last executing test programs:

9.452372108s ago: executing program 3 (id=1785):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0xb, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f00000000c0)=""/44, 0x2c}], &(0x7f0000000240)=[0x3032, 0x7, 0x5, 0x8, 0x401, 0x9, 0xd, 0x2, 0x100], 0x2}, 0x20)
syz_genetlink_get_family_id$mptcp(0x0, r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c8daf7ece6f89bb1f5f0000000030000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, &(0x7f0000000380)={0x0, 0x100, "2ab95dff3a8477bfce9d6e638f977fe6ecb857f1c64d3356eb590146c5f6741d", 0xf7, 0x9, 0x7f6d, 0x3, 0x140000, 0x3, 0x9, 0xfffffffe, [0x80000000, 0x9, 0x6b3e, 0x7]})

9.27757932s ago: executing program 2 (id=1786):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)

8.895058846s ago: executing program 2 (id=1787):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], 0x0, &(0x7f0000000200), 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0xb, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f00000000c0)=""/44, 0x2c}], &(0x7f0000000240)=[0x3032, 0x7, 0x5, 0x8, 0x401, 0x9, 0xd, 0x2, 0x100], 0x2}, 0x20)
syz_genetlink_get_family_id$mptcp(0x0, r7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, &(0x7f0000000380)={0x0, 0x100, "2ab95dff3a8477bfce9d6e638f977fe6ecb857f1c64d3356eb590146c5f6741d", 0xf7, 0x9, 0x7f6d, 0x3, 0x140000, 0x3, 0x9, 0xfffffffe, [0x80000000, 0x9, 0x6b3e, 0x7]})

7.873285718s ago: executing program 1 (id=1788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x13}}}, 0x24}}, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2038801, &(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,5ser_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f757047961b257b835c7901f3719716b9697c99051106", @ANYRESDEC=r5])
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=<r7=>0x0)
r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
read$FUSE(r8, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
capget(&(0x7f0000000180)={0x20071026, r9}, &(0x7f0000000200)={0x80, 0xd63d, 0x9, 0x0, 0x8001, 0x8})
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b000905810300"], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0)
syz_usb_ep_write(r10, 0xc, 0x7c, &(0x7f00000002c0)="712f3504c43aea089c1b00bca697501875e1926fbc616dd43edb48a543681c891f0f75c4ff9e5989bf2d6a73b2f2df78da87668dd1db9ad9915856a765a2a7099ec1134145842c6f7ad16159a7a4c2b8a60f9347507af46940f273cbed320128e3bb28f58ee7aecb8359355aa1c67a5d2157c7eb46c77b610a242b50")
sched_setscheduler(r7, 0x0, &(0x7f0000000100)=0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1027, 0x0)

6.95187748s ago: executing program 2 (id=1790):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x11000)
vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffff00000000000000000000ffffffffffffefff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x4000000)

6.672662031s ago: executing program 2 (id=1792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x24004885}, 0x24000800)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="c2db765faf9eea9dbad64e131f4da794629400"/33], 0x28}}, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000340)={{0xfc, 0x4}, 'port0\x00', 0xd3, 0x10040, 0x0, 0x1, 0x6, 0xfffffffd, 0x80, 0x0, 0x3, 0x5})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r10 = accept$alg(r9, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5", 0x10}], 0x1, 0x0, 0x0, 0x806}], 0x1, 0x0)
recvmmsg(r10, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="200102200000"], 0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x2ec, 0x24, 0x300, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x2, 0xffef}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_gred={{0x9}, {0x25c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x60a}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x5, 0x1, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "dd9b399d374752002e0d1ee87e2b203f37cb5a416c61f64f4ba2a3cde4529f6419f220af5255209f2dfa62de17ca473276e6a0daa0ec9f8e518f113d2f589334c0bfbee2d0770b3020e6f8c28e7176b43fe36def2359d09e24bc63deb2e779bfb95d183bd617126e30aab152346eb7dd7911e71e2cac8a9a4da242369171edd7fd8c90d7e5ba52316d695b97f3ecda90a3db4142436163f49bb30e8314009fc30f6bd0cf8017d25fe5f289ff75ba14b846feb03408330e89f5b7b8fc81a60d972b29b79ba152eb432349da5e4d4d0813acb348f436832265253cd4a1eba1e76975b7f207cd8625301465a91563fad53f65e408280fddcadcf647578ceb409693"}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0x6}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "9fa5c583a1ca3c09155c87f238dfaec2bd6bc41356b1b477fc454250742639f5e519104194878e6740d925f9d3c5f8c4e2e5bf20337e3dd5771c1cbcd1a46abd575d635d586433e5f6bccff904d85b8f13b9d3f41840b058ddb03031eedbf4d404b1863bc84f169abff2d66c21a0bc243a7054c8135833f9664c36e99a03f6062386a382af156722ec7887271554bcd10b5be69bba2485d295c12f15aeed5cffd024c44b86ab099568d4ac18abe17974a092642a1c71852d94e1bf1ef05a1870fe2333517d555b84454ec8ff59f400caf9903955869a26a072d5c4489889f4c2ffaea9e92bfd3fe0e679b09d962f4c217aa014f5d88d556b3fcc8053472c9581"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x1, 0x0, 0x7}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0x1, 0x7}}, {0x12, 0x2, [0x4, 0xffff, 0x3ff, 0x269e, 0x8, 0x0, 0x9]}}]}]}, 0x2ec}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xf76}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880)

6.525061571s ago: executing program 0 (id=1793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
gettid()
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000002940)={{}, "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"})

6.026969056s ago: executing program 3 (id=1794):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f", @ANYBLOB="9d47b4b27dadb1e76d57dc5fe88ae80d07a4ccf9b19835bc9895c98d6fef42efcedcdd78d8bbd394d49d7a58c7d10727d3dc88ac796c4c3e9635a11297000d279b7574ef5a141233601f1da6e28f139ff68d61f6715cefd3761888641dd9fe634561c3a6d041f18bae8a11e499bc796af6d1be9f9b6d83d9e70649a871d39e72d20ba36b449f6f1396a5e256dc295f5d630c15bf5f37e2a50fd29e1e40880230abb928723ad10edd2b70b740130a32bbf098d03cfc3d07c2697426329c68d927ca0d6d4b1e5be710b4e22965e602aa5711320ee9086b6084dd"], 0xe8}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000280012800900010076657468"], 0x58}}, 0x40080)

5.508519164s ago: executing program 3 (id=1795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r2, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x300}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
mount(0x0, 0x0, &(0x7f0000000300)='qnx6\x00', 0x100088f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

5.378018089s ago: executing program 0 (id=1796):
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff2d, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(&(0x7f0000000140)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0x2, 0x100059a, 0xbfc4bb97dfede4bd})

