last executing test programs:

10.389151169s ago: executing program 3 (id=466):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf000000}, 0x0)

10.368278985s ago: executing program 2 (id=467):
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1ac3f68a4df248dfd6894f3780f97c4226d8fa47f4bb0e59eab9ea7e68f65a7277d576aba4c3cd98789134e33085cac55e540c2cfa4eb2179671e06129070002b488bf2f68a69b8625185f842b2b9d4d31d46c7c506e9c01a493be362ecfa57e061a86b9f6435d5dc4306ce5814cc961ce3db6e51647c6826dda46bde3b6d0a5355e75d571748926d5b5fdb87d45e29b267eb987f8e860413f73bb215a50a7bbf3c1094326b44799510292b7720d146b8c3d684298c816339a44c409e73065fec5833a0cc6258572b312153f63eedf730d6c", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x4)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='so\trce', &(0x7f0000000040)='c:::\x00', 0x0)
r6 = gettid()
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7fffffff})
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xb)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
syz_io_uring_setup(0x7022, &(0x7f0000000740)={0x0, 0x1c2a, 0x20, 0x1}, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})

9.373196309s ago: executing program 3 (id=471):
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYBLOB="3dc7431a5a691bb84a99729997528e59746c843924700a1cb3365b3d959e45c955caa6d6dc31319a203e63080d0b2c2d7a735204f48a1bb60f1f5dd81f1a2d4eedcbd056c67b6d41"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x5, 0x125103)
ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000700)=0x217)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001300)="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", 0x681}], 0x1}}], 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x1, 0x5}, 0x50)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080))

8.943533049s ago: executing program 2 (id=473):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0x37}, 0x28)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x296)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102391, 0x18ff7)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x3, 0x5001)
r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x7, 0x3, 0x1, 0x0, 0x8})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x6, "488dc807"}, 0xffff, 0x2, {0x0}, 0x10000003})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='ext4_request_inode\x00'}, 0x18)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="040e07062d0c"], 0xa)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x3d, 0xffffffff, 0x1e}, 0x2c)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041)
r8 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r9 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000001c0)}, 0x400c006)

8.319174056s ago: executing program 4 (id=474):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x1)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

8.104026876s ago: executing program 1 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x49}]})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4)
socket(0x2a, 0x3, 0x1)
syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0)

8.091132611s ago: executing program 2 (id=477):
syz_emit_ethernet(0x36, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3404, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x20, 0x0, 0x684}}}}}}, 0x0) (async)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x7f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) (async)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1068], 0x42c}}, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x801)

7.403674409s ago: executing program 2 (id=479):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r8, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x2, 0xfffffffffffffffa, 0x3fff})
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r9=>0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8)

7.361324939s ago: executing program 4 (id=480):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = getpid() (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffc6e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f000051d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0xffffe000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read(0xffffffffffffffff, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
close(r6)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

6.361517307s ago: executing program 2 (id=481):
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='virt_wifi0\x00')
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet(0x2, 0x4, 0x5)
pipe2$watch_queue(&(0x7f0000000480), 0x80)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1})
pread64(r3, &(0x7f0000000180)=""/244, 0x20, 0x100000000)
r4 = fsmount(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="8309829fbd1e49d0dd5119eaf8992ed43ff4e0b26352487a042b63707573657420"], 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3b}}, 0x6048800)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5562bffbdfb51877fa95ba273b726fbc50aa61d10b4c4da76c00", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4080)
syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d")
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000780)=ANY=[@ANYBLOB="400200001000010000000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000e300000000000000fdffffffffffffff04000000000000000000000800000000000000000100000000000000000000000200000000000007000000000a000000cd00000000000000e8001100e0000002000000000000000000000000ac141428000000000000000000000000ac141437000000000000000000000000fc020000000000000000000000000000ff0100000535000002000a00fc000000000000000000000000000000fc000000000000000000000000000000ac1414aa000000000000000000000000fe80000000000000000000002dff020000033500000a000a000000000000000000000000000000000064010102000000000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000012b000000ff3400000a0000001c0017000000000027bd7000000000002aa5700028bd7000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097969b131b45913813b5702c9bce2062332eb78cea64de1dc89228f7951e49d50d7d69caf0a6865e8b0ae803ed1fdd0a788bdeb6e381f6a947187286bec5104d6ec3d5cc2554709e502ba7dec88befb19bb61032021f8209f4b2f0e121be38c131cd4e6a5b76fbbe849bca5fabbf28555e6af4874bbf81f7ae1d5f29ee8dcea9125b600d418e7b2e1842b2"], 0x240}}, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202)
socket$nl_route(0x10, 0x3, 0x0)

6.266241238s ago: executing program 1 (id=482):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4c494e453120274d617361c0bfab979215704982746572204361707475726520537769"], 0x33)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003940)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x84, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x1cc, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xac}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c303d1cb5d6e2fe}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x56, 0x7, 0x1, 0x0, "d6cb61a3d9062414aa7e13467e53d26c84a8a8c27a6199c11650f66cf34a499c5992951ced0814c004150868f2f11a71a40d9994892682f1c2ed0724f8f54038ab746171c2cbc218c98423d8dc9e3c7d6612"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x1550, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1410, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "ffde295381970651692d97fe40ef8fa094a8c3f01ca7a1c470ba810998958d85a1d74a4f53cab41383ee107fe0e85c17364d770344e6fe00e12fd9"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0x68, 0x6, 0x1, 0x0, "d68e306fe6f7841c853582d83b7284e69af20d0d135bb3cb89d6e33ed39e675b8f8d78e1616ee899f5cd060152f8dcbf1857d1b335ffaaf654287f80d816d6aeaa29dadafa15d24f4a3ddfc87dfd791083593d2c86304b541236ee634c4b0dedb60f2fa1"}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x230, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "b97114b0e5b4644b29587ac3e50a4b5b595d0e3dd96bbc20bf2e7957975c96387d045c8070247246d33829b188aa7a82fd41b3bd883e5a4e091e5d30a35a95a3382534cc4286e268a0de5d053d10fe4a273d32559f25946e87517b671e283adccb62e37688990af7b3e2d0bf4f37f55277f66735c299ca14425a0ea476edc9efb53e357b43af8ccb3d352336fee25040e90534d3b368cc28296ddff23dbdc63d723a116bb28356916a09ba268e0d585203f21263af90c3e368571df87a64799ccbcac7720602b2df9e122df2a6a6b57635e4b817b309a83f80"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb}]}, @NFTA_DATA_VALUE={0x66, 0x1, "2a1e7210742530ae7ef0fe7e451bfc10721442b52302cf244b9186215d63fc856f8aa765a10ce6c4f9ca2e306a57c2deb0eba9452e254d94f1964d6bb6c4264dfd464128a9db08762503bf1e35cb65540debd54d832f4c5e7cbbaaf253ce7f626704"}, @NFTA_DATA_VALUE={0x7b, 0x1, "7b90ee52d5afceecefcf78a10ec0fe074c7882ca625aab41d6d18ec620cd7aee802f739f220b3c557418e22a3a9c7bce7fb2c612ccfbca1d7a166770140825cdd71b5e3c3ab080bf09d6dc36525756885e7f0ef5a824523a5fbc064b2b4b17b13aa93647cd11d1342ea288847701b2f5d42ffa8414bc10"}]}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x80}, @NFTA_REJECT_TYPE={0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x1050, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe8, 0x6, 0x1, 0x0, "82d4d5626bf0185f0033b6e45af09386e0a68aeb5731b2bc20e5911a5189214a62e66abf138d7df3c1c4bf7652a3ee2e1b498951b237bf97bc103a841a729c376209bee6ea6ec12c68f56a1e94066bda0f8d1ff8784852c43a95fdec3aab3286f07816d1b6ee076d6fbde9ecdc9f7c416e27bb7db339128947221ff32249853924ba4268f26c9b0a000f3f76c2bde72ec6658ec9e00cd079767d2aa81270ac6bb7c8c7da6a9aa9377a852b00ac3fe19709a87462879c96fa8321cbe424bc7f1993119794dbf396bd94dc4b08b429dd25c721f7a41e7867d1d266105adc2cb3afdcdfe816"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x55421ae1caa1612b, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x1834}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000180), 0x4)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@loopback}, &(0x7f0000000400)=0x14)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r7 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)='S', 0x1, 0x24000004, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x3510}, 0x1c)

5.792793221s ago: executing program 3 (id=483):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000003c0)="58f6a7f01044a85c3efeaef06b86a3bd6ec7b52d26c19f7e67c641cb7f2e214232fba9ca54e7df275adbbcdab69f1b93cb386b5ebc61294108fde47f4ee1e8c636d545aeaed54429f1a07c0219b9e1f2bc6d960bfa71b09a527c8baabc22a81a96c35a2ed214721fbbd9c2e1a738359f191197", 0x73, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740))
r4 = dup(r3)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4})
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100000009040100"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)

5.705633513s ago: executing program 4 (id=484):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r2=>0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1, 0x0, 0x0)
dup3(r0, r0, 0x0)

5.63876908s ago: executing program 0 (id=485):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mkdir(&(0x7f0000000dc0)='./file0\x00', 0x80) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x14, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000e00), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)

5.497639986s ago: executing program 0 (id=486):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, <r1=>0x0})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7)
mkdirat(r2, &(0x7f0000000c40)='./file0/file0\x00', 0x196)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={[{@uuid_auto}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
pivot_root(&(0x7f00000018c0)='./bus\x00', 0x0)
llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0xac3e1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000cc0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000008c0)=""/4, 0x4}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/61, 0x3d}, {&(0x7f0000000a40)=""/162, 0xa2}], 0x9, &(0x7f0000000c00)=""/39, 0x27}, 0x6}], 0x1, 0x22000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x1c0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x5}, 0xc)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r7, 0x4b6a, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1)

5.3353643s ago: executing program 1 (id=487):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x183001, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x400001, 0x180)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfb}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x90}}, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0xa, 0x80ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa5, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0xfffffffa, 0x7fff]})

5.218803575s ago: executing program 0 (id=488):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000000040)=""/232, 0xe8)

4.131164678s ago: executing program 1 (id=489):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000180)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f00001a6000/0x3000)=nil, 0x2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))

4.114367471s ago: executing program 0 (id=490):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000180)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f00001a6000/0x3000)=nil, 0x2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))

3.146921461s ago: executing program 4 (id=491):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r8, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x2, 0xfffffffffffffffa, 0x3fff})
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r9=>0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8)

1.420408625s ago: executing program 3 (id=492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000091433f10000000000000000e07fc72d88854e6f619569858557fdae5b24a57fe95ff06775305e4205a2570bcd85fb6ba0cd26678cf3321ff2480236175b7ffd267c467f2bb136ee63732bc2"], 0x10}}, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000502010200000000000000000a0000070900030073797a30000000000900020073797a31000000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x4000})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x8000})
r4 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2})
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa)
pipe(0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3)
close_range(r4, 0xffffffffffffffff, 0x0)

1.260537656s ago: executing program 4 (id=493):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x100, 0x1403, 0x400, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x100}}, 0x40800)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x6, 0xc, 0x2, 0x0, 0x9})
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x8c, 0x40, 0x1, 0x7fffc, 0x25dfdbfd, {0x1b}, [@nested={0x4, 0x48}, @nested={0x68, 0x1, 0x0, 0x1, [@generic="5dd5a65e730c1cbf11a56d5f8ac3605ddc3a78c26cf8f8b88df9993c178e8f4d8644e3536beaa6abc21f2a8644fdeb4acb7f98babef433fa3ed6b6476db7f63bb99941dfebe33e3292a86024103b3066cfc9af1fff9645826f3f45836b34be9f3d72c81f"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x8c}, 0x1, 0x0, 0x0, 0x402c841}, 0x4008094)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r8}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r6, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177)

771.516753ms ago: executing program 3 (id=494):
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x4d, 0x5b, 0xaf, 0x10, 0x6e0, 0x319, 0x1f59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0x7, 0x4e, 0x2, 0xa9, 0x21, 0xb2, 0x7, [], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x60, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

723.48188ms ago: executing program 1 (id=495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007041522300000000109021b0001000000010904000001faf40d0009058203"], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x57)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010002000400"/44], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r5])

671.397763ms ago: executing program 0 (id=496):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x8b1bf000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setrlimit(0xa, &(0x7f0000000080)={0x3, 0x6}) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000514000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x4704}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

266.757394ms ago: executing program 1 (id=497):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0x1d, 0x4, 0x9, 0x48, 0x410c, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x41, 0x2}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYBLOB="42a78fbbb67560be6b49"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7)
sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

206.042261ms ago: executing program 4 (id=498):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f000057a000/0x2000)=nil, 0x2000, 0x2000001)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x40400)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xa, 0x4, 0x1, 0x0, 'syz1\x00', 0x2}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xa, 0x4, 0x1, 0x0, 'syz1\x00', 0x2})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x27a23e87) (async)
sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x27a23e87)
getpid() (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r5, &(0x7f0000002000)='`', 0x88020)
syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)

174.085406ms ago: executing program 3 (id=499):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r2 = memfd_secret(0x0)
ftruncate(r2, 0x581)
ftruncate(r2, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x7, 0xf, 0x6, 0x10, 0x3, 0x4}, 0x9c)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20049892}, 0x840)
fchdir(r1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0xff)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, 0x0, &(0x7f0000000500))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r5}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r7}, 0x18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000a40), 0x5d, 0x4000000)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080))

3.596716ms ago: executing program 0 (id=500):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2000000015, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x40f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff01]}}})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa0010000000000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

0s ago: executing program 2 (id=501):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r2=>0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1, 0x0, 0x0)
dup3(r0, r0, 0x0)

kernel console output (not intermixed with test programs):

8] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  102.125072][ T6138] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  102.160223][ T6138] usb 4-1: config 1 interface 105 has no altsetting 0
[  102.265433][ T6138] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  102.277504][ T6138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.320974][ T6138] usb 4-1: Product: syz
[  102.339875][ T6138] usb 4-1: Manufacturer: syz
[  102.353689][ T6138] usb 4-1: SerialNumber: syz
[  102.387677][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.424035][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.880382][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.899594][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.288104][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  103.288118][   T30] audit: type=1400 audit(1766534123.278:321): avc:  denied  { create } for  pid=6533 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  103.382635][ T6138] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  103.449829][ T6138] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  103.565223][ T6138] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:34:16:bd:a8:2f
[  103.677446][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  103.705573][   T30] audit: type=1326 audit(1766534123.688:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.4.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9a1f8f749 code=0x0
[  103.732389][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  103.746760][ T5888] usb 4-1: USB disconnect, device number 9
[  103.754982][ T5888] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  103.888810][   T10] usb 3-1: Using ep0 maxpacket: 16
[  103.894034][ T5831] usb 2-1: Using ep0 maxpacket: 16
[  103.963340][ T6562] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  103.970159][ T6562] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  103.978565][ T6562] vhci_hcd vhci_hcd.0: Device attached
[  104.003927][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.018688][ T5831] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  104.059604][   T30] audit: type=1400 audit(1766534124.038:323): avc:  denied  { mounton } for  pid=6557 comm="syz.4.129" path="/21/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  104.316071][ T6138] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  104.446180][ T6138] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  104.566068][ T5931] IPVS: starting estimator thread 0...
[  104.588719][ T6563] vhci_hcd: connection reset by peer
[  104.656280][ T3475] vhci_hcd vhci_hcd.4: stop threads
[  104.677547][ T6575] IPVS: using max 39 ests per chain, 93600 per kthread
[  104.693947][ T3475] vhci_hcd vhci_hcd.4: release socket
[  104.724010][ T3475] vhci_hcd vhci_hcd.4: disconnect device
[  105.568485][ T5831] usb 2-1: config 1 has no interface number 0
[  105.576564][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00
[  105.587577][ T5831] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  105.602058][   T10] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[  105.611073][ T5831] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  105.621506][   T10] usb 3-1: Manufacturer: syz
[  105.626740][ T5831] usb 2-1: config 1 interface 105 has no altsetting 0
[  105.634738][   T10] usb 3-1: config 0 descriptor??
[  105.644895][ T5831] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  105.654827][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  105.664495][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  105.677545][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.685917][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  105.695520][ T5831] usb 2-1: Product: syz
[  105.699774][ T5831] usb 2-1: Manufacturer: syz
[  105.704404][ T5831] usb 2-1: SerialNumber: syz
[  105.720858][ T6550] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.728216][ T6550] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.844117][ T6553] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  105.862784][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.873777][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.010203][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  106.097353][  T935] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  106.140393][ T6550] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.147886][ T6550] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.167545][ T5888] usb 4-1: Using ep0 maxpacket: 8
[  106.179048][ T5888] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  106.189071][ T5888] usb 4-1: config 179 has no interface number 0
[  106.195441][ T5888] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  106.212339][ T5888] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  106.223783][ T5888] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  106.237005][ T5888] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  106.249462][ T5888] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  106.269935][ T5888] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  106.284604][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.311021][  T935] usb 1-1: config 0 has no interfaces?
[  106.519531][  T935] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  106.532468][ T5831] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  106.540370][  T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.560140][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  106.563380][  T935] usb 1-1: Product: syz
[  106.577369][ T5831] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  106.620700][  T935] usb 1-1: Manufacturer: syz
[  106.625960][  T935] usb 1-1: SerialNumber: syz
[  106.637945][ T5831] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  106.644894][  T935] usb 1-1: config 0 descriptor??
[  106.662876][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  106.677535][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  106.696962][ T5831] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 76:b1:9a:3a:95:81
[  106.741558][   T10] usb 3-1: USB disconnect, device number 11
[  106.836943][ T5831] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7
[  106.918609][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=6587 comm=syz.0.133
[  107.011278][ T6583] veth1_vlan: left promiscuous mode
[  107.033105][   T10] usb 1-1: USB disconnect, device number 8
[  107.033856][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.089122][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.089849][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.131056][ T5831] usb 2-1: USB disconnect, device number 4
[  107.152724][ T5831] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  107.177548][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.311690][ T5831] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  107.553987][  T935] usb 4-1: USB disconnect, device number 10
[  107.554022][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  107.568794][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  107.577342][ T5831] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  107.590279][ T5831] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  108.017606][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.416500][ T6643] xt_TCPMSS: Only works on TCP SYN packets
[  108.547311][ T5831] usb 2-1: Using ep0 maxpacket: 16
[  108.560058][ T6650] syz.3.140 uses obsolete (PF_INET,SOCK_PACKET)
[  108.560439][ T5831] usb 2-1: config 2 has an invalid interface number: 201 but max is 0
[  108.664244][ T5831] usb 2-1: config 2 has no interface number 0
[  108.671607][   T30] audit: type=1400 audit(1766534128.658:324): avc:  denied  { wake_alarm } for  pid=6649 comm="syz.3.140" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  108.708906][ T5831] usb 2-1: config 2 interface 201 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  108.766290][ T5831] usb 2-1: config 2 interface 201 altsetting 1 bulk endpoint 0xA has invalid maxpacket 8
[  108.780836][   T30] audit: type=1400 audit(1766534129.752:325): avc:  denied  { ioctl } for  pid=6649 comm="syz.3.140" path="socket:[11618]" dev="sockfs" ino=11618 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  108.800175][ T5831] usb 2-1: config 2 interface 201 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  108.919618][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.362269][   T30] audit: type=1400 audit(1766534129.802:326): avc:  denied  { read write } for  pid=6655 comm="syz.4.141" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  109.387904][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  109.514269][ T5831] usb 2-1: config 2 interface 201 altsetting 1 endpoint 0x4 has invalid maxpacket 927, setting to 64
[  109.571977][ T5831] usb 2-1: config 2 interface 201 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  109.618084][ T6138] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  109.623165][   T30] audit: type=1400 audit(1766534129.802:327): avc:  denied  { open } for  pid=6655 comm="syz.4.141" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  109.659643][ T5831] usb 2-1: config 2 interface 201 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  109.806262][ T5831] usb 2-1: config 2 interface 201 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  109.868869][ T5831] usb 2-1: config 2 interface 201 has no altsetting 0
[  109.884355][   T30] audit: type=1400 audit(1766534129.822:328): avc:  denied  { read } for  pid=6655 comm="syz.4.141" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  109.929333][ T5831] usb 2-1: New USB device found, idVendor=2c4e, idProduct=0107, bcdDevice=c7.7e
[  109.941524][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.943121][ T6662] fido_id[6662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.957367][   T30] audit: type=1400 audit(1766534129.822:329): avc:  denied  { open } for  pid=6655 comm="syz.4.141" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  110.004757][ T5831] usb 2-1: Product: à ”
[  110.035287][ T5831] usb 2-1: Manufacturer: â°‰
[  110.047428][ T5831] usb 2-1: SerialNumber: 굳⢯Ȓ걛紥뎣쨟ᬲ뷘㎢剭붷⫂晳㛊ࠑ��⸳⺒╔ᆋᶬ꘽剘׋ꙥ쫕쳆勃去�횅㱤넆匣�䘚茢�⥺㭿盆麿켋έ䦢�മʊ봡ꌲ謢ᧈ焥�酘敔擢�徑��챬벓욊ᷴ廢땀�ᴵ껹���慅䭆簣⠫ｦ瑔휊鯃餚둴Ꮄ䶟襊ꖟ】鴬�볥쨔�磌�멕㬺뙮�ᾡｙ绶䔒�▮㷽潆
[  110.126485][ T6631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.208745][ T6660] ceph: No mds server is up or the cluster is laggy
[  110.438698][ T5831] usb 2-1: USB disconnect, device number 5
[  110.505259][   T30] audit: type=1326 audit(1766534131.492:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.4.144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9a1f8f749 code=0x0
[  110.788446][ T6686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  110.795100][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  110.803843][ T6686] vhci_hcd vhci_hcd.0: Device attached
[  111.017383][ T6579] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  111.295614][ T6697] Device name cannot be null; rc = [-22]
[  111.446986][ T6687] vhci_hcd: connection closed
[  111.447112][ T5979] vhci_hcd vhci_hcd.4: stop threads
[  111.600567][ T5979] vhci_hcd vhci_hcd.4: release socket
[  111.907317][ T6579] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  111.976198][ T5979] vhci_hcd vhci_hcd.4: disconnect device
[  112.023265][   T30] audit: type=1400 audit(1766534133.012:331): avc:  denied  { connect } for  pid=6702 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  112.043922][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'.
[  112.072042][   T30] audit: type=1400 audit(1766534133.052:332): avc:  denied  { write } for  pid=6702 comm="syz.1.147" path="socket:[11669]" dev="sockfs" ino=11669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  112.177737][   T30] audit: type=1400 audit(1766534133.172:333): avc:  denied  { setopt } for  pid=6708 comm="syz.4.148" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.383651][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'.
[  112.457453][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  112.607287][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  112.614184][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short
[  112.629688][ T5862] usb 5-1: config 1 has an invalid interface number: 124 but max is 0
[  112.650969][ T5862] usb 5-1: config 1 has no interface number 0
[  112.668648][ T5862] usb 5-1: config 1 interface 124 has no altsetting 0
[  112.691203][ T5862] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f4.6a
[  112.707301][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.730594][ T5862] usb 5-1: Product: syz
[  112.746729][ T5862] usb 5-1: Manufacturer: syz
[  112.765589][ T5862] usb 5-1: SerialNumber: syz
[  113.068410][ T5862] peak_usb 5-1:1.124 can0: sending cmd f=0x6 n=0x1 failure: -22
[  113.076189][ T5862] peak_usb 5-1:1.124: unable to read PCAN-USB serial number (err -22)
[  113.344013][ T5862] peak_usb 5-1:1.124: probe with driver peak_usb failed with error -22
[  113.344272][ T6722] vivid-000: =================  START STATUS  =================
[  113.378743][ T5862] usb 5-1: USB disconnect, device number 7
[  113.414544][ T6722] vivid-000: Radio HW Seek Mode: Bounded
[  113.427384][ T6722] vivid-000: Radio Programmable HW Seek: false
[  113.434712][ T6722] vivid-000: RDS Rx I/O Mode: Block I/O
[  113.445651][ T6722] vivid-000: Generate RBDS Instead of RDS: false
[  113.452142][ T6722] vivid-000: RDS Reception: true
[  113.458174][ T6722] vivid-000: RDS Program Type: 0 inactive
[  113.463938][ T6722] vivid-000: RDS PS Name:  inactive
[  113.469337][ T6722] vivid-000: RDS Radio Text:  inactive
[  113.474842][ T6722] vivid-000: RDS Traffic Announcement: false inactive
[  113.487073][ T6722] vivid-000: RDS Traffic Program: false inactive
[  113.526141][ T6722] vivid-000: RDS Music: false inactive
[  113.562084][ T6722] vivid-000: ==================  END STATUS  ==================
[  113.758175][ T6737] xt_TCPMSS: Only works on TCP SYN packets
[  113.855710][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  113.855722][   T30] audit: type=1400 audit(1766534134.842:340): avc:  denied  { open } for  pid=6738 comm="syz.2.156" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  113.928969][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  114.088684][ T5831] usb 5-1: Using ep0 maxpacket: 16
[  114.102992][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.142426][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.164942][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0
[  114.180758][ T5831] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  114.194177][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.209586][ T5831] usb 5-1: config 0 descriptor??
[  114.426813][ T6758] sctp: [Deprecated]: syz.0.161 (pid 6758) Use of int in max_burst socket option deprecated.
[  114.426813][ T6758] Use struct sctp_assoc_value instead
[  114.443282][   T30] audit: type=1400 audit(1766534135.412:341): avc:  denied  { create } for  pid=6757 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.488949][   T30] audit: type=1400 audit(1766534135.412:342): avc:  denied  { setopt } for  pid=6757 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.555884][   T30] audit: type=1400 audit(1766534135.412:343): avc:  denied  { setopt } for  pid=6757 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  114.559343][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'.
[  114.576637][   T30] audit: type=1400 audit(1766534135.432:344): avc:  denied  { getopt } for  pid=6757 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.666490][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.675868][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.689521][ T5831] hid (null): global environment stack underflow
[  114.696000][   T30] audit: type=1400 audit(1766534135.642:345): avc:  denied  { read write } for  pid=6763 comm="syz.3.163" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.722173][ T5831] hid (null): invalid report_count 16974337
[  114.737808][ T5831] hid (null): report_id 766643193 is invalid
[  114.750442][ T5831] hid (null): unknown global tag 0xc
[  114.752326][   T30] audit: type=1400 audit(1766534135.642:346): avc:  denied  { open } for  pid=6763 comm="syz.3.163" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.766028][ T5831] hid (null): unknown global tag 0xc
[  114.814365][ T5831] hid (null): unknown global tag 0xd
[  114.844688][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  114.846681][   T30] audit: type=1400 audit(1766534135.682:347): avc:  denied  { map } for  pid=6763 comm="syz.3.163" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.857947][ T5862] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.909202][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  114.909265][   T30] audit: type=1400 audit(1766534135.772:348): avc:  denied  { ioctl } for  pid=6763 comm="syz.3.163" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.916193][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  114.916228][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.013324][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.025451][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.044534][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.197415][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.204927][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.212034][ T5831] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  115.219718][ T5831] cougar 0003:060B:500A.0002: collection stack underflow
