417.620051][ T5910] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  417.816618][   T58] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  417.836268][ T5910] usb 8-1: Using ep0 maxpacket: 16
[  417.842259][   T58] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  417.857771][ T5910] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  417.868128][   T58] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  417.883876][   T58] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  417.891113][ T5910] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  417.900158][   T58] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  417.912294][ T5910] usb 8-1: string descriptor 0 read error: -22
[  417.921203][ T5910] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  417.930500][   T58] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  417.947055][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.240057][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  418.325275][ T5863] usb 5-1: USB disconnect, device number 42
[  418.460015][ T5866] usb 4-1: Using ep0 maxpacket: 16
[  419.025857][   T30] audit: type=1400 audit(1747537075.516:370): avc:  denied  { bind } for  pid=10706 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  420.241628][   T30] audit: type=1400 audit(1747537076.346:371): avc:  denied  { create } for  pid=10714 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  420.271246][   T30] audit: type=1400 audit(1747537076.356:372): avc:  denied  { setopt } for  pid=10714 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  420.340018][ T5910] usb 8-1: USB disconnect, device number 20
[  420.895116][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short
[  420.931741][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -71
[  420.953802][ T5866] usb 4-1: can't read configurations, error -71
[  421.204137][   T30] audit: type=1400 audit(1747537077.696:373): avc:  denied  { read } for  pid=10752 comm="syz.4.1462" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  421.220235][    T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  421.284544][   T30] audit: type=1400 audit(1747537077.696:374): avc:  denied  { open } for  pid=10752 comm="syz.4.1462" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  421.480198][    T9] usb 8-1: Using ep0 maxpacket: 16
[  421.516790][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  421.533419][    T9] usb 8-1: config 1 interface 0 has no altsetting 0
[  421.554394][    T9] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  421.563872][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.572121][    T9] usb 8-1: Product: syz
[  421.576453][    T9] usb 8-1: Manufacturer: syz
[  421.581187][    T9] usb 8-1: SerialNumber: syz
[  421.912308][  T950] IPVS: starting estimator thread 0...
[  422.000278][T10771] IPVS: using max 52 ests per chain, 124800 per kthread
[  422.068864][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  422.079828][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1470'.
[  422.133022][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1470'.
[  422.773686][T10794] input: syz0 as /devices/virtual/input/input27
[  423.839972][    T9] usbhid 8-1:1.0: can't add hid device: -71
[  423.848236][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  423.891827][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1481'.
[  424.102330][    T9] usb 8-1: USB disconnect, device number 21
[  425.845331][T10844] input: syz0 as /devices/virtual/input/input28
[  426.660793][T10846] lo speed is unknown, defaulting to 1000
[  426.690198][   T58] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  426.869841][   T58] usb 8-1: Using ep0 maxpacket: 32
[  426.884971][   T58] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.896103][   T58] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.911878][   T58] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  427.180120][   T58] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  427.226233][   T58] usb 8-1: Product: syz
[  427.241118][   T30] audit: type=1800 audit(1747537083.706:375): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1493" name="/" dev="9p" ino=2 res=0 errno=0
[  427.244359][   T58] usb 8-1: Manufacturer: syz
[  427.343190][   T58] hub 8-1:4.0: USB hub found
[  427.558157][   T58] hub 8-1:4.0: config failed, can't read hub descriptor (err -22)
[  427.622140][   T58] usb 8-1: USB disconnect, device number 22
[  428.791408][T10882] vivid-000: disconnect
[  428.861055][   T30] audit: type=1800 audit(1747537085.346:376): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1504" name="/" dev="9p" ino=2 res=0 errno=0
[  428.921701][T10867] vivid-000: reconnect
[  429.386485][T10901] siw: device registration error -23
[  430.373545][T10913] sp0: Synchronizing with TNC
[  430.410101][ T5910] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  430.620107][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  430.710017][   T58] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  430.721005][ T5910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.743985][ T5910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.759107][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  430.769062][ T5910] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  430.779234][ T5910] usb 4-1: Product: syz
[  430.784583][ T5910] usb 4-1: Manufacturer: syz
[  430.819713][ T5910] hub 4-1:4.0: USB hub found
[  430.900104][   T58] usb 7-1: device descriptor read/64, error -71
[  430.934739][T10918] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[10918]
[  431.088508][ T5910] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  431.150142][   T58] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  431.173886][ T5910] usb 4-1: USB disconnect, device number 44
[  431.320263][   T58] usb 7-1: device descriptor read/64, error -71
[  431.452013][   T58] usb usb7-port1: attempt power cycle
[  431.560660][   T30] audit: type=1326 audit(1747537088.036:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  431.657758][T10934] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1521'.