5.058843902s ago: executing program 3 (id=1797):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)

4.288573717s ago: executing program 4 (id=1798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0xd3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x41)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0)
landlock_restrict_self(r4, 0x7)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'devlink\x00'}], 0xa, "7d89f8857d40"}, 0x1a)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdfd225047c000004006e001c00018006000600800a0000100015002c2e7b282802000000242300f0be92b9c50412da874adb0a7fed"], 0x34}}, 0x0)

4.271752779s ago: executing program 0 (id=1799):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r3 = dup(r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
shmctl$IPC_RMID(0x0, 0x0)
unshare(0x46000200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, 0x0, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f00003b8000/0x4000)=nil)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r10=>0x0})
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r13, 0x0, 0x0}, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r9, 0x2d, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x48000)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

4.181889073s ago: executing program 1 (id=1800):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xa)
write$uinput_user_dev(r0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x110)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xa4, 0x0, @empty}}}, 0x108)

4.166250495s ago: executing program 3 (id=1801):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@delsa={0x10c, 0x12, 0x1, 0x0, 0x0, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, [@sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@private=0xa010101, 0x4e20, 0x8, 0x4e21, 0xffff, 0x2, 0x20, 0x80, 0x32}, {@in6=@mcast1, 0x4d5, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, {0x4, 0x2, 0x401, 0x9, 0xe25f, 0x443c, 0xffffffffffffffff, 0xa}, {0xfffffffffffffffd, 0xdf1, 0x6, 0x10000}, {0x5, 0x1, 0x401}, 0x70bd2c, 0x3503, 0xa, 0x3, 0xb5, 0x14}}]}, 0x10c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x1dca}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x22)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0xf8, 0xfb, 0x40, 0x45e, 0x2bf, 0x7b41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcc, 0xed, 0x1b}}]}}]}}, 0x0)

4.116520245s ago: executing program 4 (id=1802):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket(0x10, 0x3, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6})

3.173538744s ago: executing program 4 (id=1803):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000340)={0x0, &(0x7f0000000240)="2c4c771aa68ce877f207b9c3ae0ca500b0f940fc48eb1ccbf866fb72f503fa4e20f583fd2aa41ee3e8ee7790662e1aa06c1d13f35a56eff37c56d5220f048521ed1c2a9690984373851904fec980ac0883f251265430059d289b6a2c227842f79f35379593e5905c6ed9282a3ac8d4890c997305b1094a2dcaf2f11919bdf2f7098370ff8d691ece229fc457db6f1490fae207beaff80c7f421e483bda8d3246bf6daba341ab05c80493cccd4f01bf662c50651fab2dcfd02aabd31f1e7ac6e073d9e5405b0d1e5c651740cd3e66734c517b7a435a9231ea9b063e8c8da08e40ff9736aa21c6da305a67cbcab9b1788c820fba5894a88e9e11", 0xf9})
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xfffffffffffffff5]}, 0x8, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xc00)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x81, 0xffffffffffffffff, &(0x7f0000000000)="31cad436b83305a3ac50fd2d943fcfb39c47dad476e56ed32b0c7172fbc985ebbd85f6502829bfbbb63086fabecd86b0bd90998686a2cc258c57eb0124d9ca53778e4190a1bbff3631bacceec80381f90eb8866c6005bf674d88a55860386f36", 0x60, 0x8, 0x0, 0x1}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r3, &(0x7f00000001c0)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000500)={0xf0002005})
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
syz_open_dev$evdev(&(0x7f0000000180), 0x5, 0x10000)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x4000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000780)="f4000900062b2c25fe1b000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x2, 0x0, @raw_data=[0xb, 0x400008, 0x3002, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x4, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]})

3.046690896s ago: executing program 2 (id=1804):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0xb, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f00000000c0)=""/44, 0x2c}], &(0x7f0000000240)=[0x3032, 0x7, 0x5, 0x8, 0x401, 0x9, 0xd, 0x2, 0x100], 0x2}, 0x20)
syz_genetlink_get_family_id$mptcp(0x0, r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c8daf7ece6f89bb1f5f0000000030000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, &(0x7f0000000380)={0x0, 0x100, "2ab95dff3a8477bfce9d6e638f977fe6ecb857f1c64d3356eb590146c5f6741d", 0xf7, 0x9, 0x7f6d, 0x3, 0x140000, 0x3, 0x9, 0xfffffffe, [0x80000000, 0x9, 0x6b3e, 0x7]})

2.964405386s ago: executing program 1 (id=1805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x140506}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x614, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000892}, 0x80)

2.445117949s ago: executing program 4 (id=1806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
gettid()
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000002940)={{}, "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"})

2.201003898s ago: executing program 0 (id=1807):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r2, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x300}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
mount(0x0, 0x0, &(0x7f0000000300)='qnx6\x00', 0x100088f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.148572173s ago: executing program 1 (id=1808):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x7, 0x2, 0x4, 0x8e, @time={0x6}, {0x4, 0x8}, {0xc, 0x7}, @result={0x8}}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f0000007ac0)=[{{&(0x7f0000000d40)=@ll={0x11, 0x15, r3, 0x1, 0xf4, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0xcc885)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
sync()
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
write$sndseq(r0, &(0x7f0000000280)=[{0x7, 0x2, 0x4, 0x8e, @time={0x6}, {0x4, 0x8}, {0xc, 0x7}, @result={0x8}}], 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000007ac0)=[{{&(0x7f0000000d40)=@ll={0x11, 0x15, r3, 0x1, 0xf4, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0xcc885) (async)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async)
sync() (async)
syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async)
ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)

1.454224545s ago: executing program 1 (id=1809):
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff2d, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(&(0x7f0000000140)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0x2, 0x100059a, 0xbfc4bb97dfede4bd})

1.333727685s ago: executing program 0 (id=1810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000009000000040500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000de000000004effffff00000001000000000000"], 0x50)
r2 = epoll_create1(0x0)
r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f)
close(r3)
inotify_init1(0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000480)="ef68a261919a04b24679d5a2271dc4f76ed91e0c2ea5fe55938eb2e660fa9015e6a43f2ff47d17b980ed9d8f91a3e2fd4f09da5f9f7c165939d051140416ba6dd7ac8fadf220c9d408cbcbb02439ced7e00ff3bf3fd4ee", 0xa7c, r1}, 0x38)
io_uring_setup(0x1c12, &(0x7f0000000200)={0x0, 0x1596, 0x200, 0x0, 0x362})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r5 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={<r6=>0x0, 0x9, 0x8001, 0x7ff, 0x9638, 0x2, 0x3, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, 0x348, 0x8, 0x7ff, 0x7, 0x82}}, &(0x7f00000002c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000640)={r6, 0x52, "176a9cefe6ec214f6ecfd2deadbf922c81137d3bf795985a4a5c0d59dce647939445ed8359e09cbeccc6f69136adc0b89e02c88a723ca8a7c4739df5be51505d67834b8cba2aff4a228b9d55c9967c5b359e"}, &(0x7f0000000300)=0x5a)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
sendmmsg$inet(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@huge_always}]})
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mount$nfs(0x0, 0x0, 0x0, 0x123b058, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