[  115.226757][ T5831] cougar 0003:060B:500A.0002: item 0 0 0 12 parsing failed
[  115.234649][ T5831] cougar 0003:060B:500A.0002: parse failed
[  115.251042][ T5831] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22
[  115.281745][ T5862] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  115.308455][ T5831] usb 5-1: USB disconnect, device number 8
[  115.314399][ T5862] usb 1-1: config 0 has no interface number 0
[  115.337822][ T5862] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.367329][ T5862] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.381996][ T5862] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  115.407553][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.426577][ T5862] usb 1-1: config 0 descriptor??
[  115.617381][   T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  115.767469][   T48] usb 3-1: Using ep0 maxpacket: 16
[  115.790400][   T48] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  115.802786][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.822485][   T48] usb 3-1: config 0 descriptor??
[  115.840566][   T48] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  115.854280][ T5862] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1
[  115.892289][ T5862] hid_prodikeys: hid-prodikeys: failed to find output report
[  115.892289][ T5862] 
[  116.047112][   T48] usb 3-1: Detected FT232B
[  116.052198][ T5862] usb 1-1: USB disconnect, device number 9
[  116.258094][   T48] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  116.274767][   T48] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  116.319166][   T48] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  116.371992][   T48] usb 3-1: USB disconnect, device number 12
[  116.413647][   T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  116.459746][   T48] ftdi_sio 3-1:0.0: device disconnected
[  116.562105][   T30] audit: type=1400 audit(1766534137.552:349): avc:  denied  { map } for  pid=6784 comm="syz.4.170" path="socket:[12480]" dev="sockfs" ino=12480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  116.849351][ T6800] overlayfs: failed to resolve './file1': -2
[  116.863157][ T6800] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[  116.879606][ T6800] bond1: entered promiscuous mode
[  116.884832][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.897345][ T5831] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  116.915799][ T6800] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.923534][ T6800] bond1: (slave bond2): making interface the new active one
[  116.930960][ T6800] bond2: entered promiscuous mode
[  116.937365][ T6800] bond1: (slave bond2): Enslaving as an active interface with an up link
[  116.958338][ T6804] xt_TCPMSS: Only works on TCP SYN packets
[  117.040348][ T5862] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  117.117526][ T6579] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  117.280536][ T5831] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  117.309965][ T5862] usb 4-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[  117.322881][ T5831] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.336050][ T5862] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.497587][ T5831] usb 1-1: config 2 interface 0 has no altsetting 0
[  117.506997][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0
[  117.528037][ T5831] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  117.537121][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  117.556831][ T5862] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  117.572921][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  117.612478][ T5831] usb 1-1: SerialNumber: syz
[  117.621049][ T5862] usb 4-1: Product: syz
[  117.660294][ T5862] usb 4-1: Manufacturer: syz
[  117.664985][ T5862] usb 4-1: SerialNumber: syz
[  117.701610][ T5862] usb 4-1: config 0 descriptor??
[  117.842123][ T5831] ims_pcu 1-1:2.0: Missing CDC union descriptor
[  117.858338][ T5831] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22
[  117.900563][ T5831] usb 1-1: USB disconnect, device number 10
[  117.982955][ T5862] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  118.046267][ T5862] usb 4-1: USB disconnect, device number 11
[  118.072345][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.248450][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[  118.513914][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[  118.784632][ T6839] could not allocate digest TFM handle rmd256
[  119.361193][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  119.361207][   T30] audit: type=1400 audit(1766534140.352:356): avc:  denied  { map } for  pid=6850 comm="syz.4.186" path="socket:[12624]" dev="sockfs" ino=12624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  119.550229][   T30] audit: type=1400 audit(1766534140.392:357): avc:  denied  { read accept } for  pid=6850 comm="syz.4.186" path="socket:[12624]" dev="sockfs" ino=12624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  120.049909][ T6853] ip6t_srh: unknown srh invflags 7F00
[  120.746345][   T30] audit: type=1400 audit(1766534141.732:358): avc:  denied  { ioctl } for  pid=6873 comm="syz.0.193" path="socket:[12678]" dev="sockfs" ino=12678 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  121.474891][ T6891] netlink: 'syz.0.197': attribute type 15 has an invalid length.
[  121.548679][ T6891] netlink: 71 bytes leftover after parsing attributes in process `syz.0.197'.
[  121.805149][   T30] audit: type=1400 audit(1766534142.672:359): avc:  denied  { append } for  pid=6895 comm="syz.1.199" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  122.500922][ T6913] can0: slcan on ttyS3.
[  122.509764][ T6138] hid_parser_main: 114 callbacks suppressed
[  122.509788][ T6138] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  122.586196][ T6138] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  124.178250][ T6899] can0 (unregistered): slcan off ttyS3.
[  124.217949][   T30] audit: type=1400 audit(1766534145.202:360): avc:  denied  { sqpoll } for  pid=6914 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  124.391031][   T30] audit: type=1400 audit(1766534145.382:361): avc:  denied  { getopt } for  pid=6914 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  124.608876][   T30] audit: type=1400 audit(1766534145.602:362): avc:  denied  { watch } for  pid=6924 comm="syz.0.205" path="/41/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  124.692803][   T30] audit: type=1400 audit(1766534145.622:363): avc:  denied  { watch_sb watch_reads } for  pid=6924 comm="syz.0.205" path="/41/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  124.831599][   T30] audit: type=1400 audit(1766534145.822:364): avc:  denied  { watch_reads } for  pid=6924 comm="syz.0.205" path="/41" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  124.970432][ T6934] overlayfs: failed to resolve './file1': -2
[  125.052533][   T30] audit: type=1400 audit(1766534146.042:365): avc:  denied  { mount } for  pid=6933 comm="syz.4.206" name="/" dev="ramfs" ino=12818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  125.177550][ T6579] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  125.358846][ T6579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  125.457579][ T6579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.502111][ T6579] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  125.521118][ T6579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.601444][ T6579] usb 4-1: config 0 descriptor??
[  126.921380][   T30] audit: type=1400 audit(1766534147.912:366): avc:  denied  { setopt } for  pid=6970 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  127.056634][   T30] audit: type=1400 audit(1766534148.042:367): avc:  denied  { listen } for  pid=6971 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  127.325836][ T6981] tipc: Started in network mode
[  127.330912][ T6981] tipc: Node identity ac14140f, cluster identity 4711
[  127.341725][ T6981] tipc: New replicast peer: 255.255.255.255
[  127.348956][ T6981] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.372024][ T6981] Bluetooth: MGMT ver 1.23
[  128.358932][    T9] tipc: Node number set to 2886997007
[  128.720633][   T30] audit: type=1400 audit(1766534148.362:368): avc:  denied  { write } for  pid=6970 comm="syz.2.214" path="socket:[12171]" dev="sockfs" ino=12171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  129.212590][ T6579] usbhid 4-1:0.0: can't add hid device: -71
[  129.233319][ T6579] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  129.346364][ T5812] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  129.367465][ T6579] usb 4-1: USB disconnect, device number 12
[  129.582324][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.582355][ T5812] Tainted: [L]=SOFTLOCKUP
[  129.582361][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  129.582371][ T5812] Call Trace:
[  129.582377][ T5812]  <TASK>
[  129.582384][ T5812]  dump_stack_lvl+0x16c/0x1f0
[  129.582411][ T5812]  dump_header+0x101/0x960
[  129.582440][ T5812]  oom_kill_process+0x176/0x910
[  129.582470][ T5812]  out_of_memory+0x350/0x1700
[  129.582497][ T5812]  ? __lock_acquire+0x436/0x2890
[  129.582520][ T5812]  ? __pfx_out_of_memory+0x10/0x10
[  129.582553][ T5812]  mem_cgroup_out_of_memory+0x118/0x130
[  129.582573][ T5812]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  129.582597][ T5812]  ? do_raw_spin_unlock+0x172/0x230
[  129.582627][ T5812]  try_charge_memcg+0x695/0xd30
[  129.582656][ T5812]  ? __pfx_try_charge_memcg+0x10/0x10
[  129.582685][ T5812]  ? find_held_lock+0x2b/0x80
[  129.582716][ T5812]  charge_memcg+0x8a/0x230
[  129.582740][ T5812]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  129.582769][ T5812]  __read_swap_cache_async+0x397/0x500
[  129.582793][ T5812]  ? __pfx___read_swap_cache_async+0x10/0x10
[  129.582815][ T5812]  ? lock_acquire+0x179/0x330
[  129.582835][ T5812]  ? find_held_lock+0x2b/0x80
[  129.582865][ T5812]  swap_cluster_readahead+0x432/0x770
[  129.582891][ T5812]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  129.582912][ T5812]  ? __lock_acquire+0x436/0x2890
[  129.582945][ T5812]  ? get_vma_policy+0x242/0x3c0
[  129.582984][ T5812]  swapin_readahead+0x160/0x1220
[  129.583012][ T5812]  ? __pfx_swapin_readahead+0x10/0x10
[  129.583030][ T5812]  ? find_held_lock+0x2b/0x80
[  129.583052][ T5812]  ? swap_cache_get_folio+0x267/0x8e0
[  129.583067][ T5812]  ? swap_cache_get_folio+0x267/0x8e0
[  129.583081][ T5812]  ? swap_cache_get_folio+0x267/0x8e0
[  129.583099][ T5812]  ? swap_cache_get_folio+0x267/0x8e0
[  129.583114][ T5812]  ? swap_cache_get_folio+0x293/0x8e0
[  129.583131][ T5812]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  129.583147][ T5812]  ? __pfx_get_swap_device+0x10/0x10
[  129.583167][ T5812]  ? rcu_read_unlock+0x2d/0xb0
[  129.583186][ T5812]  ? do_swap_page+0x962/0x64a0
[  129.583209][ T5812]  do_swap_page+0x962/0x64a0
[  129.583237][ T5812]  ? __lock_acquire+0x436/0x2890
[  129.583263][ T5812]  ? __pfx_do_swap_page+0x10/0x10
[  129.583293][ T5812]  ? __pfx_default_wake_function+0x10/0x10
[  129.583321][ T5812]  ? do_fault+0x9fb/0x1ad0
[  129.583345][ T5812]  ? rcu_is_watching+0x12/0xc0
[  129.583361][ T5812]  ? ___pte_offset_map+0x175/0x380
[  129.583386][ T5812]  __handle_mm_fault+0x19cb/0x2bb0
[  129.583416][ T5812]  ? reacquire_held_locks+0xcd/0x1f0
[  129.583437][ T5812]  ? __pfx___handle_mm_fault+0x10/0x10
[  129.583464][ T5812]  ? lock_vma_under_rcu+0x176/0x580
[  129.583496][ T5812]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  129.583521][ T5812]  handle_mm_fault+0x3fe/0xad0
[  129.583551][ T5812]  do_user_addr_fault+0x60c/0x1370
[  129.583577][ T5812]  ? rcu_is_watching+0x12/0xc0
[  129.583596][ T5812]  exc_page_fault+0x64/0xc0
[  129.583620][ T5812]  asm_exc_page_fault+0x26/0x30
[  129.583637][ T5812] RIP: 0033:0x7f4a42265fd7
[  129.583653][ T5812] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24
[  129.583670][ T5812] RSP: 002b:00007ffd5df06170 EFLAGS: 00010206
[  129.583686][ T5812] RAX: 0000001b2fa24000 RBX: 00000000000000a2 RCX: 000000000001f018
[  129.583697][ T5812] RDX: 0000000001277a6e RSI: 00007f4a43301010 RDI: 000000000000000e
[  129.583708][ T5812] RBP: 00007ffd5df061ac R08: 0000000000000000 R09: 00007f4a43301000
[  129.583718][ T5812] R10: 0000000000000001 R11: 0000000000005cc2 R12: 0000000000001388
[  129.583729][ T5812] R13: 00000000000927c0 R14: 000000000001e78b R15: 00007ffd5df06200
[  129.583755][ T5812]  </TASK>
[  129.583804][ T5812] memory: usage 307204kB, limit 307200kB, failcnt 2371
[  130.117622][ T5812] memory+swap: usage 296252kB, limit 9007199254740988kB, failcnt 0
[  130.125554][ T5812] kmem: usage 295824kB, limit 9007199254740988kB, failcnt 0
[  130.501394][   T30] audit: type=1400 audit(1766534151.192:369): avc:  denied  { bind } for  pid=6990 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.527409][ T5812] Memory cgroup stats for /syz0:
[  130.527845][ T5812] cache 0
[  130.547304][   T30] audit: type=1400 audit(1766534151.192:370): avc:  denied  { write } for  pid=6990 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.602754][ T5812] rss 0
[  130.606592][ T5812] rss_huge 0
[  130.664863][ T5812] shmem 0
[  130.687313][ T5812] mapped_file 0
[  130.690953][ T5812] dirty 0
[  130.693893][ T5812] writeback 0
[  130.722605][   T30] audit: type=1400 audit(1766534151.442:371): avc:  denied  { checkpoint_restore } for  pid=6998 comm="syz.2.219" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  130.767260][ T5812] workingset_refault_anon 4
[  130.771828][ T5812] workingset_refault_file 4
[  130.776334][ T5812] swap 233472
[  130.862831][ T5812] swapcached 8192
[  130.866599][ T5812] pgpgin 61198
[  131.437336][ T5812] pgpgout 61196
[  131.456841][ T5812] pgfault 49751
[  131.476810][   T30] audit: type=1400 audit(1766534151.542:372): avc:  denied  { setopt } for  pid=6998 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  131.536145][ T5812] pgmajfault 5
[  131.546247][ T5812] inactive_anon 0
[  131.556479][ T5812] active_anon 8192
[  131.577270][ T5812] inactive_file 0
[  131.577473][   T30] audit: type=1400 audit(1766534151.542:373): avc:  denied  { read write } for  pid=6998 comm="syz.2.219" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.583061][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.224'.
[  131.630545][ T5812] active_file 0
[  131.634049][ T5812] unevictable 0
[  131.644739][ T5812] hierarchical_memory_limit 314572800
[  131.667339][ T5812] hierarchical_memsw_limit 9223372036854771712
[  131.687310][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  131.706151][ T5812] total_cache 0
[  131.714152][ T5812] total_rss 0
[  131.715864][   T30] audit: type=1400 audit(1766534151.542:374): avc:  denied  { open } for  pid=6998 comm="syz.2.219" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.727378][ T5812] total_rss_huge 0
[  131.848292][ T5812] total_shmem 0
[  131.851794][ T5812] total_mapped_file 0
[  131.855765][ T5812] total_dirty 0
[  131.891182][   T30] audit: type=1400 audit(1766534151.542:375): avc:  denied  { ioctl } for  pid=6998 comm="syz.2.219" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.915929][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  131.998860][ T5812] total_writeback 0
[  132.007384][ T6138] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  132.010628][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.053776][ T5862] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  132.055507][ T5812] total_workingset_refault_anon 4
[  132.096939][   T30] audit: type=1400 audit(1766534151.762:376): avc:  denied  { read } for  pid=7007 comm="syz.1.221" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  132.131756][ T5812] total_workingset_refault_file 4
[  132.131854][ T5862] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  132.146407][ T5812] total_swap 233472
[  132.151430][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.160644][ T5862] usb 4-1: Product: syz
[  132.164934][   T30] audit: type=1400 audit(1766534151.762:377): avc:  denied  { open } for  pid=7007 comm="syz.1.221" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  132.191024][ T5862] usb 4-1: Manufacturer: syz
[  132.199707][ T5862] usb 4-1: SerialNumber: syz
[  132.205022][   T30] audit: type=1400 audit(1766534151.762:378): avc:  denied  { ioctl } for  pid=7007 comm="syz.1.221" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  132.227354][ T6138] usb 3-1: Using ep0 maxpacket: 16
[  132.234459][ T5812] total_swapcached 8192
[  132.245616][ T5862] usb 4-1: config 0 descriptor??
[  132.257306][ T5812] total_pgpgin 61198
[  132.264478][ T6138] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  132.293153][ T5812] total_pgpgout 61196
[  132.305377][ T6138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.315671][ T5812] total_pgfault 49751
[  132.326477][ T5812] total_pgmajfault 5
[  132.335736][ T5812] total_inactive_anon 0
[  132.340838][ T6138] usb 3-1: config 0 has no interface number 0
[  132.351349][ T5812] total_active_anon 8192
[  132.363283][ T5812] total_inactive_file 0