[  431.672437][T10934] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š•Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`
[  431.740417][   T30] audit: type=1326 audit(1747537088.036:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  431.790238][   T58] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  431.833627][   T30] audit: type=1326 audit(1747537088.036:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  431.864002][   T58] usb 7-1: device descriptor read/8, error -71
[  432.239990][   T58] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  432.248688][   T30] audit: type=1326 audit(1747537088.036:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.420762][   T30] audit: type=1326 audit(1747537088.036:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.444137][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.466397][   T58] usb 7-1: device descriptor read/8, error -71
[  432.504561][   T30] audit: type=1326 audit(1747537088.036:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.527744][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.575790][   T30] audit: type=1326 audit(1747537088.046:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.599139][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.614783][   T58] usb usb7-port1: unable to enumerate USB device
[  432.691826][   T30] audit: type=1326 audit(1747537088.046:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.715170][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.745832][   T30] audit: type=1326 audit(1747537088.046:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.799170][   T30] audit: type=1326 audit(1747537088.046:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  432.878472][   T30] audit: type=1326 audit(1747537088.046:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  433.232596][   T30] audit: type=1326 audit(1747537088.046:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd598e969 code=0x7ffc0000
[  434.194700][T10970] siw: device registration error -23
[  435.081697][T10989] ptrace attach of "./syz-executor exec"[7204] was attempted by "./syz-executor exec"[10989]
[  436.630092][ T5910] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  436.825025][ T5910] usb 8-1: device descriptor read/64, error -71
[  437.081809][ T5910] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  437.219989][ T5910] usb 8-1: device descriptor read/64, error -71
[  437.341299][ T5910] usb usb8-port1: attempt power cycle
[  437.710042][ T5910] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  437.756120][ T5910] usb 8-1: device descriptor read/8, error -71
[  438.049999][ T5910] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  438.088673][ T5910] usb 8-1: device descriptor read/8, error -71
[  438.242626][ T5910] usb usb8-port1: unable to enumerate USB device
[  438.879992][  T950] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  439.004553][ T5812] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  439.040010][  T950] usb 5-1: Using ep0 maxpacket: 32
[  439.051127][T11025] lo speed is unknown, defaulting to 1000
[  439.066228][  T950] usb 5-1: unable to get BOS descriptor or descriptor too short
[  439.079738][  T950] usb 5-1: unable to read config index 0 descriptor/start: -71
[  439.092611][  T950] usb 5-1: can't read configurations, error -71
[  439.167379][ T5812] usb 8-1: Using ep0 maxpacket: 8
[  439.244415][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.294955][ T5812] usb 8-1: config 0 has no interfaces?
[  439.308252][ T5812] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  439.324974][ T5812] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  439.367159][ T5812] usb 8-1: Product: syz
[  439.375922][ T5812] usb 8-1: Manufacturer: syz
[  439.387387][ T5812] usb 8-1: SerialNumber: syz
[  439.436123][ T5812] usb 8-1: config 0 descriptor??
[  439.507743][   T30] audit: type=1400 audit(1747537095.976:389): avc:  denied  { bind } for  pid=11047 comm="syz.6.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  439.605481][T11051] input: syz0 as /devices/virtual/input/input29
[  439.649547][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  439.656007][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  439.703441][ T5812] usb 8-1: USB disconnect, device number 27
[  440.385379][   T30] audit: type=1400 audit(1747537096.876:390): avc:  denied  { setopt } for  pid=11053 comm="syz.4.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  440.540039][   T30] audit: type=1800 audit(1747537097.016:391): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1562" name="/" dev="9p" ino=2 res=0 errno=0
[  440.733321][ T5910] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  440.890030][ T5910] usb 5-1: Using ep0 maxpacket: 32
[  440.896576][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  440.904660][ T5910] usb 5-1: config 0 has no interface number 0
[  440.913775][ T5910] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  440.923216][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.931305][ T5910] usb 5-1: Product: syz
[  441.070050][ T5910] usb 5-1: Manufacturer: syz
[  441.077061][ T5910] usb 5-1: SerialNumber: syz
[  441.093276][ T5910] usb 5-1: config 0 descriptor??