1.061703195s ago: executing program 4 (id=1811):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)

356.548013ms ago: executing program 1 (id=1812):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0xa, 0x92ce, 0x4, @mcast1, @empty, 0x20, 0x8000, 0x2, 0x400}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x3, {{0x13, 0x4, 0x3, 0x1a, 0x4c, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp_addr={0x44, 0x34, 0xf8, 0x1, 0x9, [{@local, 0xc}, {@multicast1, 0xa}, {@broadcast, 0x7}, {@loopback, 0x6}, {@broadcast, 0x5}, {@local, 0x81}]}, @end]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x80, 0x2, 0xcc, {{0x20, 0x4, 0x3, 0x2e, 0x80, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xf, 0xb2, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x54, 0xec, 0x3, 0x2, [{@multicast2, 0x8}, {@multicast2, 0x56c}, {@multicast1, 0x7}, {@empty, 0x5}, {@remote, 0xfff}, {@remote, 0x7}, {@broadcast, 0x6}, {@multicast1, 0xffffffff}, {@loopback, 0x3}, {@local, 0xfffffffe}]}, @generic={0x86, 0x8, "c5f75e3f9f74"}]}}}}})
socketpair(0x1e, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
syz_clone(0xb54449be5ab20120, 0x0, 0x0, 0x0, 0x0, 0x0)

199.96204ms ago: executing program 3 (id=1813):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket(0x10, 0x3, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6})

84.636347ms ago: executing program 4 (id=1814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
capset(&(0x7f0000000300)={0x20080522, r0}, &(0x7f00000003c0)={0x1, 0x50e1, 0x90000000, 0x3, 0x5, 0x800})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x6, 0x0, @val=@tracing}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000002c0)=0xc)
write$cgroup_int(r5, &(0x7f0000000040), 0x12)

713.154µs ago: executing program 0 (id=1815):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "def87458c08b1a5ebf88a34c666f96a8"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x3000c81c)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000380)={'veth1_vlan\x00', @broadcast})
socket(0x2, 0x2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, 0x0, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r5, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r5, &(0x7f0000000200)="755a537d5ff9ca9077459e67fe11d7d8d30daaf0413bc50400000013969bd8d40ab22120b8164200", 0x28)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0xa, 0x0, 0x3}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000037000059a1fa00000000000000511e86755850d8c3f3ffff000000006377d8d075148d12b0e408"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000000000000000000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2})

0s ago: executing program 2 (id=1816):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
setresuid(0x0, 0x0, 0x0)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r2, r2, 0x0, 0x548)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x2, 0x1)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f0000000400)='!', 0x1}], 0x2)

kernel console output (not intermixed with test programs):