[  132.369314][ T6138] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  132.383460][ T5812] total_active_file 0
[  132.389024][ T6138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.397421][ T5812] total_unevictable 0
[  132.407476][ T5812] anon_cost 0
[  132.412619][ T6138] usb 3-1: Product: syz
[  132.413819][ T5812] file_cost 0
[  132.416803][ T6138] usb 3-1: Manufacturer: syz
[  132.423455][ T7030] syzkaller1: entered promiscuous mode
[  132.441772][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.448170][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  132.460530][ T6138] usb 3-1: SerialNumber: syz
[  132.467659][ T5812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.205,pid=6924,uid=0
[  132.484608][ T7030] syzkaller1: entered allmulticast mode
[  132.586126][ T6138] usb 3-1: config 0 descriptor??
[  132.609680][ T5812] Memory cgroup out of memory: Killed process 6924 (syz.0.205) total-vm:106532kB, anon-rss:1148kB, file-rss:27176kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  134.491332][ T5931] usb 4-1: USB disconnect, device number 13
[  134.814530][ T6138] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  134.823669][ T6138] uvcvideo 3-1:0.105: No valid video chain found.
[  134.837478][ T6138] usb 3-1: USB disconnect, device number 13
[  134.870130][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  135.067831][ T5862] usb 1-1: Using ep0 maxpacket: 16
[  135.088547][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  135.109923][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  135.151898][ T5862] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  135.207436][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.215506][ T5862] usb 1-1: Product: syz
[  135.219948][ T5862] usb 1-1: Manufacturer: syz
[  135.224543][ T5862] usb 1-1: SerialNumber: syz
[  135.229710][    T9] IPVS: starting estimator thread 0...
[  135.257148][ T5862] usb 1-1: config 0 descriptor??
[  135.337432][ T7060] IPVS: using max 49 ests per chain, 117600 per kthread
[  135.360940][ T5862] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  135.381234][ T5862] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  135.692171][ T7072] xt_TCPMSS: Only works on TCP SYN packets
[  135.779205][ T7073] xt_TCPMSS: Only works on TCP SYN packets
[  135.936629][ T5862] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  135.943677][ T5862] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  136.175580][ T5862] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  136.189596][ T5862] em28xx 1-1:0.0: No AC97 audio processor
[  136.216770][ T5862] usb 1-1: USB disconnect, device number 11
[  136.239334][ T5862] em28xx 1-1:0.0: Disconnecting em28xx
[  136.292349][ T5862] em28xx 1-1:0.0: Freeing device
[  136.875150][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  136.875168][   T30] audit: type=1400 audit(1766534157.862:388): avc:  denied  { write } for  pid=7087 comm="syz.3.239" name="config" dev="proc" ino=4026533375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  137.132822][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[  137.147881][ T7092] chnl_net:caif_netlink_parms(): no params data found
[  137.261562][   T30] audit: type=1400 audit(1766534158.252:389): avc:  denied  { write } for  pid=7094 comm="syz.1.241" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  137.307640][   T30] audit: type=1400 audit(1766534158.252:390): avc:  denied  { read write } for  pid=7094 comm="syz.1.241" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  137.332738][   T30] audit: type=1400 audit(1766534158.252:391): avc:  denied  { open } for  pid=7094 comm="syz.1.241" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  137.467428][   T30] audit: type=1400 audit(1766534158.442:392): avc:  denied  { setopt } for  pid=7094 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  137.492922][   T30] audit: type=1400 audit(1766534158.442:393): avc:  denied  { connect } for  pid=7094 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  138.599689][   T30] audit: type=1400 audit(1766534158.792:394): avc:  denied  { bind } for  pid=7106 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  138.694349][   T30] audit: type=1400 audit(1766534158.792:395): avc:  denied  { name_bind } for  pid=7106 comm="syz.3.245" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  138.777319][   T30] audit: type=1400 audit(1766534158.792:396): avc:  denied  { node_bind } for  pid=7106 comm="syz.3.245" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  138.860485][   T30] audit: type=1400 audit(1766534158.792:397): avc:  denied  { name_connect } for  pid=7106 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  138.897507][   T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  139.045057][ T7123] batman_adv: batadv0: Adding interface: vlan2
[  139.051360][ T7123] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.069783][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.099380][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.109754][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.120353][   T48] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  139.134550][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.150136][   T48] usb 1-1: config 0 descriptor??
[  139.157443][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.173429][ T7123] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  139.221289][ T7128] Bluetooth: MGMT ver 1.23
[  139.583513][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.596533][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.450271][   T48] usbhid 1-1:0.0: can't add hid device: -71
[  140.456340][   T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  140.493483][   T48] usb 1-1: USB disconnect, device number 12
[  141.172436][ T7163] xt_TCPMSS: Only works on TCP SYN packets
[  142.260805][   T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  142.457397][   T48] usb 5-1: Using ep0 maxpacket: 16
[  142.471797][   T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.510436][   T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.570947][   T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.607285][   T48] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.627311][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.657433][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  142.657452][   T30] audit: type=1400 audit(1766534163.642:399): avc:  denied  { map } for  pid=7193 comm="syz.0.265" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  142.687407][   T48] usb 5-1: config 0 descriptor??
[  142.706444][   T30] audit: type=1400 audit(1766534163.642:400): avc:  denied  { execute } for  pid=7193 comm="syz.0.265" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  142.967334][ T5931] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  142.983721][ T7203] macvtap1: entered promiscuous mode
[  142.990885][ T7203] macvtap1: entered allmulticast mode
[  143.002107][ T7203] dummy0: entered promiscuous mode
[  143.007680][ T7203] dummy0: entered allmulticast mode
[  143.017983][ T7203] team0: Device macvtap1 failed to register rx_handler
[  143.033802][ T7203] dummy0: left allmulticast mode
[  143.039582][ T7203] dummy0: left promiscuous mode
[  143.129253][ T5931] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  143.140712][   T30] audit: type=1400 audit(1766534164.132:401): avc:  denied  { ioctl } for  pid=7175 comm="syz.4.261" path="socket:[14469]" dev="sockfs" ino=14469 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  143.168778][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.180135][ T5862] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  143.181932][ T5931] usb 3-1: config 0 has no interface number 0
[  143.227148][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.240300][ T5931] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.260937][ T5931] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  143.271638][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.279959][ T5931] usb 3-1: Product: syz
[  143.284437][ T5931] usb 3-1: Manufacturer: syz
[  143.289490][ T5931] usb 3-1: SerialNumber: syz
[  143.355861][   T48] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  143.410722][   T48] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  143.455348][ T5931] usb 3-1: config 0 descriptor??
[  143.474950][   T48] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  143.590005][ T5931] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  143.627305][ T5862] usb 1-1: Using ep0 maxpacket: 32
[  143.644024][ T5862] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  143.652459][ T5862] usb 1-1: config 0 has no interface number 0
[  143.658813][ T5862] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  143.670461][ T5862] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  143.684269][ T5862] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  143.693596][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.701732][ T5862] usb 1-1: Product: syz
[  143.706115][ T5862] usb 1-1: Manufacturer: syz
[  143.717017][ T5862] usb 1-1: SerialNumber: syz
[  143.729390][   T30] audit: type=1400 audit(1766534164.722:402): avc:  denied  { bind } for  pid=7195 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  143.779056][   T30] audit: type=1400 audit(1766534164.762:403): avc:  denied  { ioctl } for  pid=7195 comm="syz.2.266" path="socket:[13979]" dev="sockfs" ino=13979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  143.808878][ T5862] usb 1-1: config 0 descriptor??
[  143.818023][ T7200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  143.825574][ T7200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  143.836675][   T48] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  143.861774][   T48] microsoft 0003:045E:07DA.0005: no inputs found
[  143.863793][ T5862] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 12:b5:a3:de:ac:80
[  143.869891][   T48] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[  143.874486][   T48] usb 5-1: USB disconnect, device number 9
[  144.229158][ T5862] usb 1-1: USB disconnect, device number 13
[  144.245067][ T5862] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  144.264428][   T24] usb 3-1: USB disconnect, device number 14
[  144.293632][   T24] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  144.333941][ T7213] fido_id[7213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  144.509772][   T30] audit: type=1400 audit(1766534165.502:404): avc:  denied  { getopt } for  pid=7218 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  145.948424][ T7224] overlayfs: statfs failed on './file0'
[  146.218491][   T30] audit: type=1326 audit(1766534167.212:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e9158f749 code=0x0
[  146.317529][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  146.330093][   T30] audit: type=1400 audit(1766534167.302:406): avc:  denied  { write } for  pid=7238 comm="syz.2.278" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  147.309521][ T7248] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  147.316054][ T7248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  147.323704][ T7248] vhci_hcd vhci_hcd.0: Device attached
[  147.497274][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  147.507473][ T6579] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  147.516337][ T5862] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  147.534399][ T5862] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  147.567292][ T6579] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  147.577968][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  147.674062][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.685362][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  147.695592][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  147.707258][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  147.717060][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  147.739952][ T5862] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  147.755879][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.289708][ T5862] usb 5-1: config 0 descriptor??
[  148.316484][   T30] audit: type=1400 audit(1766534169.302:407): avc:  denied  { name_bind } for  pid=7272 comm="syz.1.286" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  148.455205][   T30] audit: type=1400 audit(1766534169.432:408): avc:  denied  { write } for  pid=7274 comm="syz.1.287" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  148.692140][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.149426][ T7258] vhci_hcd: connection reset by peer
[  149.169580][   T73] vhci_hcd vhci_hcd.3: stop threads
[  149.174912][   T73] vhci_hcd vhci_hcd.3: release socket
[  149.180698][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.204216][   T73] vhci_hcd vhci_hcd.3: disconnect device
[  149.210210][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  149.219925][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.235382][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.248369][ T5862] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.304689][ T5862] usb 5-1: USB disconnect, device number 10
[  149.378821][ T5831] usb 2-1: config 0 has no interfaces?
[  149.400102][ T5831] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  149.428112][ T5862] usblp0: removed
[  149.434849][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.454141][ T5831] usb 2-1: config 0 descriptor??
[  149.492848][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.511347][   T30] audit: type=1400 audit(1766534170.482:409): avc:  denied  { read write } for  pid=7286 comm="syz.2.289" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  149.538394][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.862022][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  149.987438][ T5831] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  150.327498][ T5831] usb 4-1: Using ep0 maxpacket: 32
[  150.387365][ T5831] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  150.446506][ T7300] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  150.459083][ T5831] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  150.481122][ T5831] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.495585][ T5831] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  150.540766][ T5831] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  150.557333][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.565839][ T5831] usb 4-1: Product: syz
[  150.585447][ T5831] usb 4-1: Manufacturer: syz
[  150.593059][ T5831] usb 4-1: SerialNumber: syz
[  150.619335][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  150.632094][ T5831] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input10
[  150.652594][   T30] audit: type=1400 audit(1766534171.642:410): avc:  denied  { read } for  pid=5173 comm="acpid" name="mouse1" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.662452][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'.
[  150.686070][   T30] audit: type=1400 audit(1766534171.642:411): avc:  denied  { open } for  pid=5173 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.716552][   T30] audit: type=1400 audit(1766534171.642:412): avc:  denied  { ioctl } for  pid=5173 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2952 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.898631][ T5831] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  151.079927][ T5831]  (id 0x00)
[  151.137958][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  151.217906][ T7311] capability: warning: `syz.4.295' uses 32-bit capabilities (legacy support in use)
[  151.231941][   T30] audit: type=1400 audit(1766534172.222:413): avc:  denied  { bind } for  pid=7310 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  151.237763][ T5831] rc_core: IR keymap rc-imon-pad not found
[  151.280056][ T5831] Registered IR keymap rc-empty
[  151.285475][ T5831] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  151.309243][ T5831] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  151.327309][   T24] usb 3-1: Using ep0 maxpacket: 16
[  151.343280][ T5831] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  151.356011][ T5831] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input11
[  151.396588][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.401922][ T5831] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized
[  151.466785][ T5930] usb 2-1: USB disconnect, device number 6
[  151.515321][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.545738][   T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  151.568908][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.596398][   T24] usb 3-1: config 0 descriptor??
[  151.612019][ T5831] usb 4-1: USB disconnect, device number 14
[  151.618711][ T5862] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  151.620249][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'.
[  151.690458][   T30] audit: type=1400 audit(1766534172.682:414): avc:  denied  { ioctl } for  pid=7317 comm="syz.3.297" path="socket:[14192]" dev="sockfs" ino=14192 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  151.809876][ T5862] usb 5-1: config 0 has no interfaces?
[  151.838066][ T5862] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  151.878245][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.895175][ T5862] usb 5-1: Product: syz