[  441.152974][ T5910] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  441.161869][ T5910] usb 5-1: selecting invalid altsetting 1
[  441.168272][ T5910] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  441.194755][ T5910] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  441.206626][ T5910] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  441.218147][ T5910] usb 5-1: media controller created
[  441.247963][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  441.319020][   T58] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  441.400014][ T5812] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  441.479954][   T58] usb 4-1: Using ep0 maxpacket: 32
[  441.500778][   T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.511732][   T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.521794][   T58] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  441.555535][   T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  441.567024][   T58] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  441.572391][ T5812] usb 8-1: Using ep0 maxpacket: 16
[  441.584021][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  441.597047][ T5812] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  441.606581][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.618007][ T5812] usb 8-1: Product: syz
[  441.624247][ T5812] usb 8-1: Manufacturer: syz
[  441.690031][ T5812] usb 8-1: SerialNumber: syz
[  441.696801][ T5812] usb 8-1: config 0 descriptor??
[  441.704185][ T5812] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  441.719667][ T5812] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  441.728153][   T58] usb 4-1: Product: syz
[  441.752934][   T58] usb 4-1: Manufacturer: syz
[  441.757563][   T58] usb 4-1: SerialNumber: syz
[  441.859811][   T58] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input30
[  441.939958][   T30] audit: type=1400 audit(1747537098.406:392): avc:  denied  { ioctl } for  pid=11059 comm="syz.2.1561" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  442.202783][    T9] usb 4-1: USB disconnect, device number 45
[  442.219825][    T9] appletouch 4-1:1.0: input: appletouch disconnected
[  442.314943][ T5812] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  442.350427][ T5910] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  442.358448][ T5910] zl10353_read_register: readreg error (reg=127, ret==-110)
[  442.368084][ T5910] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  442.412379][ T5910] usb 5-1: USB disconnect, device number 45
[  442.741999][ T5812] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  442.753654][ T5812] em28xx 8-1:0.0: board has no eeprom
[  443.221405][T11098] bond1: entered promiscuous mode
[  443.226581][T11098] bond1: entered allmulticast mode
[  443.232577][T11098] 8021q: adding VLAN 0 to HW filter on device bond1
[  443.617674][T11098] bond1 (unregistering): Released all slaves
[  443.793048][T11077] em28xx 8-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  443.859969][ T5812] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  443.867809][ T5812] em28xx 8-1:0.0: dvb set to bulk mode.
[  443.874063][  T950] em28xx 8-1:0.0: Binding DVB extension
[  443.881189][    C0] raw-gadget.2 gadget.7: ignoring, device is not running
[  443.903430][ T5812] usb 8-1: USB disconnect, device number 28
[  443.918913][ T5812] em28xx 8-1:0.0: Disconnecting em28xx
[  443.934998][  T950] em28xx 8-1:0.0: Registering input extension
[  443.941477][ T5812] em28xx 8-1:0.0: Closing input extension
[  443.956449][ T5812] em28xx 8-1:0.0: Freeing device
[  444.251920][T11106] lo speed is unknown, defaulting to 1000
[  446.897501][   T30] audit: type=1400 audit(1747537103.386:393): avc:  denied  { map } for  pid=11129 comm="syz.6.1584" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  448.998666][T11153] bridge0: entered promiscuous mode
[  449.004511][T11153] macvlan2: entered promiscuous mode
[  449.011993][T11153] bridge0: port 1(macvlan2) entered blocking state
[  449.018816][T11153] bridge0: port 1(macvlan2) entered disabled state
[  449.026008][T11153] macvlan2: entered allmulticast mode
[  449.037674][T11153] bridge0: entered allmulticast mode
[  449.336550][T11153] macvlan2: left allmulticast mode
[  449.341905][T11153] bridge0: left allmulticast mode
[  449.418201][T11153] bridge0: left promiscuous mode
[  451.195085][T11198] xt_CT: No such helper "snmp"
[  451.220918][   T30] audit: type=1400 audit(1747537107.696:394): avc:  denied  { write } for  pid=11196 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  451.235022][T11202] lo speed is unknown, defaulting to 1000
[  451.552901][   T58] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  451.797452][   T58] usb 7-1: Using ep0 maxpacket: 16
[  451.812943][   T58] usb 7-1: config 0 has no interfaces?
[  451.824431][   T58] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  452.005040][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'.
[  452.009942][   T58] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  452.044741][   T58] usb 7-1: Manufacturer: syz
[  452.072403][   T58] usb 7-1: config 0 descriptor??