 wMaxPacketSize 0
[  474.870052][   T54] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  474.879910][   T54] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  474.891527][   T54] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  474.911565][   T54] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  474.931590][   T54] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  474.940694][   T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.975416][   T54] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  476.694154][   T30] audit: type=1400 audit(1750460932.308:1345): avc:  denied  { wake_alarm } for  pid=11053 comm="syz.1.1407" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  476.875218][ T5933] usb 2-1: USB disconnect, device number 49
[  477.724182][   T30] audit: type=1400 audit(1750460933.518:1346): avc:  denied  { read write } for  pid=11081 comm="syz.0.1414" name="mouse0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  477.769918][   T30] audit: type=1400 audit(1750460933.548:1347): avc:  denied  { open } for  pid=11081 comm="syz.0.1414" path="/dev/input/mouse0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  478.031791][ T5895] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  478.251695][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  478.317465][ T5895] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  478.398660][ T5895] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[  478.448296][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  478.502889][   T30] audit: type=1400 audit(1750460934.288:1348): avc:  denied  { write } for  pid=11105 comm="syz.3.1420" path="socket:[28513]" dev="sockfs" ino=28513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  478.507767][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  478.526458][    C0] vkms_vblank_simulate: vblank timer overrun
[  478.546502][T11113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  478.679606][   T30] audit: type=1400 audit(1750460934.468:1349): avc:  denied  { connect } for  pid=11115 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  478.724143][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.781075][ T5895] usbtmc 3-1:16.0: bulk endpoints not found
[  478.811598][T11117] tipc: Started in network mode
[  478.857463][T11117] tipc: Node identity 4, cluster identity 4711
[  478.877162][   T30] audit: type=1400 audit(1750460934.668:1350): avc:  denied  { write } for  pid=11118 comm="syz.0.1422" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  478.913134][T11117] tipc: Node number set to 4
[  479.320101][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'.
[  479.337404][T11117] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  480.269319][   T30] audit: type=1400 audit(1750460935.948:1351): avc:  denied  { bind } for  pid=11133 comm="syz.0.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  480.549857][ T1208] usb 3-1: USB disconnect, device number 44
[  481.408078][ T5933] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  481.645996][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  481.662038][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.671597][ T5931] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  481.672771][T11159] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.708925][ T5933] usb 2-1: Product: syz
[  481.717709][ T5933] usb 2-1: Manufacturer: syz
[  481.835793][ T5933] usb 2-1: SerialNumber: syz
[  481.861445][ T5933] usb 2-1: config 0 descriptor??
[  481.875702][ T5933] gspca_main: kinect-2.14.0 probing 045e:02bf
[  481.902699][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  481.930501][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.950080][ T5931] usb 1-1: Product: syz
[  481.954721][ T5931] usb 1-1: Manufacturer: syz
[  481.959438][ T5931] usb 1-1: SerialNumber: syz
[  481.961575][ T6090] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  481.967024][ T5931] usb 1-1: config 0 descriptor??
[  481.996493][ T5931] gspca_main: kinect-2.14.0 probing 045e:02bf
[  482.007401][ T5931] videodev: could not get a free minor
[  482.015987][ T5931] gspca_main: video_register_device err -23
[  482.047468][ T5931] kinect 1-1:0.0: probe with driver kinect failed with error -23
[  482.074515][ T5933] usb 2-1: USB disconnect, device number 50
[  482.128937][ T6090] usb 4-1: device descriptor read/64, error -71
[  482.269375][ T5895] usb 1-1: USB disconnect, device number 52
[  482.451586][ T6090] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  482.591756][ T6090] usb 4-1: device descriptor read/64, error -71
[  482.701934][ T6090] usb usb4-port1: attempt power cycle
[  482.911606][   T54] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  483.151593][ T5931] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  483.216925][ T6090] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  483.493023][   T54] usb 2-1: Using ep0 maxpacket: 16
[  483.510151][ T6090] usb 4-1: device descriptor read/8, error -71
[  483.528491][   T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.542234][   T54] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  483.554971][   T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  483.569823][   T54] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  483.582734][   T54] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  483.596992][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  483.599283][   T54] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  483.612937][   T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.615483][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short
[  483.621524][   T54] usb 2-1: Product: syz
[  483.630458][ T5931] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  483.638029][   T54] usb 2-1: Manufacturer: syz
[  483.645405][ T5931] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  483.647718][   T54] usb 2-1: SerialNumber: syz
[  483.663773][   T54] usb 2-1: config 0 descriptor??
[  483.677770][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.678824][   T54] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  483.713172][ T5931] usb 3-1: Product: syz
[  483.724779][ T5931] usb 3-1: Manufacturer: syz
[  483.734862][ T5931] usb 3-1: SerialNumber: syz
[  483.876165][ T6090] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  483.881362][   T30] audit: type=1400 audit(1750460939.668:1352): avc:  denied  { map } for  pid=11166 comm="syz.1.1433" path="socket:[30007]" dev="sockfs" ino=30007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  483.907026][    C0] vkms_vblank_simulate: vblank timer overrun
[  483.913800][   T30] audit: type=1400 audit(1750460939.668:1353): avc:  denied  { read } for  pid=11166 comm="syz.1.1433" path="socket:[30007]" dev="sockfs" ino=30007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  483.920337][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.937467][ T6090] usb 4-1: device descriptor read/8, error -71
[  483.954827][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.954925][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.972847][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.152338][ T6090] usb usb4-port1: unable to enumerate USB device
[  484.489871][ T5931] usb 3-1: Cannot retrieve CPort count: -110
[  484.639369][ T5931] usb 3-1: Cannot retrieve CPort count: -110
[  485.046606][ T5931] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -110
[  485.934812][ T6090] usb 2-1: USB disconnect, device number 51
[  486.346663][ T5931] usb 3-1: USB disconnect, device number 45
[  486.400444][   T30] audit: type=1400 audit(1750460942.188:1354): avc:  denied  { bind } for  pid=11196 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  486.425723][   T30] audit: type=1400 audit(1750460942.188:1355): avc:  denied  { write } for  pid=11196 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  486.448881][T11198] siw: device registration error -23
[  486.921287][   T30] audit: type=1400 audit(1750460942.708:1356): avc:  denied  { write } for  pid=11199 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  488.509938][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.518559][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.146852][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.161820][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.361609][  T916] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  491.487885][T11249] syz.2.1456: attempt to access beyond end of device
[  491.487885][T11249] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  491.551664][  T916] usb 1-1: Using ep0 maxpacket: 32
[  491.570876][  T916] usb 1-1: unable to get BOS descriptor or descriptor too short
[  491.602236][T11249] befs: (nbd2): unable to read superblock
[  491.624869][  T916] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  491.660155][  T916] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  491.670674][  T916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.681373][  T916] usb 1-1: Product: syz
[  491.685787][T11250] syz.2.1456: attempt to access beyond end of device