[  151.921173][ T5862] usb 5-1: Manufacturer: syz
[  151.926825][ T5862] usb 5-1: SerialNumber: syz
[  151.943796][ T5862] usb 5-1: config 0 descriptor??
[  152.070724][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.084580][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.092429][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.100074][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.318825][   T30] audit: type=1400 audit(1766534173.272:415): avc:  denied  { setopt } for  pid=7310 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  152.542651][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.549668][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.556555][   T24] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0
[  152.568100][   T24] ntrig 0003:1B96:0008.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0
[  152.616153][   T24] usb 3-1: USB disconnect, device number 15
[  152.678770][ T6579] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  152.688250][   T30] audit: type=1400 audit(1766534173.292:416): avc:  denied  { read } for  pid=7310 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  152.745664][ T7336] fido_id[7336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  153.157311][ T5862] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  153.317277][ T5862] usb 4-1: device descriptor read/64, error -71
[  154.131374][ T5862] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  154.234771][ T6579] usb 5-1: USB disconnect, device number 12
[  154.315610][ T5862] usb 4-1: device descriptor read/64, error -71
[  154.420322][   T30] audit: type=1400 audit(1766534175.412:417): avc:  denied  { getopt } for  pid=7354 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  154.462151][ T5862] usb usb4-port1: attempt power cycle
[  154.592739][   T30] audit: type=1400 audit(1766534175.582:418): avc:  denied  { write } for  pid=7357 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.897338][ T5862] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  155.101132][ T5862] usb 4-1: device descriptor read/8, error -71
[  155.373441][ T7366] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.307'.
[  155.460996][   T30] audit: type=1400 audit(1766534176.452:419): avc:  denied  { create } for  pid=7369 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  155.483934][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'.
[  155.513053][   T30] audit: type=1400 audit(1766534176.472:420): avc:  denied  { write } for  pid=7369 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  155.547300][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  155.554910][ T5862] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  155.577918][ T5862] usb 4-1: device descriptor read/8, error -71
[  155.697879][ T5862] usb usb4-port1: unable to enumerate USB device
[  155.717925][    T9] usb 5-1: Using ep0 maxpacket: 16
[  155.730123][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.742082][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.905028][   T30] audit: type=1400 audit(1766534176.842:421): avc:  denied  { name_bind } for  pid=7371 comm="syz.2.311" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  156.281667][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  156.288578][    T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  156.297841][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.308206][    T9] usb 5-1: config 0 descriptor??
[  156.547500][   T30] audit: type=1400 audit(1766534177.522:422): avc:  denied  { create } for  pid=7377 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  156.599618][   T30] audit: type=1400 audit(1766534177.522:423): avc:  denied  { ioctl } for  pid=7377 comm="syz.3.313" path="socket:[14300]" dev="sockfs" ino=14300 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  156.632323][ T7383] vivid-000: =================  START STATUS  =================
[  156.641761][   T30] audit: type=1400 audit(1766534177.522:424): avc:  denied  { setopt } for  pid=7377 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  156.658895][ T7383] vivid-000: FM Deviation: 75000
[  156.672693][ T7383] vivid-000: ==================  END STATUS  ==================
[  156.728293][   T30] audit: type=1400 audit(1766534177.652:425): avc:  denied  { create } for  pid=7381 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  156.736042][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.772909][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'.
[  156.778405][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.800413][   T30] audit: type=1400 audit(1766534177.652:426): avc:  denied  { getopt } for  pid=7381 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  157.168223][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.177650][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.219868][ T7394] netlink: 360 bytes leftover after parsing attributes in process `syz.0.317'.
[  157.255725][    T9] hid (null): global environment stack underflow
[  157.284170][    T9] hid (null): invalid report_count 16974337
[  157.310957][    T9] hid (null): report_id 766643193 is invalid
[  157.339288][    T9] hid (null): unknown global tag 0xc
[  157.351658][    T9] hid (null): unknown global tag 0xc
[  157.381412][    T9] hid (null): unknown global tag 0xd
[  157.433205][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.482236][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.502654][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.520604][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.520625][ T7399] batadv_slave_1: entered promiscuous mode
[  157.527702][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.542144][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.549540][ T7398] batadv_slave_1: left promiscuous mode
[  157.556066][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.563242][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.570430][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.577920][ T7398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.601027][    T9] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  157.608961][    T9] cougar 0003:060B:500A.0007: collection stack underflow
[  158.551619][    T9] cougar 0003:060B:500A.0007: item 0 0 0 12 parsing failed
[  158.638355][    T9] cougar 0003:060B:500A.0007: parse failed
[  158.645711][    T9] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22
[  158.660085][    T9] usb 5-1: USB disconnect, device number 13
[  158.684082][ T7413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.321'.
[  158.715329][ T7413] batadv0: entered promiscuous mode
[  158.737419][ T7413] batadv0: entered allmulticast mode
[  159.029236][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  159.317946][    T9] usb 2-1: Using ep0 maxpacket: 32
[  159.601187][    T9] usb 2-1: config 0 has an invalid interface number: 203 but max is 0
[  159.715063][    T9] usb 2-1: config 0 has no interface number 0
[  159.727630][    T9] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.2e
[  159.737630][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.747445][    T9] usb 2-1: Product: syz
[  159.756390][    T9] usb 2-1: Manufacturer: syz
[  159.761243][    T9] usb 2-1: SerialNumber: syz
[  159.780807][    T9] usb 2-1: config 0 descriptor??
[  159.896629][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'.
[  160.168338][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  160.168354][   T30] audit: type=1400 audit(1766534181.162:431): avc:  denied  { write } for  pid=7428 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  160.206719][   T30] audit: type=1400 audit(1766534181.182:432): avc:  denied  { read } for  pid=7428 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  160.215165][   T24] usb 2-1: USB disconnect, device number 7
[  160.240376][ T6138] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  160.354447][ T7424] bond0: (slave bond_slave_1): Releasing backup interface
[  160.417277][ T6138] usb 4-1: Using ep0 maxpacket: 16
[  160.423226][ T6138] usb 4-1: too many configurations: 72, using maximum allowed: 8
[  160.433362][ T6138] usb 4-1: config index 0 descriptor too short (expected 65535, got 18)
[  160.447436][ T5930] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  160.461254][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.470865][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.482063][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.493741][ T6138] usb 4-1: config index 1 descriptor too short (expected 65535, got 18)
[  160.502379][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.513261][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.527334][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.539519][ T6138] usb 4-1: config index 2 descriptor too short (expected 65535, got 18)
[  160.548020][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.556950][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.568794][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.588957][ T6138] usb 4-1: config index 3 descriptor too short (expected 65535, got 18)
[  160.598623][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.607599][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.611103][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  160.619594][ T5930] usb 5-1: Using ep0 maxpacket: 8
[  160.639711][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.651802][ T6138] usb 4-1: config index 4 descriptor too short (expected 65535, got 18)
[  160.662389][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.672128][ T5930] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  160.680517][ T5930] usb 5-1: config 0 has no interface number 0
[  160.686723][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.697450][ T5930] usb 5-1: config 0 interface 251 has no altsetting 0
[  160.704251][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=b1.d7
[  160.713721][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.723831][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.738359][ T6138] usb 4-1: config index 5 descriptor too short (expected 65535, got 18)
[  160.754503][ T5930] usb 5-1: config 0 descriptor??
[  160.763623][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.777539][    T9] usb 3-1: Using ep0 maxpacket: 8
[  160.781569][ T5930] gspca_main: kinect-2.14.0 probing 045e:02ae
[  160.792194][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.797627][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.814169][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  160.823643][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.835634][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.844596][ T6138] usb 4-1: config index 6 descriptor too short (expected 65535, got 18)
[  160.853178][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  160.873167][    T9] usb 3-1: config 0 descriptor??
[  160.881872][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  160.887320][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  160.917357][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  160.936998][   T30] audit: type=1400 audit(1766534181.912:433): avc:  denied  { ioctl } for  pid=7441 comm="syz.1.331" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  160.962210][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  160.971075][ T6138] usb 4-1: config index 7 descriptor too short (expected 65535, got 18)
[  160.986682][ T5930] usb 5-1: USB disconnect, device number 14
[  161.033141][ T6138] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  161.045532][ T6138] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  161.060563][ T6138] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  161.085034][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.097845][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.128577][ T5862] usb 1-1: Using ep0 maxpacket: 16
[  161.135760][ T5862] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.153495][ T5862] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.163886][ T5862] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.165724][ T7425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.324'.
[  161.170984][ T5862] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  161.190275][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.207960][ T5862] usb 1-1: config 0 descriptor??
[  161.293180][   T30] audit: type=1400 audit(1766534182.282:434): avc:  denied  { read } for  pid=7422 comm="syz.3.324" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.327419][   T30] audit: type=1400 audit(1766534182.282:435): avc:  denied  { open } for  pid=7422 comm="syz.3.324" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.394334][   T30] audit: type=1400 audit(1766534182.282:436): avc:  denied  { ioctl } for  pid=7422 comm="syz.3.324" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.594998][ T7425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.615803][ T7425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.625899][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.757541][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.802787][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.823686][ T7425] bond0 (unregistering): (slave bond1): Releasing backup interface
[  161.845068][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.869719][ T7425] bond0 (unregistering): Released all slaves
[  161.897679][ T5862] hid (null): invalid report_count 16974337
[  161.910721][ T5862] hid (null): report_id 766643193 is invalid
[  161.921556][ T5862] hid (null): unknown global tag 0xc
[  161.933084][ T5862] hid (null): unknown global tag 0xc
[  161.948894][ T5862] hid (null): unknown global tag 0xd
[  161.982910][ T6138] usb 4-1: string descriptor 0 read error: -71
[  161.984864][ T5862] cougar 0003:060B:500A.0008: unexpected long global item
[  162.007905][ T6138] usb 4-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1
[  162.014219][ T5862] cougar 0003:060B:500A.0008: parse failed
[  162.017453][ T6138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70
[  162.032427][ T5862] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22
[  162.033924][ T6138] usb 4-1: rejected 8 configurations due to insufficient available bus power
[  162.051342][ T6138] usb 4-1: no configuration chosen from 8 choices
[  162.061754][ T6138] usb 4-1: USB disconnect, device number 19
[  162.111356][ T5993] usb 1-1: USB disconnect, device number 14
[  162.542017][   T30] audit: type=1400 audit(1766534183.452:437): avc:  denied  { write } for  pid=7454 comm="syz.1.334" name="tcp6" dev="proc" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  162.588679][    T9] gspca_vc032x: reg_w err -71
[  162.597356][    T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  162.609315][    T9] usb 3-1: USB disconnect, device number 16
[  163.143346][   T30] audit: type=1400 audit(1766534184.132:438): avc:  denied  { create } for  pid=7464 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  163.226026][ T7466] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[  163.473764][ T7468] xt_TCPMSS: Only works on TCP SYN packets
[  163.480472][   T30] audit: type=1400 audit(1766534184.182:439): avc:  denied  { write } for  pid=7464 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  163.642724][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'.
[  163.653278][   T30] audit: type=1400 audit(1766534184.642:440): avc:  denied  { map } for  pid=7469 comm="syz.3.338" path="socket:[14951]" dev="sockfs" ino=14951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.734710][ T7470] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.773650][ T7470] bond2: (slave bond3): making interface the new active one
[  163.801972][ T7470] bond2: (slave bond3): Enslaving as an active interface with an up link
[  163.846508][ T7466] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  163.872420][ T7476] 8021q: adding VLAN 0 to HW filter on device bond2
[  164.737562][ T6579] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  164.988050][ T6579] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.999516][ T6579] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  165.181147][ T6579] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  165.210926][ T6579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.247676][ T7491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  165.277095][ T6579] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  165.517091][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.536634][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.551225][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  165.551240][   T30] audit: type=1400 audit(1766534186.542:443): avc:  denied  { rename } for  pid=7512 comm="syz.1.349" name="file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  165.598132][ T6579] usb 3-1: USB disconnect, device number 17
[  166.572203][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  166.727331][    T9] usb 4-1: Using ep0 maxpacket: 16
[  166.764455][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.779817][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.972052][ T7530] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.353'.