[  452.102518][T11197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.286157][T11202] lo: entered promiscuous mode
[  452.293171][T11202] tunl0: entered promiscuous mode
[  452.305129][T11202] gre0: entered promiscuous mode
[  452.492287][T11202] gretap0: entered promiscuous mode
[  452.507747][T11202] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  452.545343][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.559972][   T58] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  452.643019][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.800181][   T58] usb 4-1: Using ep0 maxpacket: 16
[  453.332473][   T58] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  453.345240][   T58] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  453.543810][   T30] audit: type=1400 audit(1747537110.036:395): avc:  denied  { lock } for  pid=11201 comm="syz.6.1607" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  453.591283][ T5866] usb 7-1: USB disconnect, device number 27
[  453.656477][   T58] usb 4-1: string descriptor 0 read error: -22
[  453.699050][   T30] audit: type=1400 audit(1747537110.176:396): avc:  denied  { ioctl } for  pid=11240 comm="syz.4.1618" path="socket:[30922]" dev="sockfs" ino=30922 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  453.714744][T11247] vti0: entered promiscuous mode
[  453.728885][T11247] vti0: entered allmulticast mode
[  453.745695][   T58] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  453.770857][T11244] lo speed is unknown, defaulting to 1000
[  453.792447][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.570979][ T5866] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  454.839459][ T5866] usb 7-1: Using ep0 maxpacket: 32
[  455.144230][   T30] audit: type=1400 audit(1747537111.626:397): avc:  denied  { write } for  pid=11264 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  455.513453][ T5866] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.527745][ T5866] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.570453][ T5866] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  455.591824][ T5866] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  455.602191][ T5866] usb 7-1: Product: syz
[  455.606513][ T5866] usb 7-1: Manufacturer: syz
[  455.620235][ T5866] hub 7-1:4.0: USB hub found
[  455.825335][ T5866] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  455.921224][ T5866] usb 7-1: USB disconnect, device number 28
[  455.939570][   T58] usb 4-1: USB disconnect, device number 46
[  456.330287][T11280] input: syz0 as /devices/virtual/input/input33
[  457.669970][ T5866] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  457.840064][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  457.851669][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.863019][ T5866] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  458.344587][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.356130][ T5866] usb 7-1: config 0 descriptor??
[  458.395859][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'.
[  458.609987][ T5910] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  458.760087][ T5910] usb 5-1: Using ep0 maxpacket: 8
[  458.772790][ T5910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  458.783914][ T5866] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  458.793163][ T5866] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  458.800359][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.844321][ T5812] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  458.851908][ T5866] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  458.851933][ T5866] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  458.851954][ T5866] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  458.855073][ T5866] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  458.889299][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400
[  458.897591][ T5910] pvrusb2: **********
[  458.901860][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  458.912463][ T5910] pvrusb2: Important functionality might not be entirely working.
[  458.921146][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  458.932718][ T5910] pvrusb2: **********
[  458.986413][ T5866] usb 7-1: USB disconnect, device number 29
[  459.051530][ T5812] usb 4-1: Using ep0 maxpacket: 16
[  459.059250][ T5812] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  459.069623][ T5812] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  459.084199][ T5812] usb 4-1: string descriptor 0 read error: -22
[  459.090626][ T5812] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  459.099726][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.107281][ T2333] pvrusb2: Invalid write control endpoint
[  459.138936][ T2333] pvrusb2: Invalid write control endpoint
[  459.145156][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  459.156213][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  459.165828][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  459.177304][ T2333] pvrusb2: Device being rendered inoperable
[  459.184357][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  459.191588][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  459.200134][ T2333] pvrusb2: Attached sub-driver cx25840
[  459.205681][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  459.215738][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  459.318389][T11302] pvrusb2: Attempted to execute control transfer when device not ok
[  459.332095][ T5812] usb 5-1: USB disconnect, device number 46
[  459.626909][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1646'.
[  459.636004][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1646'.
[  459.647221][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1646'.
[  459.683222][   T30] audit: type=1400 audit(1747537116.176:398): avc:  denied  { read } for  pid=11319 comm="syz.6.1647" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  459.709457][   T30] audit: type=1400 audit(1747537116.176:399): avc:  denied  { open } for  pid=11319 comm="syz.6.1647" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  460.050011][ T5812] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  460.246607][ T5812] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  460.255781][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.265183][ T5812] usb 7-1: Product: syz
[  460.269349][ T5812] usb 7-1: Manufacturer: syz
[  460.274142][ T5812] usb 7-1: SerialNumber: syz
[  460.282271][ T5812] usb 7-1: config 0 descriptor??
[  460.614838][ T5812] usb 7-1: ignoring: probably an ADSL modem
[  460.903108][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1655'.
[  460.993307][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1657'.
[  461.004904][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'.
[  461.016561][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'.
[  461.072150][T11321] program syz.6.1647 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.148856][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1660'.