[  491.685787][T11250] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  491.742017][T11250] befs: (nbd2): unable to read superblock
[  491.791827][  T916] usb 1-1: Manufacturer: syz
[  491.796465][  T916] usb 1-1: SerialNumber: syz
[  491.835182][   T30] audit: type=1400 audit(1750460947.628:1357): avc:  denied  { write } for  pid=11252 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  491.920116][   T30] audit: type=1326 audit(1750460947.708:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  491.970217][   T30] audit: type=1326 audit(1750460947.738:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  491.998105][   T30] audit: type=1326 audit(1750460947.738:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.367743][   T30] audit: type=1326 audit(1750460947.738:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.368144][  T916] usb 1-1: Cannot retrieve CPort count: 0
[  492.416769][   T30] audit: type=1326 audit(1750460947.738:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.449544][   T30] audit: type=1326 audit(1750460947.738:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.520730][  T916] usb 1-1: Cannot retrieve CPort count: -5
[  492.526699][  T916] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5
[  492.544247][   T30] audit: type=1326 audit(1750460947.738:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.568382][   T30] audit: type=1326 audit(1750460947.748:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.591192][ T5893] usb 1-1: USB disconnect, device number 53
[  492.594797][   T30] audit: type=1326 audit(1750460947.748:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9218e929 code=0x7ffc0000
[  492.959358][T11267] netlink: 'syz.2.1461': attribute type 10 has an invalid length.
[  493.174121][T11272] FAULT_INJECTION: forcing a failure.
[  493.174121][T11272] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.221624][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.1.1463 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  493.221653][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  493.221663][T11272] Call Trace:
[  493.221669][T11272]  <TASK>
[  493.221676][T11272]  dump_stack_lvl+0x16c/0x1f0
[  493.221708][T11272]  should_fail_ex+0x512/0x640
[  493.221735][T11272]  _copy_to_user+0x32/0xd0
[  493.221762][T11272]  simple_read_from_buffer+0xcb/0x170
[  493.221787][T11272]  proc_fail_nth_read+0x197/0x270
[  493.221820][T11272]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  493.221843][T11272]  ? rw_verify_area+0xcf/0x680
[  493.221861][T11272]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  493.221882][T11272]  vfs_read+0x1e1/0xc60
[  493.221907][T11272]  ? __pfx___mutex_lock+0x10/0x10
[  493.221933][T11272]  ? __pfx_vfs_read+0x10/0x10
[  493.221962][T11272]  ? __fget_files+0x20e/0x3c0
[  493.221994][T11272]  ksys_read+0x12a/0x250
[  493.222021][T11272]  ? __pfx_ksys_read+0x10/0x10
[  493.222043][T11272]  ? fput+0x70/0xf0
[  493.222073][T11272]  do_syscall_64+0xcd/0x4c0
[  493.222102][T11272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.222119][T11272] RIP: 0033:0x7f58e878d33c
[  493.222134][T11272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  493.222149][T11272] RSP: 002b:00007f58e95c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  493.222167][T11272] RAX: ffffffffffffffda RBX: 00007f58e89b5fa0 RCX: 00007f58e878d33c
[  493.222178][T11272] RDX: 000000000000000f RSI: 00007f58e95c10a0 RDI: 0000000000000004
[  493.222187][T11272] RBP: 00007f58e95c1090 R08: 0000000000000000 R09: 0000000000000000
[  493.222197][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.222207][T11272] R13: 0000000000000000 R14: 00007f58e89b5fa0 R15: 00007ffd2929c118
[  493.222231][T11272]  </TASK>
[  493.416210][    C1] vkms_vblank_simulate: vblank timer overrun
[  493.725015][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  494.051551][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  494.058417][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.069768][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.089963][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  494.127067][ T5893] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  494.284841][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.307976][ T5893] usb 3-1: config 0 descriptor??
[  494.868433][T11297] xt_hashlimit: max too large, truncated to 1048576
[  495.109704][T11274] 9pnet_fd: Insufficient options for proto=fd
[  495.135879][ T5893] usbhid 3-1:0.0: can't add hid device: -71
[  495.154103][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  495.175285][ T5893] usb 3-1: USB disconnect, device number 46
[  496.858952][   T30] kauditd_printk_skb: 215 callbacks suppressed
[  496.858963][   T30] audit: type=1400 audit(1750460952.648:1582): avc:  denied  { ioctl } for  pid=11328 comm="syz.2.1478" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  497.239661][   T30] audit: type=1400 audit(1750460952.718:1583): avc:  denied  { create } for  pid=11332 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  497.327912][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.417123][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.465320][   T30] audit: type=1400 audit(1750460952.728:1584): avc:  denied  { ioctl } for  pid=11324 comm="syz.3.1477" path="/dev/vhost-net" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  497.508674][   T30] audit: type=1400 audit(1750460952.738:1585): avc:  denied  { map_create } for  pid=11332 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  497.531940][   T30] audit: type=1400 audit(1750460952.738:1586): avc:  denied  { prog_load } for  pid=11332 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  497.553259][   T30] audit: type=1400 audit(1750460952.738:1587): avc:  denied  { bpf } for  pid=11332 comm="syz.0.1480" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  497.577958][   T30] audit: type=1400 audit(1750460952.738:1588): avc:  denied  { perfmon } for  pid=11332 comm="syz.0.1480" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  497.600241][   T30] audit: type=1400 audit(1750460952.738:1589): avc:  denied  { perfmon } for  pid=11332 comm="syz.0.1480" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  497.653559][   T30] audit: type=1400 audit(1750460952.738:1590): avc:  denied  { perfmon } for  pid=11332 comm="syz.0.1480" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  497.902597][   T30] audit: type=1400 audit(1750460952.738:1591): avc:  denied  { perfmon } for  pid=11332 comm="syz.0.1480" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  499.370848][T11349] ceph: No mds server is up or the cluster is laggy
[  499.378262][ T5895] libceph: connect (1)[c::]:6789 error -101
[  499.412344][ T5895] libceph: mon0 (1)[c::]:6789 connect error
[  501.222462][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.228830][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  502.298812][   T30] kauditd_printk_skb: 1234 callbacks suppressed
[  502.298829][   T30] audit: type=1400 audit(1750460957.638:1929): avc:  denied  { read write } for  pid=5818 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  502.332096][   T30] audit: type=1400 audit(1750460957.678:1930): avc:  denied  { read write open } for  pid=5818 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  502.360108][   T30] audit: type=1400 audit(1750460957.718:1931): avc:  denied  { ioctl } for  pid=11372 comm="syz.2.1489" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  502.456464][   T30] audit: type=1400 audit(1750460957.718:1932): avc:  denied  { set_context_mgr } for  pid=11372 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  502.535680][T11378] audit: audit_backlog=65 > audit_backlog_limit=64
[  502.536817][T11370] audit: audit_backlog=65 > audit_backlog_limit=64
[  502.561801][T11378] audit: audit_lost=300 audit_rate_limit=0 audit_backlog_limit=64
[  502.569778][T11378] audit: backlog limit exceeded
[  502.573939][   T30] audit: type=1400 audit(1750460957.728:1933): avc:  denied  { ioctl } for  pid=11372 comm="syz.2.1489" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  502.593734][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64
[  503.787158][T11395] FAULT_INJECTION: forcing a failure.
[  503.787158][T11395] name failslab, interval 1, probability 0, space 0, times 0
[  503.800431][T11395] CPU: 1 UID: 0 PID: 11395 Comm: syz.2.1495 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  503.800456][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  503.800467][T11395] Call Trace:
[  503.800473][T11395]  <TASK>
[  503.800479][T11395]  dump_stack_lvl+0x16c/0x1f0
[  503.800510][T11395]  should_fail_ex+0x512/0x640
[  503.800537][T11395]  should_failslab+0xc2/0x120
[  503.800563][T11395]  __kmalloc_cache_noprof+0x6a/0x3e0
[  503.800585][T11395]  ? __add_metainfo+0x99/0x460
[  503.800605][T11395]  __add_metainfo+0x99/0x460
[  503.800625][T11395]  tcf_ife_init+0xd5c/0x14e0
[  503.800650][T11395]  ? __pfx_tcf_ife_init+0x10/0x10
[  503.800683][T11395]  ? __asan_memcpy+0x3c/0x60
[  503.800705][T11395]  tcf_action_init_1+0x45d/0x6c0
[  503.800731][T11395]  ? __pfx_tcf_action_init_1+0x10/0x10