[  166.983510][ T7529] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.353'.
[  167.274365][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  167.444171][ T7534] comedi comedi0: dac02: I/O port conflict (0x3,8)
[  167.462143][    T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  167.531916][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.700503][    T9] usb 4-1: config 0 descriptor??
[  168.035623][ T7573] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 1, id = 0
[  168.129274][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.259929][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.278444][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.287004][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.338023][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  168.352813][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  168.500944][    T9] usb 4-1: USB disconnect, device number 20
[  169.398911][ T7592] usb usb9: usbfs: process 7592 (syz.1.360) did not claim interface 2 before use
[  169.464696][   T30] audit: type=1326 audit(1766534190.452:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679fd8f749 code=0x7ffc0000
[  169.559644][   T30] audit: type=1326 audit(1766534190.452:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679fd865e7 code=0x7ffc0000
[  169.618089][ T7602] audit: audit_backlog=65 > audit_backlog_limit=64
[  169.643090][   T30] audit: type=1326 audit(1766534190.452:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f679fd2b829 code=0x7ffc0000
[  169.645073][ T7602] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  169.678440][ T7601] loop9: detected capacity change from 0 to 7
[  169.688970][ T7601] Dev loop9: unable to read RDB block 7
[  169.694664][ T7601]  loop9: unable to read partition table
[  169.698520][   T30] audit: type=1326 audit(1766534190.452:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679fd865e7 code=0x7ffc0000
[  169.700624][ T7601] loop9: partition table beyond EOD, truncated
[  169.729696][ T7601] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  169.740771][ T7602] audit: backlog limit exceeded
[  169.786034][   T30] audit: type=1326 audit(1766534190.452:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f679fd2b829 code=0x7ffc0000
[  169.976275][   T30] audit: type=1326 audit(1766534190.452:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679fd865e7 code=0x7ffc0000
[  171.816319][   T30] kauditd_printk_skb: 76 callbacks suppressed
[  171.816336][   T30] audit: type=1400 audit(1766534192.802:526): avc:  denied  { execute } for  pid=7610 comm="syz.2.367" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  172.051167][   T30] audit: type=1400 audit(1766534193.032:527): avc:  denied  { read write } for  pid=7617 comm="syz.3.368" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  172.459568][ T7634] FAULT_INJECTION: forcing a failure.
[  172.459568][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  172.472738][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.3.371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.472766][ T7634] Tainted: [L]=SOFTLOCKUP
[  172.472772][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  172.472782][ T7634] Call Trace:
[  172.472789][ T7634]  <TASK>
[  172.472796][ T7634]  dump_stack_lvl+0x16c/0x1f0
[  172.472829][ T7634]  should_fail_ex+0x512/0x640
[  172.472860][ T7634]  _copy_from_user+0x2e/0xd0
[  172.472888][ T7634]  copy_msghdr_from_user+0x98/0x160
[  172.472908][ T7634]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  172.472932][ T7634]  ? __lock_acquire+0x436/0x2890
[  172.472959][ T7634]  ___sys_recvmsg+0xdb/0x1a0
[  172.472977][ T7634]  ? __pfx____sys_recvmsg+0x10/0x10
[  172.473017][ T7634]  __sys_recvmsg+0x16a/0x220
[  172.473037][ T7634]  ? __pfx___sys_recvmsg+0x10/0x10
[  172.473073][ T7634]  do_syscall_64+0xcd/0xf80
[  172.473099][ T7634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.473117][ T7634] RIP: 0033:0x7f5e9158f749
[  172.473131][ T7634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.473149][ T7634] RSP: 002b:00007f5e923cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  172.473167][ T7634] RAX: ffffffffffffffda RBX: 00007f5e917e6090 RCX: 00007f5e9158f749
[  172.473178][ T7634] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  172.473188][ T7634] RBP: 00007f5e923cf090 R08: 0000000000000000 R09: 0000000000000000
[  172.473198][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.473209][ T7634] R13: 00007f5e917e6128 R14: 00007f5e917e6090 R15: 00007fff3f6db5e8
[  172.473234][ T7634]  </TASK>
[  172.690361][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  172.698040][ T5831] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  172.847533][    T9] usb 1-1: Using ep0 maxpacket: 16
[  172.862058][ T5831] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  172.872695][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  172.887250][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.898809][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.908008][ T5831] usb 3-1: Product: syz
[  172.912421][    T9] usb 1-1: Product: syz
[  172.916772][ T5831] usb 3-1: Manufacturer: syz
[  172.925836][    T9] usb 1-1: Manufacturer: syz
[  172.933177][ T5831] usb 3-1: SerialNumber: syz
[  172.937871][    T9] usb 1-1: SerialNumber: syz
[  172.944047][ T5831] usb 3-1: config 0 descriptor??
[  172.951293][    T9] usb 1-1: config 0 descriptor??
[  172.960289][    T9] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  173.216538][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.241089][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.260203][ T5831] usb 3-1: ignoring: probably an ADSL modem
[  173.277585][    T9] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  173.366057][ T7644] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  173.383072][ T7644] overlayfs: missing 'lowerdir'
[  173.438530][   T30] audit: type=1400 audit(1766534194.352:528): avc:  denied  { execute } for  pid=7636 comm="syz.1.374" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  173.684573][ T5831] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  173.714224][ T5831] usb 3-1: USB disconnect, device number 18
[  174.250226][ T6579] usb 1-1: USB disconnect, device number 15
[  174.297763][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.306276][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.517350][ T5831] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  174.637553][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  174.657630][ T5831] usb 4-1: device descriptor read/64, error -71
[  174.697351][ T6579] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  174.829306][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.847673][    T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8
[  174.859643][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  174.872240][ T6579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.883177][ T6579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.898356][ T6579] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  174.911950][ T5831] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  174.920691][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.930659][ T6579] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  174.940689][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.948802][    T9] usb 3-1: Product: syz
[  174.953405][ T6579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.961702][    T9] usb 3-1: Manufacturer: syz
[  174.966324][    T9] usb 3-1: SerialNumber: syz
[  174.979560][ T6579] usb 1-1: config 0 descriptor??
[  175.015984][ T7663] x_tables: ip_tables: osf match: only valid for protocol 6
[  175.027253][   T30] audit: type=1400 audit(1766534196.012:529): avc:  denied  { connect } for  pid=7658 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  175.067939][ T5831] usb 4-1: device descriptor read/64, error -71
[  175.179529][ T5831] usb usb4-port1: attempt power cycle
[  175.257301][ T5993] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  175.391029][ T6579] hid_parser_main: 373 callbacks suppressed
[  175.391044][ T6579] hid-udraw 0003:20D6:CB17.0009: unknown main item tag 0x0
[  175.404626][ T6579] hid-udraw 0003:20D6:CB17.0009: unbalanced collection at end of report description
[  175.413160][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.416751][ T6579] hid-udraw 0003:20D6:CB17.0009: parse failed
[  175.422835][ T5993] usb 2-1: Using ep0 maxpacket: 32
[  175.429090][ T6579] hid-udraw 0003:20D6:CB17.0009: probe with driver hid-udraw failed with error -22
[  175.436756][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.452189][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.464676][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.474889][ T7666] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[  175.482941][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'.
[  175.492055][ T5993] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  175.501694][ T7666] ipvlan1: entered promiscuous mode
[  175.506987][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.516365][ T7666] ipvlan1: entered allmulticast mode
[  175.523065][ T7666] veth0_vlan: entered allmulticast mode
[  175.527302][ T5831] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  175.529256][ T5993] usb 2-1: config 0 descriptor??
[  175.545112][ T7666] bridge0: port 3(ipvlan1) entered blocking state
[  175.551934][ T7666] bridge0: port 3(ipvlan1) entered disabled state
[  175.560056][ T5993] hub 2-1:0.0: USB hub found
[  175.567348][ T7666] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  175.568366][ T5831] usb 4-1: device descriptor read/8, error -71
[  175.744166][    T9] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  175.753502][    T9] cdc_ncm 3-1:1.0: bind() failure
[  175.760791][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.776342][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  175.784497][ T5993] hub 2-1:0.0: 1 port detected
[  175.784645][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.797726][    T9] cdc_ncm 3-1:1.1: bind() failure
[  175.828780][ T5831] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  175.860163][ T5831] usb 4-1: device descriptor read/8, error -71
[  175.882497][ T7670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'.
[  175.892194][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'.
[  175.907817][ T7670] rdma_op ffff888056e1e1f0 conn xmit_rdma 0000000000000000
[  175.999465][ T5831] usb usb4-port1: unable to enumerate USB device
[  176.193945][ T5993] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  176.207707][ T5993] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  176.218868][ T5993] usbhid 2-1:0.0: can't add hid device: -71
[  176.226886][ T5993] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  176.347911][ T5993] usb 2-1: USB disconnect, device number 8
[  176.971748][ T7684] FAULT_INJECTION: forcing a failure.
[  176.971748][ T7684] name failslab, interval 1, probability 0, space 0, times 1
[  176.984655][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.4.386 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.984674][ T7684] Tainted: [L]=SOFTLOCKUP
[  176.984678][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.984685][ T7684] Call Trace:
[  176.984689][ T7684]  <TASK>
[  176.984693][ T7684]  dump_stack_lvl+0x16c/0x1f0
[  176.984713][ T7684]  should_fail_ex+0x512/0x640
[  176.984730][ T7684]  ? __kmalloc_noprof+0xca/0x910
[  176.984755][ T7684]  should_failslab+0xc2/0x120
[  176.984770][ T7684]  __kmalloc_noprof+0xeb/0x910
[  176.984787][ T7684]  ? sock_kmalloc+0x111/0x170
[  176.984803][ T7684]  ? sock_kmalloc+0x111/0x170
[  176.984816][ T7684]  sock_kmalloc+0x111/0x170
[  176.984830][ T7684]  af_alg_alloc_areq+0xbc/0x240
[  176.984843][ T7684]  skcipher_recvmsg+0x314/0x1030
[  176.984862][ T7684]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  176.984879][ T7684]  sock_recvmsg+0x1f9/0x250
[  176.984894][ T7684]  ____sys_recvmsg+0x218/0x6b0
[  176.984910][ T7684]  ? __pfx_____sys_recvmsg+0x10/0x10
[  176.984930][ T7684]  ? __lock_acquire+0x436/0x2890
[  176.984946][ T7684]  ___sys_recvmsg+0x114/0x1a0
[  176.984957][ T7684]  ? __pfx____sys_recvmsg+0x10/0x10
[  176.984980][ T7684]  __sys_recvmsg+0x16a/0x220
[  176.984992][ T7684]  ? __pfx___sys_recvmsg+0x10/0x10
[  176.985012][ T7684]  do_syscall_64+0xcd/0xf80
[  176.985027][ T7684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.985039][ T7684] RIP: 0033:0x7fc9a1f8f749
[  176.985049][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.985060][ T7684] RSP: 002b:00007fc9a2e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  176.985072][ T7684] RAX: ffffffffffffffda RBX: 00007fc9a21e6090 RCX: 00007fc9a1f8f749
[  176.985079][ T7684] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  176.985085][ T7684] RBP: 00007fc9a2e16090 R08: 0000000000000000 R09: 0000000000000000
[  176.985091][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.985097][ T7684] R13: 00007fc9a21e6128 R14: 00007fc9a21e6090 R15: 00007ffe1ff7bee8
[  176.985111][ T7684]  </TASK>
[  177.433648][   T30] audit: type=1400 audit(1766534198.422:530): avc:  denied  { block_suspend } for  pid=7685 comm="syz.3.387" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  177.516254][ T5831] usb 3-1: USB disconnect, device number 19
[  177.594272][   T90] usb 1-1: USB disconnect, device number 16
[  178.460246][   T90] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  178.486118][ T7708] netlink: 'syz.1.393': attribute type 19 has an invalid length.
[  178.494110][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[  178.575822][ T5979] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.637638][   T90] usb 5-1: Using ep0 maxpacket: 16
[  178.647636][ T5979] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.658639][ T5979] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.699789][ T5979] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.710530][   T90] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  178.734484][   T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.735037][   T30] audit: type=1400 audit(1766534199.722:531): avc:  denied  { read } for  pid=7713 comm="syz.0.394" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  178.757317][   T90] usb 5-1: Product: syz
[  178.770061][   T90] usb 5-1: Manufacturer: syz
[  178.774667][   T90] usb 5-1: SerialNumber: syz
[  178.789892][ T7716] =======================================================
[  178.789892][ T7716] WARNING: The mand mount option has been deprecated and
[  178.789892][ T7716]          and is ignored by this kernel. Remove the mand
[  178.789892][ T7716]          option from the mount to silence this warning.
[  178.789892][ T7716] =======================================================
[  178.825014][   T30] audit: type=1400 audit(1766534199.752:532): avc:  denied  { open } for  pid=7713 comm="syz.0.394" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  178.993559][   T90] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  179.397463][   T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  179.424007][   T90] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  179.460228][   T90] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  179.480644][   T90] usb 5-1: media controller created
[  179.510025][   T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.590517][   T48] usb 2-1: Using ep0 maxpacket: 8
[  179.602023][   T48] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.626437][   T48] usb 2-1: config 11 has an invalid interface number: 244 but max is 0
[  179.660549][   T48] usb 2-1: config 11 has an invalid descriptor of length 129, skipping remainder of the config
[  179.675907][   T90] zl10353_read_register: readreg error (reg=127, ret==-71)
[  179.698536][   T48] usb 2-1: config 11 has no interface number 0
[  179.723139][   T48] usb 2-1: config 11 interface 244 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  179.753524][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'.
[  179.762501][   T48] usb 2-1: config 11 interface 244 has no altsetting 0
[  179.765190][   T30] audit: type=1400 audit(1766534200.742:533): avc:  denied  { read } for  pid=7732 comm="syz.4.400" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  179.805422][   T48] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[  179.824005][   T90] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  179.833056][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.833133][   T48] usb 2-1: Product: syz
[  179.833148][   T48] usb 2-1: Manufacturer: syz
[  179.833162][   T48] usb 2-1: SerialNumber: syz
[  179.881311][   T30] audit: type=1400 audit(1766534200.742:534): avc:  denied  { open } for  pid=7732 comm="syz.4.400" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  179.931756][   T90] usb 5-1: USB disconnect, device number 15
[  180.967337][   T48] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71
[  180.986308][   T48] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71)
[  181.069829][   T48] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71
[  181.209707][   T30] audit: type=1400 audit(1766534202.202:535): avc:  denied  { read } for  pid=7758 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  181.221105][   T48] usb 2-1: USB disconnect, device number 9