[  461.164219][T11352] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  461.433261][    T9] usb 4-1: USB disconnect, device number 47
[  461.569976][ T5910] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  461.754477][ T5910] usb 8-1: Using ep0 maxpacket: 16
[  461.761214][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  461.780682][ T5910] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  461.815805][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.863210][ T5910] usb 8-1: Product: syz
[  461.867479][ T5910] usb 8-1: Manufacturer: syz
[  461.938369][ T5910] usb 8-1: SerialNumber: syz
[  461.946740][ T5910] usb 8-1: config 0 descriptor??
[  461.956471][ T5910] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  461.965831][ T5910] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  462.559286][ T5910] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  462.780741][ T5812] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  462.840590][ T5812] usb 7-1: USB disconnect, device number 30
[  462.976261][ T5910] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  462.986131][ T5910] em28xx 8-1:0.0: board has no eeprom
[  463.260300][ T5812] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  463.306718][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'.
[  463.573729][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short
[  463.686600][ T5812] usb 7-1: not running at top speed; connect to a high speed hub
[  463.752382][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.762544][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  463.786674][ T5812] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  463.804528][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.823053][ T5812] usb 7-1: Product: syz
[  463.829465][ T5812] usb 7-1: Manufacturer: syz
[  463.842552][ T5812] usb 7-1: SerialNumber: syz
[  463.860054][ T5909] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  464.029259][ T5909] usb 4-1: Using ep0 maxpacket: 16
[  464.035071][T11366] em28xx 8-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  464.129984][ T5910] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  464.163027][ T5910] em28xx 8-1:0.0: dvb set to bulk mode.
[  464.178372][ T5866] em28xx 8-1:0.0: Binding DVB extension
[  464.205238][ T5910] usb 8-1: USB disconnect, device number 29
[  464.223783][ T5910] em28xx 8-1:0.0: Disconnecting em28xx
[  464.339856][ T5909] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  464.352368][ T5909] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  464.386504][ T5909] usb 4-1: string descriptor 0 read error: -22
[  464.393186][ T5909] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  464.403516][ T5866] em28xx 8-1:0.0: Registering input extension
[  464.409713][ T5910] em28xx 8-1:0.0: Closing input extension
[  464.417310][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.437034][ T5910] em28xx 8-1:0.0: Freeing device
[  465.010177][    T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  465.170058][    T9] usb 8-1: Using ep0 maxpacket: 16
[  465.177221][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.188511][    T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  465.197884][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.228510][    T9] usb 8-1: config 0 descriptor??
[  465.909064][    T9] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  465.920987][    T9] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  465.928059][    T9] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  465.936234][    T9] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  465.945921][    T9] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  465.954520][    T9] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  465.985307][ T5812] usb 7-1: 0:2 : does not exist
[  466.015585][   T30] audit: type=1400 audit(1747537122.506:400): avc:  denied  { write } for  pid=11450 comm="syz.6.1696" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  466.015592][ T5812] usb 7-1: USB disconnect, device number 31
[  466.038982][    C0] vkms_vblank_simulate: vblank timer overrun
[  466.048334][   T30] audit: type=1400 audit(1747537122.536:401): avc:  denied  { ioctl } for  pid=11450 comm="syz.6.1696" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  466.099260][    T9] usb 8-1: USB disconnect, device number 30
[  466.288178][   T30] audit: type=1400 audit(1747537122.776:402): avc:  denied  { write } for  pid=11455 comm="syz.6.1699" path="socket:[32159]" dev="sockfs" ino=32159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  466.389877][T11449] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.392052][    T9] usb 4-1: USB disconnect, device number 48
[  466.404698][T11449] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.419498][T11449] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.428906][T11449] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.450166][ T5866] lo speed is unknown, defaulting to 1000
[  466.455906][ T5866] sÌR4: Port: 1 Link DOWN
[  466.509249][T11462] lo speed is unknown, defaulting to 1000
[  466.650112][ T5910] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  466.825645][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.854553][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.815816][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  467.828736][ T5910] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  467.848065][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.869012][    T9] IPVS: starting estimator thread 0...
[  467.970015][T11481] IPVS: using max 39 ests per chain, 93600 per kthread
[  468.001449][ T5910] usb 7-1: config 0 descriptor??
[  468.541323][ T5910] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd
[  468.646100][ T6590] IPVS: stop unused estimator thread 0...
[  468.740984][ T5910] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  468.938399][ T5910] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  469.116248][ T5910] usb 7-1: USB disconnect, device number 32
[  469.234131][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'.