[  503.800767][T11395]  ? __nla_parse+0x40/0x60
[  503.800785][T11395]  tcf_action_init+0x432/0xa50
[  503.800818][T11395]  ? __pfx_tcf_action_init+0x10/0x10
[  503.800840][T11395]  ? stack_trace_save+0x8e/0xc0
[  503.800880][T11395]  ? ____sys_sendmsg+0xa95/0xc70
[  503.800897][T11395]  ? ___sys_sendmsg+0x134/0x1d0
[  503.800917][T11395]  ? __sys_sendmsg+0x16d/0x220
[  503.800939][T11395]  ? do_syscall_64+0xcd/0x4c0
[  503.800964][T11395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.801011][T11395]  ? __lock_acquire+0x622/0x1c90
[  503.801042][T11395]  tcf_action_add+0xee/0x5c0
[  503.801069][T11395]  ? __pfx_tcf_action_add+0x10/0x10
[  503.801132][T11395]  ? __nla_parse+0x40/0x60
[  503.801151][T11395]  tc_ctl_action+0x35b/0x470
[  503.801184][T11395]  ? __pfx_tc_ctl_action+0x10/0x10
[  503.801217][T11395]  ? __pfx_tc_ctl_action+0x10/0x10
[  503.801242][T11395]  rtnetlink_rcv_msg+0x3c9/0xe90
[  503.801272][T11395]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  503.801306][T11395]  ? ref_tracker_free+0x37c/0x830
[  503.801334][T11395]  netlink_rcv_skb+0x158/0x420
[  503.801353][T11395]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  503.801381][T11395]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  503.801410][T11395]  ? netlink_deliver_tap+0x1ae/0xd30
[  503.801433][T11395]  netlink_unicast+0x53a/0x7f0
[  503.801454][T11395]  ? __pfx_netlink_unicast+0x10/0x10
[  503.801481][T11395]  netlink_sendmsg+0x8d1/0xdd0
[  503.801502][T11395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  503.801529][T11395]  ____sys_sendmsg+0xa95/0xc70
[  503.801546][T11395]  ? copy_msghdr_from_user+0x10a/0x160
[  503.801568][T11395]  ? __pfx_____sys_sendmsg+0x10/0x10
[  503.801598][T11395]  ___sys_sendmsg+0x134/0x1d0
[  503.801624][T11395]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.801647][T11395]  ? __lock_acquire+0x622/0x1c90
[  503.801722][T11395]  __sys_sendmsg+0x16d/0x220
[  503.801747][T11395]  ? __pfx___sys_sendmsg+0x10/0x10
[  503.801790][T11395]  do_syscall_64+0xcd/0x4c0
[  503.801818][T11395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.801835][T11395] RIP: 0033:0x7f1eb6b8e929
[  503.801849][T11395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.801866][T11395] RSP: 002b:00007f1eb7a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  503.801883][T11395] RAX: ffffffffffffffda RBX: 00007f1eb6db5fa0 RCX: 00007f1eb6b8e929
[  503.801894][T11395] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  503.801905][T11395] RBP: 00007f1eb7a21090 R08: 0000000000000000 R09: 0000000000000000
[  503.801915][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  503.801925][T11395] R13: 0000000000000000 R14: 00007f1eb6db5fa0 R15: 00007ffe4b6acf18
[  503.801950][T11395]  </TASK>
[  503.887986][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.149187][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.155157][    C1] hrtimer: interrupt took 353195022 ns
[  504.255205][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.651904][ T5895] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  504.821557][ T5895] usb 4-1: Using ep0 maxpacket: 8
[  504.844843][ T5895] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  504.882268][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  504.907018][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  504.958647][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  505.191577][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  505.211827][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.359131][ T5895] usbtmc 4-1:16.0: bulk endpoints not found
[  505.714110][T11422] netlink: 'syz.4.1500': attribute type 21 has an invalid length.
[  505.722176][T11422] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1500'.
[  505.731556][T11422] netlink: 'syz.4.1500': attribute type 6 has an invalid length.
[  505.739309][T11422] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1500'.
[  506.091657][ T5895] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  506.303430][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  506.342590][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.455532][ T5895] usb 3-1: Product: syz
[  506.507134][ T5895] usb 3-1: Manufacturer: syz
[  506.584999][ T5895] usb 3-1: SerialNumber: syz
[  506.630679][ T5895] usb 3-1: config 0 descriptor??
[  506.666572][ T5895] gspca_main: kinect-2.14.0 probing 045e:02bf
[  507.631563][   T30] kauditd_printk_skb: 943 callbacks suppressed
[  507.631580][   T30] audit: type=1400 audit(1750460963.418:2705): avc:  denied  { prog_load } for  pid=11433 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  507.684144][ T5895] usb 4-1: USB disconnect, device number 51
[  507.739637][   T30] audit: type=1400 audit(1750460963.418:2706): avc:  denied  { bpf } for  pid=11433 comm="syz.0.1505" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  507.762060][   T30] audit: type=1400 audit(1750460963.418:2707): avc:  denied  { perfmon } for  pid=11433 comm="syz.0.1505" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  507.813790][   T30] audit: type=1400 audit(1750460963.418:2708): avc:  denied  { perfmon } for  pid=11433 comm="syz.0.1505" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  507.937649][ T5895] usb 3-1: USB disconnect, device number 47
[  507.995924][   T30] audit: type=1400 audit(1750460963.458:2709): avc:  denied  { perfmon } for  pid=11433 comm="syz.0.1505" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  508.080534][   T30] audit: type=1400 audit(1750460963.458:2710): avc:  denied  { perfmon } for  pid=11433 comm="syz.0.1505" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  508.174502][   T30] audit: type=1400 audit(1750460963.458:2711): avc:  denied  { bpf } for  pid=11433 comm="syz.0.1505" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  508.197771][   T30] audit: type=1400 audit(1750460963.458:2712): avc:  denied  { bpf } for  pid=11433 comm="syz.0.1505" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  508.250929][   T30] audit: type=1400 audit(1750460963.458:2713): avc:  denied  { prog_run } for  pid=11433 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  508.274744][T11443] siw: device registration error -23
[  508.312351][   T30] audit: type=1400 audit(1750460963.458:2714): avc:  denied  { prog_load } for  pid=11433 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  510.512448][ T5895] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  510.822888][ T5895] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  510.842826][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.843589][T11474] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  510.905474][ T5895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  510.951640][ T5895] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  510.981022][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.004474][ T5895] usb 4-1: Product: syz
[  511.008663][ T5895] usb 4-1: Manufacturer: syz
[  511.026691][ T5895] usb 4-1: SerialNumber: syz
[  511.051216][ T5895] usb 4-1: config 0 descriptor??
[  511.601884][T11465] 9pnet_fd: Insufficient options for proto=fd
[  511.621538][ T5895] usb 4-1: USB disconnect, device number 52
[  512.311614][ T5893] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  512.501554][ T5893] usb 1-1: Using ep0 maxpacket: 8
[  512.532487][ T5893] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  512.549036][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  512.566879][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  512.580928][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  512.609026][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  512.625668][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.644824][   T30] kauditd_printk_skb: 259 callbacks suppressed
[  512.644839][   T30] audit: type=1400 audit(1750460968.438:2972): avc:  denied  { read write open } for  pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  512.681913][ T5895] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  512.724710][ T5893] usbtmc 1-1:16.0: bulk endpoints not found
[  512.759477][   T30] audit: type=1400 audit(1750460968.478:2973): avc:  denied  { ioctl } for  pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  512.790868][   T30] audit: type=1400 audit(1750460968.498:2974): avc:  denied  { ioctl } for  pid=11486 comm="syz.2.1518" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  512.820452][   T30] audit: type=1400 audit(1750460968.498:2975): avc:  denied  { ioctl } for  pid=11486 comm="syz.2.1518" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  512.876721][   T30] audit: type=1400 audit(1750460968.508:2976): avc:  denied  { ioctl } for  pid=11485 comm="syz.0.1517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  512.921157][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  512.937614][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.948235][ T5895] usb 3-1: Product: syz
[  512.954968][ T5895] usb 3-1: Manufacturer: syz
[  512.965757][ T5895] usb 3-1: SerialNumber: syz