[  181.258105][   T90] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  181.266047][ T7759] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  181.279428][ T7760] 8021q: VLANs not supported on vcan0
[  181.296159][ T7759] 8021q: VLANs not supported on vcan0
[  181.296985][   T30] audit: type=1400 audit(1766534202.272:536): avc:  denied  { listen } for  pid=7758 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  181.303460][ T7759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  181.858076][   T90] usb 5-1: Using ep0 maxpacket: 16
[  181.865568][   T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.888510][   T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.903621][   T90] usb 5-1: config 0 interface 0 has no altsetting 0
[  181.914421][   T90] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  181.925157][   T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.101494][   T90] usb 5-1: config 0 descriptor??
[  182.699767][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.738873][   T30] audit: type=1400 audit(1766534203.732:537): avc:  denied  { ioctl } for  pid=7773 comm="syz.0.410" path="socket:[16134]" dev="sockfs" ino=16134 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  182.781631][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.789883][ T7779] lo: Caught tx_queue_len zero misconfig
[  182.817046][ T7779] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  182.898232][   T30] audit: type=1400 audit(1766534203.822:538): avc:  denied  { ioctl } for  pid=7776 comm="syz.3.412" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  182.935388][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.947323][   T30] audit: type=1400 audit(1766534203.822:539): avc:  denied  { read } for  pid=7776 comm="syz.3.412" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  182.971752][   T30] audit: type=1400 audit(1766534203.822:540): avc:  denied  { open } for  pid=7776 comm="syz.3.412" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  182.971847][ T7796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.008415][   T30] audit: type=1400 audit(1766534203.822:541): avc:  denied  { ioctl } for  pid=7776 comm="syz.3.412" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  183.024830][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.125360][ T7800] netlink: 'syz.0.414': attribute type 10 has an invalid length.
[  183.379310][   T90] usbhid 5-1:0.0: can't add hid device: -71
[  183.385336][   T90] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  183.404471][ T7800] team0: left promiscuous mode
[  183.428180][   T90] usb 5-1: USB disconnect, device number 16
[  183.442184][ T7800] 8021q: adding VLAN 0 to HW filter on device team0
[  183.505236][ T7800] team0: entered promiscuous mode
[  183.525484][ T7800] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.596890][ T7801] pim6reg: entered allmulticast mode
[  183.603142][ T7802] pim6reg: left allmulticast mode
[  183.745635][   T30] audit: type=1400 audit(1766534204.682:542): avc:  denied  { bind } for  pid=7807 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.067322][   T30] audit: type=1400 audit(1766534204.682:543): avc:  denied  { setopt } for  pid=7807 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.877483][ T5930] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  184.952418][ T7822] netlink: 'syz.4.421': attribute type 12 has an invalid length.
[  184.960262][ T7822] netlink: 'syz.4.421': attribute type 29 has an invalid length.
[  184.968022][ T7822] netlink: 148 bytes leftover after parsing attributes in process `syz.4.421'.
[  184.976933][ T7822] netlink: 'syz.4.421': attribute type 2 has an invalid length.
[  184.984587][ T7822] netlink: 'syz.4.421': attribute type 3 has an invalid length.
[  184.992213][ T7822] netlink: 15 bytes leftover after parsing attributes in process `syz.4.421'.
[  185.128692][ T5930] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  185.167264][ T5930] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  185.195544][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.204258][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.257884][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0
[  185.305056][ T5930] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  185.360503][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.419331][ T5930] usb 3-1: Product: syz
[  185.456344][ T5930] usb 3-1: Manufacturer: syz
[  185.521646][ T5930] usb 3-1: SerialNumber: syz
[  185.694127][ T7820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  185.709437][ T5827] Bluetooth: hci4: command 0x0406 tx timeout
[  185.723886][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  185.723940][ T5820] Bluetooth: hci0: command 0x0406 tx timeout
[  185.736354][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  185.742410][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  185.844705][ T7820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  186.326763][   T30] audit: type=1400 audit(1766534207.312:544): avc:  denied  { setopt } for  pid=7834 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  186.745118][   T30] audit: type=1326 audit(1766534207.392:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4238f749 code=0x7ffc0000
[  186.887507][   T30] audit: type=1326 audit(1766534207.392:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4238f749 code=0x7ffc0000
[  186.961775][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'.
[  187.103474][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'.
[  187.127798][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  187.367311][ T5831] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  187.413053][ T5930] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  187.517297][ T5831] usb 1-1: device descriptor read/64, error -71
[  187.661560][   T24] usb 5-1: Using ep0 maxpacket: 16
[  187.668375][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.670845][   T90] usb 3-1: USB disconnect, device number 20
[  187.693373][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.707038][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  187.714067][   T24] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  187.723388][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.777305][ T5831] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  187.828297][   T24] usb 5-1: config 0 descriptor??
[  187.917476][ T5831] usb 1-1: device descriptor read/64, error -71
[  188.037691][ T5831] usb usb1-port1: attempt power cycle
[  188.288863][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.297769][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.316558][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.568141][ T5993] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  188.601148][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.686371][ T5831] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  188.734750][ T5831] usb 1-1: device descriptor read/8, error -71
[  188.752115][ T5993] usb 4-1: Using ep0 maxpacket: 32
[  188.765414][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  188.765431][   T30] audit: type=1400 audit(1766534209.752:559): avc:  denied  { append } for  pid=7871 comm="syz.2.435" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  188.797950][ T5993] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  188.809108][ T5993] usb 4-1: config 0 has no interface number 0
[  188.815561][ T5993] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.829540][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  188.836447][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  188.848360][   T24] usb 5-1: USB disconnect, device number 17
[  188.856647][ T5993] usb 4-1: config 0 interface 12 has no altsetting 0
[  188.877976][ T5993] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  188.887121][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.895198][ T5993] usb 4-1: Product: syz
[  188.960889][ T5993] usb 4-1: Manufacturer: syz
[  188.965520][ T5993] usb 4-1: SerialNumber: syz
[  189.080887][ T5993] usb 4-1: config 0 descriptor??
[  189.088957][ T5993] f81534 4-1:0.12: required endpoints missing
[  189.392099][ T7880] netlink: 'syz.2.438': attribute type 12 has an invalid length.
[  189.584991][   T30] audit: type=1400 audit(1766534210.392:560): avc:  denied  { create } for  pid=7875 comm="syz.0.437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  189.666008][   T30] audit: type=1400 audit(1766534210.652:561): avc:  denied  { ioctl } for  pid=7879 comm="syz.1.439" path="socket:[16603]" dev="sockfs" ino=16603 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  189.862373][   T30] audit: type=1400 audit(1766534210.702:562): avc:  denied  { setopt } for  pid=7885 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  190.237616][ T7879] delete_channel: no stack
[  191.165315][ T7909] bridge1: entered promiscuous mode
[  191.180263][ T7909] bridge1: entered allmulticast mode
[  191.722842][ T5930] usb 4-1: USB disconnect, device number 25
[  191.770461][   T90] libceph: connect (1)[c::]:6789 error -101
[  191.790781][   T90] libceph: mon0 (1)[c::]:6789 connect error
[  191.865617][ T7917] ceph: No mds server is up or the cluster is laggy
[  191.939690][ T7928] vivid-007: =================  START STATUS  =================
[  191.982203][ T7928] vivid-007: FM Deviation: 75000
[  192.005203][ T7928] vivid-007: ==================  END STATUS  ==================
[  192.077288][ T5930] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  192.177632][ T5881] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  192.197363][ T5993] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  192.251883][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short
[  192.264591][ T5930] usb 5-1: config 5 interface 0 has no altsetting 0
[  192.289858][   T30] audit: type=1400 audit(1766534213.252:563): avc:  denied  { append } for  pid=7931 comm="syz.3.450" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  192.561215][ T5993] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  192.575015][ T5930] usb 5-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=a4.60
[  192.595416][ T5993] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  192.635216][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.641769][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.662777][ T5993] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  192.664312][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.681478][ T5930] usb 5-1: Product: syz
[  192.691629][ T5930] usb 5-1: Manufacturer: syz
[  192.707862][ T5930] usb 5-1: SerialNumber: syz
[  192.726712][ T5993] usb 1-1: config 220 has no interface number 2
[  192.751746][ T5993] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  192.776069][ T5993] usb 1-1: config 220 interface 0 has no altsetting 0
[  192.789628][ T5993] usb 1-1: config 220 interface 76 has no altsetting 0
[  192.796640][ T5993] usb 1-1: config 220 interface 1 has no altsetting 0
[  192.809715][ T5993] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  192.819976][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.830547][ T5993] usb 1-1: Product: syz
[  192.835029][ T5993] usb 1-1: Manufacturer: syz
[  192.845037][ T5993] usb 1-1: SerialNumber: syz
[  192.961551][ T5930] usb 5-1: USB disconnect, device number 18
[  192.977298][ T5881] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  193.168862][ T5881] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[  193.178393][ T5881] usb 4-1: config 0 has no interface number 0
[  193.184712][ T5881] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  193.195203][ T5881] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  193.197295][ T5831] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  193.206946][ T5881] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  193.668714][ T5993] usb 1-1: selecting invalid altsetting 0
[  193.675260][ T5993] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  193.683233][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.691501][ T5993] uvcvideo 1-1:220.0: No valid video chain found.
[  193.699171][ T5831] usb 3-1: config 118 has an invalid interface number: 2 but max is 0
[  193.703956][ T5993] usb 1-1: selecting invalid altsetting 0
[  193.709198][ T5831] usb 3-1: config 118 has no interface number 0
[  193.714343][ T5881] usb 4-1: config 0 descriptor??
[  193.720972][ T5831] usb 3-1: config 118 interface 2 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64
[  193.725107][ T5993] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  193.739047][ T5831] usb 3-1: config 118 interface 2 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  193.752518][ T5993] usb 1-1: USB disconnect, device number 21
[  193.762719][ T5831] usb 3-1: config 118 interface 2 has no altsetting 0
[  193.763388][ T5881] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  193.771329][ T5831] usb 3-1: New USB device found, idVendor=0bb4, idProduct=4922, bcdDevice=d0.13
[  193.788193][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.796322][ T5831] usb 3-1: Product: syz
[  193.800945][ T5831] usb 3-1: Manufacturer: syz
[  193.805558][ T5831] usb 3-1: SerialNumber: syz
[  193.812304][ T7942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  193.819659][ T7942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  193.874959][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.942922][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  193.989981][ T5881] usb 4-1: USB disconnect, device number 27
[  194.011509][   T30] audit: type=1400 audit(1766534215.002:564): avc:  denied  { mount } for  pid=7947 comm="syz.1.455" name="/" dev="autofs" ino=16668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  194.179630][ T5831] usb 3-1: USB disconnect, device number 21
[  194.299916][ T7951] sp0: Synchronizing with TNC
[  194.309768][ T7951] sd 0:0:1:0: device reset
[  194.315921][   T30] audit: type=1400 audit(1766534215.302:565): avc:  denied  { connect } for  pid=7949 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  194.807871][ T7959] syzkaller0: entered promiscuous mode
[  194.813645][ T7959] syzkaller0: entered allmulticast mode
[  194.849027][   T30] audit: type=1400 audit(1766534215.842:566): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  194.925239][ T7960] qrtr: Invalid version 255
[  195.122339][ T7969] qnx6: unable to read the first superblock
[  195.353133][   T30] audit: type=1400 audit(1766534216.342:567): avc:  denied  { listen } for  pid=7974 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  195.418768][   T30] audit: type=1400 audit(1766534216.412:568): avc:  denied  { mounton } for  pid=7961 comm="syz.3.460" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  195.768115][ T7962] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[  197.357346][   T30] audit: type=1400 audit(1766534218.342:569): avc:  denied  { map } for  pid=8007 comm="syz.1.472" path="socket:[16769]" dev="sockfs" ino=16769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  197.498723][   T30] audit: type=1400 audit(1766534218.342:570): avc:  denied  { accept } for  pid=8007 comm="syz.1.472" path="socket:[16769]" dev="sockfs" ino=16769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  197.550109][ T5930] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  197.740782][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  197.777391][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  197.797348][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51005, setting to 64
[  197.817754][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  197.956177][ T5930] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  197.977534][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.986316][ T5930] usb 4-1: Product: syz
[  197.990723][ T5930] usb 4-1: Manufacturer: syz
[  198.005585][ T5930] usb 4-1: SerialNumber: syz
[  198.030946][ T5930] usb 4-1: config 0 descriptor??
[  198.040398][ T8008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  198.065543][ T5930] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  198.136294][   T52] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[  200.553523][ T5881] usb 4-1: USB disconnect, device number 28
[  201.248314][ T8075] comedi comedi0: Minor 3 specified more than once!
[  202.318643][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  202.343467][ T8079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.481'.
[  203.067413][ T5881] usb 4-1: device descriptor read/64, error -71
[  204.144791][ T5881] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  205.267869][ T8101] netdevsim netdevsim4: Direct firmware load for /
[  205.267869][ T8101]  failed with error -2
[  205.311135][   T30] audit: type=1400 audit(1766534226.302:571): avc:  denied  { firmware_load } for  pid=8098 comm="syz.4.493" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  205.331471][ T8101] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  205.331471][ T8101] 