[  469.773535][   T30] audit: type=1400 audit(1747537126.236:403): avc:  denied  { getopt } for  pid=11500 comm="syz.6.1715" lport=35299 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  469.773787][ T5812] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  469.860394][    T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  469.991147][T11510] hsr0: entered promiscuous mode
[  470.004426][ T5815] Bluetooth: hci2: unexpected event for opcode 0x64c6
[  470.053329][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  470.065480][ T5812] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  470.075709][ T5812] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  470.126206][ T5812] usb 5-1: string descriptor 0 read error: -22
[  470.133047][ T5812] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  470.143676][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.161670][    T9] usb 8-1: Using ep0 maxpacket: 16
[  470.173458][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  470.185975][    T9] usb 8-1: config 1 interface 0 has no altsetting 0
[  470.195575][    T9] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  470.204818][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.214046][    T9] usb 8-1: Product: syz
[  470.218244][    T9] usb 8-1: Manufacturer: syz
[  470.224319][    T9] usb 8-1: SerialNumber: syz
[  472.336309][   T30] audit: type=1400 audit(1747537128.826:404): avc:  denied  { bind } for  pid=11531 comm="syz.2.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  472.435136][T11507] hsr0: left promiscuous mode
[  472.669347][    T9] usbhid 8-1:1.0: can't add hid device: -71
[  472.687866][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  472.698465][    T9] usb 8-1: USB disconnect, device number 31
[  472.800061][ T5909] usb 5-1: USB disconnect, device number 47
[  475.439306][   T30] audit: type=1800 audit(1747537131.926:405): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1738" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  476.550639][T11591] loop6: detected capacity change from 0 to 524287999
[  477.072573][T11602] binder: 11601:11602 ioctl c0306201 2000000003c0 returned -14
[  477.380088][    T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  477.539985][    T9] usb 7-1: Using ep0 maxpacket: 16
[  477.546473][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.558753][    T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  477.568421][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.578290][    T9] usb 7-1: config 0 descriptor??
[  477.993994][    T9] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  478.002487][    T9] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  478.009611][    T9] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  478.018506][    T9] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  478.026829][    T9] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  478.038422][    T9] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  478.200824][T11606] i2c i2c-1: unsupported multi-msg i2c transaction
[  478.209018][ T5909] usb 7-1: USB disconnect, device number 33
[  478.640062][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  478.780071][    T9] usb 4-1: device descriptor read/64, error -71
[  478.884310][   T30] audit: type=1800 audit(1747537135.356:406): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1753" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  479.150099][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  479.290123][    T9] usb 4-1: device descriptor read/64, error -71
[  479.355664][T11631] binder: 11629:11631 ioctl c0306201 0 returned -14
[  479.400118][    T9] usb usb4-port1: attempt power cycle
[  479.750514][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  479.770456][    T9] usb 4-1: device descriptor read/8, error -71
[  480.420096][    T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  480.442093][    T9] usb 4-1: device descriptor read/8, error -71
[  480.620924][    T9] usb usb4-port1: unable to enumerate USB device
[  480.680416][T11649] random: crng reseeded on system resumption
[  480.889288][   T30] audit: type=1400 audit(1747537137.376:407): avc:  denied  { ioctl } for  pid=11648 comm="syz.6.1760" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  481.052313][T11665] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[11665]
[  481.343744][T11673] binder: 11671:11673 ioctl c0306201 0 returned -14
[  481.913961][T11685] siw: device registration error -23
[  482.458297][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'.
[  482.653077][   T30] audit: type=1400 audit(1747537139.146:408): avc:  denied  { write } for  pid=11696 comm="syz.6.1775" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  482.664875][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'.