[  512.970537][   T30] audit: type=1400 audit(1750460968.508:2977): avc:  denied  { ioctl } for  pid=11486 comm="syz.2.1518" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  513.007099][ T5895] usb 3-1: config 0 descriptor??
[  513.021302][ T5895] gspca_main: kinect-2.14.0 probing 045e:02bf
[  513.033872][   T30] audit: type=1400 audit(1750460968.518:2978): avc:  denied  { ioctl } for  pid=11485 comm="syz.0.1517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  513.044535][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.069463][   T30] audit: type=1400 audit(1750460968.518:2979): avc:  denied  { ioctl } for  pid=11485 comm="syz.0.1517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  513.131430][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.136365][   T30] audit: type=1400 audit(1750460968.578:2980): avc:  denied  { read write } for  pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  513.187496][   T30] audit: type=1400 audit(1750460968.578:2981): avc:  denied  { read write open } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  513.234734][ T5933] usb 3-1: USB disconnect, device number 48
[  513.746507][T11504] net_ratelimit: 11 callbacks suppressed
[  513.746526][T11504] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  515.147614][ T5895] usb 1-1: USB disconnect, device number 54
[  515.584692][ T5895] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  515.911301][ T5895] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  515.955214][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.989757][ T5895] usb 4-1: Product: syz
[  516.011358][ T5895] usb 4-1: Manufacturer: syz
[  516.032053][ T5895] usb 4-1: SerialNumber: syz
[  516.156261][ T5895] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  516.301354][   T54] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  516.610744][T11535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11535 comm=syz.2.1532
[  517.507232][   T54] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  517.667860][   T54] ath9k_htc: Failed to initialize the device
[  517.677255][   T30] kauditd_printk_skb: 411 callbacks suppressed
[  517.677271][   T30] audit: type=1400 audit(1750460973.458:3393): avc:  denied  { ioctl } for  pid=11530 comm="syz.4.1533" path="/dev/radio6" dev="devtmpfs" ino=997 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  517.708407][    C0] vkms_vblank_simulate: vblank timer overrun
[  517.743786][   T54] usb 4-1: ath9k_htc: USB layer deinitialized
[  517.870110][   T30] audit: type=1400 audit(1750460973.648:3394): avc:  denied  { read write } for  pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  517.995448][   T30] audit: type=1400 audit(1750460973.688:3395): avc:  denied  { read write open } for  pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  518.020530][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.111575][   T30] audit: type=1400 audit(1750460973.688:3396): avc:  denied  { ioctl } for  pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  518.137140][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.215127][   T30] audit: type=1400 audit(1750460973.928:3397): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  518.239315][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.269545][   T30] audit: type=1400 audit(1750460973.928:3398): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  518.298764][   T30] audit: type=1400 audit(1750460973.928:3399): avc:  denied  { ioctl } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  518.324321][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.868231][ T5931] usb 4-1: USB disconnect, device number 53
[  518.945347][   T30] audit: type=1400 audit(1750460974.128:3400): avc:  denied  { prog_load } for  pid=11543 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.084706][   T30] audit: type=1400 audit(1750460974.128:3401): avc:  denied  { bpf } for  pid=11543 comm="syz.2.1536" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  519.105308][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.184829][   T30] audit: type=1400 audit(1750460974.188:3402): avc:  denied  { prog_load } for  pid=11537 comm="syz.1.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  519.203946][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.981857][ T5931] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  520.317071][T11567] syz.2.1542 (11567): drop_caches: 2
[  520.329323][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  520.361031][ T5931] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  520.385401][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  520.460878][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  520.557907][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  520.662135][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  520.732795][ T5895] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  520.739941][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.930385][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  521.054119][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.056744][ T5931] usbtmc 2-1:16.0: bulk endpoints not found
[  521.105826][ T5895] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  521.156220][ T5895] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  521.218028][ T5895] usb 3-1: Manufacturer: syz
[  521.242939][ T5895] usb 3-1: config 0 descriptor??
[  521.770841][ T5895] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  521.793121][ T5895] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  521.811400][ T5895] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  521.828327][ T5895] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  521.856271][ T5895] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  521.888549][ T5895] cougar 0003:060B:700A.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  521.901119][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[  522.007140][ T5895] usb 3-1: USB disconnect, device number 49
[  522.275859][T11581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=11581 comm=syz.3.1546
[  522.372866][T11582] fido_id[11582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  522.735471][   T30] kauditd_printk_skb: 278 callbacks suppressed
[  522.735486][   T30] audit: type=1400 audit(1750460978.518:3681): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  522.784085][ T6090] usb 2-1: USB disconnect, device number 52
[  522.889575][   T30] audit: type=1400 audit(1750460978.528:3682): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  522.957462][T11585] syz.2.1548 (11585): drop_caches: 2
[  523.051583][   T30] audit: type=1400 audit(1750460978.528:3683): avc:  denied  { ioctl } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  523.207947][   T30] audit: type=1400 audit(1750460978.538:3684): avc:  denied  { read } for  pid=11584 comm="syz.2.1548" dev="nsfs" ino=4026533111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  523.247455][   T30] audit: type=1400 audit(1750460978.538:3685): avc:  denied  { read open } for  pid=11584 comm="syz.2.1548" path="net:[4026533111]" dev="nsfs" ino=4026533111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  523.331629][   T30] audit: type=1400 audit(1750460978.538:3686): avc:  denied  { create } for  pid=11584 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  523.357947][   T30] audit: type=1400 audit(1750460978.538:3687): avc:  denied  { connect } for  pid=11584 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  523.379901][   T30] audit: type=1400 audit(1750460978.558:3688): avc:  denied  { execmem } for  pid=11584 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  523.402218][ T1208] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  523.417674][T11593] audit: audit_backlog=65 > audit_backlog_limit=64
[  523.424230][T11593] audit: audit_lost=360 audit_rate_limit=0 audit_backlog_limit=64
[  523.595963][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  523.633800][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.658994][ T1208] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  523.678467][ T1208] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  523.714510][ T1208] usb 3-1: Manufacturer: syz
[  523.733276][ T1208] usb 3-1: config 0 descriptor??
[  524.342524][ T1208] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  524.349558][ T1208] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  524.359529][ T1208] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  524.368516][ T1208] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  524.377386][ T1208] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  524.403545][ T1208] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  524.439311][ T1208] usb 3-1: USB disconnect, device number 50
[  525.406509][T11616] fido_id[11616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  525.665481][T11620] futex_wake_op: syz.4.1558 tries to shift op by -1; fix this program
[  525.861768][   T54] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  526.029527][   T54] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  526.051822][   T54] usb 3-1: config 0 has no interface number 0