[  205.377601][   T30] audit: type=1400 audit(1766534226.352:572): avc:  denied  { connect } for  pid=8097 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  206.036646][ T8113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  206.210280][   T30] audit: type=1400 audit(1766534227.192:573): avc:  denied  { mounton } for  pid=8116 comm="syz.1.497" path="/99/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  208.026562][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  322.207154][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  322.214208][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8120/2:b..l P4498/1:b..l P49/1:b..l
[  322.224674][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=20713, q=443 ncpus=2)
[  322.232471][    C0] task:kworker/u8:3    state:R  running task     stack:25288 pid:49    tgid:49    ppid:2      task_flags:0x4208060 flags:0x00080000
[  322.246950][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  322.253213][    C0] Call Trace:
[  322.256491][    C0]  <TASK>
[  322.259420][    C0]  ? __schedule+0x10b9/0x6150
[  322.264102][    C0]  __schedule+0x1139/0x6150
[  322.268622][    C0]  ? __pfx___schedule+0x10/0x10
[  322.273469][    C0]  ? mark_held_locks+0x49/0x80
[  322.278231][    C0]  preempt_schedule_irq+0x51/0x90
[  322.283265][    C0]  irqentry_exit+0x1d8/0x8c0
[  322.287858][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  322.293833][    C0] RIP: 0010:rcu_is_watching+0x0/0xc0
[  322.299108][    C0] Code: 3e 3d 8e e8 a2 6c 3e 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 53 65 ff 05 c3 9e 0f 12 e8 ce 0d d5 09 48 c7 c3 e8
[  322.318727][    C0] RSP: 0018:ffffc90000ba6d80 EFLAGS: 00000202
[  322.324798][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000026772c4f
[  322.332757][    C0] RDX: ffffffff816cb66d RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400
[  322.340717][    C0] RBP: ffffc90000ba6e40 R08: 00000000946a73ba R09: 00000000a946a73b
[  322.349116][    C0] R10: 0000000000000002 R11: ffff8880212bd4b0 R12: ffffffff81a960b0
[  322.357084][    C0] R13: ffffc90000ba6df8 R14: 0000000000000000 R15: ffff8880212bc980
[  322.365054][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  322.371213][    C0]  ? unwind_next_frame+0xbd/0x20b0
[  322.376330][    C0]  unwind_next_frame+0xa86/0x20b0
[  322.381355][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  322.386797][    C0]  ? arch_stack_walk+0x88/0x100
[  322.391691][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  322.397937][    C0]  arch_stack_walk+0x94/0x100
[  322.402617][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  322.407905][    C0]  stack_trace_save+0x8e/0xc0
[  322.412579][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  322.417949][    C0]  ? find_held_lock+0x2b/0x80
[  322.422647][    C0]  kasan_save_stack+0x33/0x60
[  322.427321][    C0]  ? kasan_save_stack+0x33/0x60
[  322.432192][    C0]  ? kasan_save_track+0x14/0x30
[  322.437038][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[  322.441794][    C0]  ? __kmalloc_noprof+0x33d/0x910
[  322.446827][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  322.453242][    C0]  ? cfg80211_inform_bss_data+0x22b/0x3be0
[  322.459049][    C0]  ? cfg80211_inform_bss_frame_data+0x26f/0x720
[  322.465292][    C0]  ? ieee80211_bss_info_update+0x310/0xab0
[  322.471103][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0
[  322.477436][    C0]  ? ieee80211_iface_work+0xe28/0x1350
[  322.482891][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  322.488214][    C0]  kasan_save_track+0x14/0x30
[  322.492888][    C0]  __kasan_kmalloc+0xaa/0xb0
[  322.497474][    C0]  __kmalloc_noprof+0x33d/0x910
[  322.502325][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  322.508754][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  322.515186][    C0]  cfg80211_inform_single_bss_data+0x542/0x1d30
[  322.521430][    C0]  ? unwind_next_frame+0x3f4/0x20b0
[  322.526643][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  322.533335][    C0]  ? stack_trace_save+0x8e/0xc0
[  322.538202][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  322.543569][    C0]  ? stack_depot_save_flags+0x29/0x9b0
[  322.549032][    C0]  ? cfg80211_inform_bss_data+0x22b/0x3be0
[  322.554836][    C0]  cfg80211_inform_bss_data+0x22b/0x3be0
[  322.560485][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[  322.565250][    C0]  ? __kmalloc_noprof+0x33d/0x910
[  322.570271][    C0]  ? ieee802_11_parse_elems_full+0x1db/0x3780
[  322.576332][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0
[  322.582581][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  322.587862][    C0]  ? kthread+0x3c5/0x780
[  322.592098][    C0]  ? ret_from_fork+0x983/0xb10
[  322.596857][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  322.601801][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  322.607871][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  322.613933][    C0]  ? _ieee802_11_parse_elems_full+0x695/0x45a0
[  322.620096][    C0]  ? __lock_acquire+0x436/0x2890
[  322.625034][    C0]  ? ieee802_11_parse_elems_full+0x143/0x3780
[  322.631096][    C0]  cfg80211_inform_bss_frame_data+0x26f/0x720
[  322.637173][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  322.642808][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  322.648986][    C0]  ? find_held_lock+0x2b/0x80
[  322.653664][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x18ed/0x2fc0
[  322.660013][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0
[  322.666191][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  322.672719][    C0]  ? kcov_remote_start+0x399/0x680
[  322.677838][    C0]  ieee80211_iface_work+0xe28/0x1350
[  322.683129][    C0]  ? rcu_is_watching+0x12/0xc0
[  322.687891][    C0]  cfg80211_wiphy_work+0x3fb/0x560
[  322.693006][    C0]  process_one_work+0x9ba/0x1b20
[  322.697945][    C0]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  322.703573][    C0]  ? __pfx_process_one_work+0x10/0x10
[  322.708947][    C0]  ? assign_work+0x1a0/0x250
[  322.713535][    C0]  worker_thread+0x6c8/0xf10
[  322.718129][    C0]  ? __pfx_worker_thread+0x10/0x10
[  322.723237][    C0]  kthread+0x3c5/0x780
[  322.727323][    C0]  ? __pfx_kthread+0x10/0x10
[  322.731909][    C0]  ? rcu_is_watching+0x12/0xc0
[  322.736670][    C0]  ? __pfx_kthread+0x10/0x10
[  322.741339][    C0]  ret_from_fork+0x983/0xb10
[  322.745923][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  322.751038][    C0]  ? __switch_to+0x7af/0x10d0
[  322.755730][    C0]  ? __pfx_kthread+0x10/0x10
[  322.760342][    C0]  ret_from_fork_asm+0x1a/0x30
[  322.765125][    C0]  </TASK>
[  322.768135][    C0] task:kworker/u8:16   state:R  running task     stack:23800 pid:4498  tgid:4498  ppid:2      task_flags:0x4208060 flags:0x00080000
[  322.781706][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  322.787959][    C0] Call Trace:
[  322.791233][    C0]  <TASK>
[  322.794160][    C0]  ? __schedule+0x10b9/0x6150
[  322.798832][    C0]  __schedule+0x1139/0x6150
[  322.803350][    C0]  ? __pfx___schedule+0x10/0x10
[  322.808198][    C0]  ? mark_held_locks+0x49/0x80
[  322.812979][    C0]  preempt_schedule_irq+0x51/0x90
[  322.818027][    C0]  irqentry_exit+0x1d8/0x8c0
[  322.822625][    C0]  ? rcu_is_watching+0x12/0xc0
[  322.827388][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  322.832843][    C0] RIP: 0010:unwind_next_frame+0x66a/0x20b0
[  322.838665][    C0] Code: 84 f6 40 0f 95 c6 40 84 f7 0f 85 fc 14 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 e5 14 00 00 4c 0f bf 31 <4d> 01 fe 0f b6 41 05 83 e0 07 3c 03 0f 84 bd 08 00 00 3c 04 0f 84
[  322.858278][    C0] RSP: 0018:ffffc9000ea76d88 EFLAGS: 00000246
[  322.864354][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff9122973e
[  322.872335][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  322.880316][    C0] RBP: ffffc9000ea76e40 R08: ffffffff91229742 R09: 00000000a946a73b
[  322.888279][    C0] R10: 0000000000000002 R11: 0000000000008490 R12: ffffc9000ea76e48
[  322.896244][    C0] R13: ffffc9000ea76df8 R14: 00000000000000c8 R15: ffffc9000ea77d38
[  322.904232][    C0]  ? unwind_next_frame+0x2ec/0x20b0
[  322.909438][    C0]  ? worker_thread+0x6c8/0xf10
[  322.914203][    C0]  ? __lock_acquire+0x436/0x2890
[  322.919147][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  322.925304][    C0]  arch_stack_walk+0x94/0x100
[  322.929982][    C0]  ? worker_thread+0x6c8/0xf10
[  322.934745][    C0]  stack_trace_save+0x8e/0xc0
[  322.939431][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  322.944819][    C0]  kasan_save_stack+0x33/0x60
[  322.949522][    C0]  ? kasan_save_stack+0x33/0x60
[  322.954400][    C0]  ? kasan_save_track+0x14/0x30
[  322.959334][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[  322.964093][    C0]  ? __kmalloc_noprof+0x33d/0x910
[  322.969118][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  322.975534][    C0]  ? cfg80211_inform_bss_data+0x22b/0x3be0
[  322.981346][    C0]  ? cfg80211_inform_bss_frame_data+0x26f/0x720
[  322.987584][    C0]  ? ieee80211_bss_info_update+0x310/0xab0
[  322.993394][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0
[  322.999720][    C0]  ? ieee80211_iface_work+0xe28/0x1350
[  323.005171][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  323.010459][    C0]  ? process_one_work+0x9ba/0x1b20
[  323.015573][    C0]  ? worker_thread+0x6c8/0xf10
[  323.020366][    C0]  kasan_save_track+0x14/0x30
[  323.025041][    C0]  __kasan_kmalloc+0xaa/0xb0
[  323.029643][    C0]  __kmalloc_noprof+0x33d/0x910
[  323.034495][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  323.040910][    C0]  ? cfg80211_inform_single_bss_data+0x542/0x1d30
[  323.047320][    C0]  cfg80211_inform_single_bss_data+0x542/0x1d30
[  323.053570][    C0]  ? unwind_next_frame+0x3f4/0x20b0
[  323.058772][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  323.065461][    C0]  ? stack_trace_save+0x8e/0xc0
[  323.070326][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  323.075706][    C0]  ? stack_depot_save_flags+0x29/0x9b0
[  323.081342][    C0]  ? cfg80211_inform_bss_data+0x22b/0x3be0
[  323.087148][    C0]  cfg80211_inform_bss_data+0x22b/0x3be0
[  323.092862][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[  323.097620][    C0]  ? __kmalloc_noprof+0x33d/0x910
[  323.102656][    C0]  ? ieee802_11_parse_elems_full+0x1db/0x3780
[  323.108735][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0
[  323.114980][    C0]  ? cfg80211_wiphy_work+0x3fb/0x560
[  323.120347][    C0]  ? kthread+0x3c5/0x780
[  323.124590][    C0]  ? ret_from_fork+0x983/0xb10
[  323.129346][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  323.134291][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  323.140366][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  323.146263][    C0]  ? _ieee802_11_parse_elems_full+0x695/0x45a0
[  323.152599][    C0]  ? __lock_acquire+0x436/0x2890
[  323.157539][    C0]  ? ieee802_11_parse_elems_full+0x143/0x3780
[  323.163609][    C0]  cfg80211_inform_bss_frame_data+0x26f/0x720
[  323.169770][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  323.175415][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  323.181576][    C0]  ? find_held_lock+0x2b/0x80
[  323.186255][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x18ed/0x2fc0
[  323.192590][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0
[  323.198782][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  323.205304][    C0]  ? kcov_remote_start+0x399/0x680
[  323.210428][    C0]  ieee80211_iface_work+0xe28/0x1350
[  323.215707][    C0]  ? rcu_is_watching+0x12/0xc0
[  323.220464][    C0]  cfg80211_wiphy_work+0x3fb/0x560
[  323.225581][    C0]  process_one_work+0x9ba/0x1b20
[  323.230523][    C0]  ? __pfx_process_one_work+0x10/0x10
[  323.235903][    C0]  ? assign_work+0x1a0/0x250
[  323.240493][    C0]  worker_thread+0x6c8/0xf10
[  323.245084][    C0]  ? __kthread_parkme+0x19e/0x250
[  323.250106][    C0]  ? __pfx_worker_thread+0x10/0x10
[  323.255219][    C0]  kthread+0x3c5/0x780
[  323.259283][    C0]  ? __pfx_kthread+0x10/0x10
[  323.263869][    C0]  ? rcu_is_watching+0x12/0xc0
[  323.268625][    C0]  ? __pfx_kthread+0x10/0x10
[  323.273221][    C0]  ret_from_fork+0x983/0xb10
[  323.277812][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  323.282919][    C0]  ? __switch_to+0x7af/0x10d0
[  323.287596][    C0]  ? __pfx_kthread+0x10/0x10
[  323.292183][    C0]  ret_from_fork_asm+0x1a/0x30
[  323.296962][    C0]  </TASK>
[  323.299978][    C0] task:syz.4.498       state:R  running task     stack:26488 pid:8120  tgid:8119  ppid:5819   task_flags:0x400040 flags:0x00080000
[  323.313465][    C0] Call Trace:
[  323.316736][    C0]  <TASK>
[  323.319660][    C0]  ? __schedule+0x10b9/0x6150
[  323.324336][    C0]  __schedule+0x1139/0x6150
[  323.328851][    C0]  ? __pfx___schedule+0x10/0x10
[  323.333699][    C0]  ? mark_held_locks+0x49/0x80
[  323.338464][    C0]  preempt_schedule_irq+0x51/0x90
[  323.343481][    C0]  irqentry_exit+0x1d8/0x8c0
[  323.348065][    C0]  ? rcu_is_watching+0x12/0xc0
[  323.352826][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  323.358277][    C0] RIP: 0010:lock_acquire+0x119/0x330
[  323.363555][    C0] Code: 48 8b 74 24 68 48 89 df e8 74 99 8e 00 8b 0d 62 e9 ee 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 27 fb 18 12 85 c0 0f 85 a2 00 00 00 <65> 48 8b 05 e7 b3 18 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00
[  323.383165][    C0] RSP: 0000:ffffc9000fd67438 EFLAGS: 00000246
[  323.389228][    C0] RAX: 0000000000000000 RBX: ffffffff8e3c96a0 RCX: 0000000000000001
[  323.397189][    C0] RDX: 0000000000000000 RSI: ffffffff82319e07 RDI: fffffbfff1c792d4
[  323.405152][    C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  323.413112][    C0] R10: 0000000000000002 R11: ffff88807b13aff0 R12: 0000000000000000
[  323.421073][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.429042][    C0]  ? get_mem_cgroup_from_mm+0x287/0x600
[  323.434588][    C0]  ? lock_acquire+0xfc/0x330
[  323.439179][    C0]  ? get_mem_cgroup_from_mm+0x88/0x600
[  323.444628][    C0]  get_mem_cgroup_from_mm+0x287/0x600
[  323.449991][    C0]  ? get_mem_cgroup_from_mm+0x88/0x600
[  323.455445][    C0]  __mem_cgroup_charge+0x1a/0x1e0
[  323.460472][    C0]  shmem_alloc_and_add_folio+0x50c/0xc20
[  323.466114][    C0]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  323.472268][    C0]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[  323.478167][    C0]  shmem_get_folio_gfp+0x67f/0x1610
[  323.483375][    C0]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  323.489006][    C0]  ? filemap_map_pages+0x12dd/0x1e00
[  323.494284][    C0]  shmem_fault+0x1fe/0xa00
[  323.498703][    C0]  ? __pfx_shmem_fault+0x10/0x10
[  323.503641][    C0]  ? mark_held_locks+0x49/0x80
[  323.508403][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  323.514203][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  323.519410][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  323.525209][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0
[  323.531798][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  323.537246][    C0]  __do_fault+0x10d/0x490
[  323.541576][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  323.547026][    C0]  do_fault+0xae4/0x1ad0
[  323.551264][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  323.556722][    C0]  __handle_mm_fault+0x1919/0x2bb0
[  323.561840][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  323.567297][    C0]  ? __pte_offset_map_lock+0x174/0x310
[  323.572757][    C0]  ? find_held_lock+0x2b/0x80
[  323.577442][    C0]  ? follow_page_pte+0x5cf/0x1390
[  323.582471][    C0]  handle_mm_fault+0x3fe/0xad0
[  323.587333][    C0]  __get_user_pages+0x54e/0x3590
[  323.592278][    C0]  ? __pfx___get_user_pages+0x10/0x10
[  323.597665][    C0]  populate_vma_page_range+0x267/0x3f0
[  323.603126][    C0]  ? __pfx_populate_vma_page_range+0x10/0x10
[  323.609103][    C0]  ? __pfx_find_vma_intersection+0x10/0x10
[  323.614904][    C0]  ? do_mmap+0x69c/0x1210
[  323.619240][    C0]  __mm_populate+0x1d8/0x380
[  323.623828][    C0]  ? __pfx___mm_populate+0x10/0x10
[  323.628937][    C0]  ? up_write+0x282/0x4e0
[  323.633265][    C0]  vm_mmap_pgoff+0x37f/0x470
[  323.637857][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  323.642961][    C0]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  323.649370][    C0]  ? count_memcg_events+0x122/0x290
[  323.654573][    C0]  ? find_held_lock+0x2b/0x80
[  323.659267][    C0]  ksys_mmap_pgoff+0x7d/0x5c0
[  323.663945][    C0]  __x64_sys_mmap+0x125/0x190
[  323.668627][    C0]  do_syscall_64+0xcd/0xf80
[  323.673218][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.679107][    C0] RIP: 0033:0x7fc9a1f8f749
[  323.683515][    C0] RSP: 002b:00007fc9a2e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  323.691925][    C0] RAX: ffffffffffffffda RBX: 00007fc9a21e5fa0 RCX: 00007fc9a1f8f749
[  323.699888][    C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  323.707853][    C0] RBP: 00007fc9a2013f91 R08: ffffffffffffffff R09: 0000000000000000
[  323.715828][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  323.723788][    C0] R13: 00007fc9a21e6038 R14: 00007fc9a21e5fa0 R15: 00007ffe1ff7bee8
[  323.731766][    C0]  </TASK>
[  326.520563][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  326.526885][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  328.029505][ T8124] sound midiC2D0: rawmidi drain error (avail = 7, buffer_size = 4096)