[  482.706780][T11699] ==================================================================
[  482.714831][T11699] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0
[  482.723412][T11699] Write of size 1024 at addr ffffc90004558d65 by task vivid-000-vid-c/11699
[  482.732053][T11699] 
[  482.734364][T11699] CPU: 0 UID: 0 PID: 11699 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[  482.734379][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  482.734386][T11699] Call Trace:
[  482.734390][T11699]  <TASK>
[  482.734394][T11699]  dump_stack_lvl+0x116/0x1f0
[  482.734412][T11699]  print_report+0xc3/0x670
[  482.734424][T11699]  ? __virt_addr_valid+0x5e/0x590
[  482.734441][T11699]  ? tpg_fill_plane_buffer+0x21d2/0x43c0
[  482.734456][T11699]  kasan_report+0xe0/0x110
[  482.734467][T11699]  ? tpg_fill_plane_buffer+0x21d2/0x43c0
[  482.734484][T11699]  kasan_check_range+0xef/0x1a0
[  482.734497][T11699]  __asan_memcpy+0x3c/0x60
[  482.734512][T11699]  tpg_fill_plane_buffer+0x21d2/0x43c0
[  482.734535][T11699]  ? __pfx_tpg_fill_plane_buffer+0x10/0x10
[  482.734552][T11699]  vivid_fillbuff+0x8d2/0x4250
[  482.734573][T11699]  ? __pfx_vivid_fillbuff+0x10/0x10
[  482.734591][T11699]  ? v4l2_ctrl_request_setup+0x45e/0xa60
[  482.734602][T11699]  ? lockdep_hardirqs_on+0x7c/0x110
[  482.734618][T11699]  ? vivid_thread_vid_cap_tick+0x814/0x15d0
[  482.734632][T11699]  vivid_thread_vid_cap_tick+0x814/0x15d0
[  482.734648][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  482.734663][T11699]  vivid_thread_vid_cap+0x454/0xda0
[  482.734680][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  482.734695][T11699]  ? do_raw_spin_lock+0x12c/0x2b0
[  482.734707][T11699]  ? find_held_lock+0x2b/0x80
[  482.734721][T11699]  ? rcu_is_watching+0x12/0xc0
[  482.734733][T11699]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  482.734748][T11699]  ? lockdep_hardirqs_on+0x7c/0x110
[  482.734763][T11699]  ? __kthread_parkme+0x19e/0x250
[  482.734779][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  482.734794][T11699]  kthread+0x3c2/0x780
[  482.734804][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734813][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734823][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734832][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734841][T11699]  ? rcu_is_watching+0x12/0xc0
[  482.734854][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734864][T11699]  ret_from_fork+0x45/0x80
[  482.734874][T11699]  ? __pfx_kthread+0x10/0x10
[  482.734884][T11699]  ret_from_fork_asm+0x1a/0x30
[  482.734903][T11699]  </TASK>
[  482.734906][T11699] 
[  482.948550][T11699] The buggy address belongs to the virtual mapping at
[  482.948550][T11699]  [ffffc90004548000, ffffc9000455a000) created by:
[  482.948550][T11699]  vb2_vmalloc_alloc+0x135/0x3f0
[  482.966490][T11699] 
[  482.968787][T11699] The buggy address belongs to the physical page:
[  482.975165][T11699] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x6125d
[  482.985199][T11699] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  482.992282][T11699] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  483.000847][T11699] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000
[  483.009398][T11699] page dumped because: kasan: bad access detected
[  483.015778][T11699] page_owner tracks the page as allocated
[  483.021463][T11699] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11695, tgid 11692 (syz.3.1776), ts 482700560699, free_ts 481620204776
[  483.040794][T11699]  post_alloc_hook+0x181/0x1b0
[  483.045539][T11699]  get_page_from_freelist+0x135c/0x3920
[  483.051068][T11699]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  483.056932][T11699]  alloc_pages_mpol+0x1fb/0x550
[  483.061765][T11699]  alloc_pages_noprof+0x131/0x390
[  483.066759][T11699]  __vmalloc_node_range_noprof+0x732/0x1540
[  483.072629][T11699]  vmalloc_user_noprof+0x6b/0x90
[  483.077542][T11699]  vb2_vmalloc_alloc+0x135/0x3f0
[  483.082450][T11699]  __vb2_queue_alloc+0x8c9/0x1280
[  483.087449][T11699]  vb2_core_reqbufs+0xa90/0xfe0
[  483.092277][T11699]  __vb2_init_fileio+0x3f1/0x1100
[  483.097277][T11699]  vb2_core_poll+0x5ec/0x700
[  483.101841][T11699]  vb2_poll+0x33/0x150
[  483.105884][T11699]  vb2_fop_poll+0x10f/0x2c0
[  483.110362][T11699]  v4l2_poll+0x163/0x320
[  483.114579][T11699]  do_sys_poll+0x526/0xe00
[  483.118970][T11699] page last free pid 11675 tgid 11675 stack trace:
[  483.125440][T11699]  __free_frozen_pages+0x69d/0xff0
[  483.130527][T11699]  vfree+0x176/0x960
[  483.134396][T11699]  vb2_vmalloc_put+0x7b/0xc0
[  483.138953][T11699]  __vb2_buf_mem_free+0x15d/0x2d0
[  483.143952][T11699]  __vb2_queue_free+0x7ee/0xa30
[  483.148777][T11699]  vb2_core_reqbufs+0x276/0xfe0
[  483.153620][T11699]  __vb2_cleanup_fileio+0xed/0x190
[  483.158707][T11699]  vb2_core_queue_release+0x1f/0x190
[  483.163967][T11699]  _vb2_fop_release+0xe8/0x280
[  483.168704][T11699]  vivid_fop_release+0x155/0xc40
[  483.173618][T11699]  v4l2_release+0x232/0x460
[  483.178093][T11699]  __fput+0x3ff/0xb70
[  483.182046][T11699]  task_work_run+0x150/0x240
[  483.186608][T11699]  syscall_exit_to_user_mode+0x27b/0x2a0
[  483.192217][T11699]  do_syscall_64+0xda/0x260
[  483.196694][T11699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.202820][T11699] 
[  483.205113][T11699] Memory state around the buggy address:
[  483.210712][T11699]  ffffc90004558f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  483.218744][T11699]  ffffc90004558f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  483.226777][T11699] >ffffc90004559000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  483.234806][T11699]                    ^
[  483.238839][T11699]  ffffc90004559080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  483.246869][T11699]  ffffc90004559100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  483.254897][T11699] ==================================================================
[  483.263053][    C0] vkms_vblank_simulate: vblank timer overrun
[  483.269504][T11699] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  483.276703][T11699] CPU: 1 UID: 0 PID: 11699 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[  483.289180][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  483.299216][T11699] Call Trace:
[  483.302477][T11699]  <TASK>
[  483.305396][T11699]  dump_stack_lvl+0x3d/0x1f0
[  483.309983][T11699]  panic+0x71c/0x800
[  483.313870][T11699]  ? __pfx_panic+0x10/0x10
[  483.318274][T11699]  ? irqentry_exit+0x3b/0x90
[  483.322850][T11699]  ? lockdep_hardirqs_on+0x7c/0x110
[  483.328035][T11699]  ? preempt_schedule_thunk+0x16/0x30
[  483.333386][T11699]  ? tpg_fill_plane_buffer+0x21d2/0x43c0
[  483.339005][T11699]  ? preempt_schedule_common+0x44/0xc0
[  483.344455][T11699]  ? check_panic_on_warn+0x1f/0xb0
[  483.349548][T11699]  ? tpg_fill_plane_buffer+0x21d2/0x43c0
[  483.355168][T11699]  check_panic_on_warn+0xab/0xb0
[  483.360090][T11699]  end_report+0x107/0x170
[  483.364406][T11699]  kasan_report+0xee/0x110
[  483.368808][T11699]  ? tpg_fill_plane_buffer+0x21d2/0x43c0
[  483.374431][T11699]  kasan_check_range+0xef/0x1a0
[  483.379269][T11699]  __asan_memcpy+0x3c/0x60
[  483.383675][T11699]  tpg_fill_plane_buffer+0x21d2/0x43c0
[  483.389135][T11699]  ? __pfx_tpg_fill_plane_buffer+0x10/0x10
[  483.394934][T11699]  vivid_fillbuff+0x8d2/0x4250
[  483.399693][T11699]  ? __pfx_vivid_fillbuff+0x10/0x10
[  483.404886][T11699]  ? v4l2_ctrl_request_setup+0x45e/0xa60
[  483.410503][T11699]  ? lockdep_hardirqs_on+0x7c/0x110
[  483.415687][T11699]  ? vivid_thread_vid_cap_tick+0x814/0x15d0
[  483.421566][T11699]  vivid_thread_vid_cap_tick+0x814/0x15d0
[  483.427273][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  483.432981][T11699]  vivid_thread_vid_cap+0x454/0xda0
[  483.438166][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  483.443873][T11699]  ? do_raw_spin_lock+0x12c/0x2b0
[  483.448880][T11699]  ? find_held_lock+0x2b/0x80
[  483.453542][T11699]  ? rcu_is_watching+0x12/0xc0
[  483.458291][T11699]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  483.464082][T11699]  ? lockdep_hardirqs_on+0x7c/0x110
[  483.469269][T11699]  ? __kthread_parkme+0x19e/0x250
[  483.474283][T11699]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  483.479989][T11699]  kthread+0x3c2/0x780
[  483.484039][T11699]  ? __pfx_kthread+0x10/0x10
[  483.488608][T11699]  ? __pfx_kthread+0x10/0x10
[  483.493179][T11699]  ? __pfx_kthread+0x10/0x10
[  483.497749][T11699]  ? __pfx_kthread+0x10/0x10
[  483.502321][T11699]  ? rcu_is_watching+0x12/0xc0
[  483.507068][T11699]  ? __pfx_kthread+0x10/0x10
[  483.511638][T11699]  ret_from_fork+0x45/0x80
[  483.516037][T11699]  ? __pfx_kthread+0x10/0x10
[  483.520606][T11699]  ret_from_fork_asm+0x1a/0x30
[  483.525360][T11699]  </TASK>
[  483.528551][T11699] Kernel Offset: disabled
[  483.532850][T11699] Rebooting in 86400 seconds..