[  526.085832][   T54] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  526.153772][   T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.259082][   T54] usb 3-1: config 0 descriptor??
[  526.548759][   T54] cp210x 3-1:0.1: cp210x converter detected
[  526.602320][T11618] capability: warning: `syz.2.1557' uses deprecated v2 capabilities in a way that may be insecure
[  526.822570][   T54] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32
[  526.908254][T11633] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  527.054382][   T54] usb 3-1: cp210x converter now attached to ttyUSB0
[  527.337752][   T54] usb 3-1: USB disconnect, device number 51
[  527.669248][   T54] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  527.785816][ T5933] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  527.795228][   T30] kauditd_printk_skb: 405 callbacks suppressed
[  527.795243][   T30] audit: type=1400 audit(1750460983.588:4069): avc:  denied  { ioctl } for  pid=11634 comm="syz.3.1564" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  527.878751][   T54] cp210x 3-1:0.1: device disconnected
[  527.925554][   T30] audit: type=1400 audit(1750460983.588:4070): avc:  denied  { ioctl } for  pid=11634 comm="syz.3.1564" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  527.967012][   T30] audit: type=1400 audit(1750460983.588:4071): avc:  denied  { ioctl } for  pid=11634 comm="syz.3.1564" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  528.006564][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.031345][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.033429][   T30] audit: type=1400 audit(1750460983.588:4072): avc:  denied  { read write } for  pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  528.082659][ T5933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  528.111089][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.168768][ T5933] usb 4-1: config 0 descriptor??
[  528.431927][   T30] audit: type=1400 audit(1750460983.588:4073): avc:  denied  { read write open } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  528.486481][   T30] audit: type=1400 audit(1750460983.588:4074): avc:  denied  { ioctl } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  528.534979][T11645] syz.0.1567 (11645): drop_caches: 2
[  528.701558][   T30] audit: type=1400 audit(1750460983.658:4075): avc:  denied  { ioctl } for  pid=11634 comm="syz.3.1564" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  528.800903][   T30] audit: type=1400 audit(1750460983.688:4076): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  528.873574][   T30] audit: type=1400 audit(1750460983.688:4077): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  528.876419][ T5933] cm6533_jd 0003:0D8C:0022.001C: collection stack underflow
[  528.906217][ T6090] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  528.952731][ T5933] cm6533_jd 0003:0D8C:0022.001C: item 0 2 0 12 parsing failed
[  528.974520][ T5933] cm6533_jd 0003:0D8C:0022.001C: parse failed
[  528.990912][ T5933] cm6533_jd 0003:0D8C:0022.001C: probe with driver cm6533_jd failed with error -22
[  528.993713][   T30] audit: type=1400 audit(1750460983.698:4078): avc:  denied  { ioctl } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  529.128021][T11635] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  529.134250][ T6090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  529.147421][T11635] cramfs: wrong magic
[  529.155084][ T5933] usb 4-1: USB disconnect, device number 54
[  529.177651][ T6090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.185903][T11634] delete_channel: no stack
[  529.207319][ T6090] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  529.227574][ T6090] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  529.259599][ T6090] usb 1-1: Manufacturer: syz
[  529.295000][ T6090] usb 1-1: config 0 descriptor??
[  529.566438][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'.
[  529.651709][  T916] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  529.835885][ T6090] cougar 0003:060B:700A.001D: unknown main item tag 0x0
[  529.868312][ T6090] cougar 0003:060B:700A.001D: unknown main item tag 0x0
[  530.068618][  T916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.092791][ T6090] cougar 0003:060B:700A.001D: unknown main item tag 0x0
[  530.100224][ T6090] cougar 0003:060B:700A.001D: unknown main item tag 0x0
[  530.110035][  T916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.337716][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.347840][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.599530][  T916] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  530.608707][ T6090] cougar 0003:060B:700A.001D: unknown main item tag 0x0
[  530.643114][  T916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.659332][ T6090] cougar 0003:060B:700A.001D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  530.702531][  T916] usb 3-1: config 0 descriptor??
[  530.737565][ T6090] usb 1-1: USB disconnect, device number 55
[  531.168132][  T916] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0
[  531.171382][T11677] openvswitch: netlink: Key type 113 is out of range max 32
[  531.199272][  T916] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0
[  531.206259][T11674] fido_id[11674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  531.223455][  T916] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0
[  531.248398][  T916] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0
[  531.271623][  T916] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0
[  531.293169][  T916] playstation 0003:054C:0DF2.001E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  531.462635][T11681] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1572'.
[  531.515084][  T916] playstation 0003:054C:0DF2.001E: Invalid byte count transferred, expected 20 got 0
[  531.621972][  T916] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -22
[  531.656296][  T916] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense
[  531.683716][  T916] playstation 0003:054C:0DF2.001E: Failed to create dualsense.
[  531.750766][  T916] playstation 0003:054C:0DF2.001E: probe with driver playstation failed with error -22
[  532.417634][T11689] 9pnet_virtio: no channels available for device syz
[  532.766374][ T1208] usb 3-1: USB disconnect, device number 52
[  532.811352][   T30] kauditd_printk_skb: 261 callbacks suppressed
[  532.811367][   T30] audit: type=1400 audit(1750460988.598:4340): avc:  denied  { read write } for  pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  532.975200][   T30] audit: type=1400 audit(1750460988.728:4341): avc:  denied  { read write open } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  533.041840][   T30] audit: type=1400 audit(1750460988.728:4342): avc:  denied  { ioctl } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  533.152613][   T30] audit: type=1400 audit(1750460988.748:4343): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  533.247187][   T30] audit: type=1400 audit(1750460988.748:4344): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  533.343317][T11699] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  533.371583][   T30] audit: type=1400 audit(1750460988.748:4345): avc:  denied  { ioctl } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  533.649755][   T30] audit: type=1400 audit(1750460988.768:4346): avc:  denied  { mounton } for  pid=11684 comm="syz.3.1579" path="/301/file0" dev="tmpfs" ino=1637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  533.672687][   T30] audit: type=1400 audit(1750460988.768:4347): avc:  denied  { mount } for  pid=11684 comm="syz.3.1579" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  533.713076][   T30] audit: type=1400 audit(1750460988.768:4348): avc:  denied  { execute } for  pid=11684 comm="syz.3.1579" path="/301/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  533.767112][   T30] audit: type=1400 audit(1750460988.868:4349): avc:  denied  { create } for  pid=11684 comm="syz.3.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  535.000097][T11716] syz.4.1587 (11716): drop_caches: 2
[  535.140809][T11723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.149635][T11723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.149550][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.180985][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.215287][T11741] netlink: 'syz.4.1593': attribute type 1 has an invalid length.
[  536.258198][T11741] 8021q: adding VLAN 0 to HW filter on device bond1
[  536.277020][T11741] bond1: (slave gretap1): making interface the new active one
[  536.285478][T11741] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  536.397688][T11745] FAULT_INJECTION: forcing a failure.
[  536.397688][T11745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.538104][T11745] CPU: 1 UID: 0 PID: 11745 Comm: syz.0.1594 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  536.538128][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  536.538139][T11745] Call Trace:
[  536.538145][T11745]  <TASK>
[  536.538152][T11745]  dump_stack_lvl+0x16c/0x1f0
[  536.538182][T11745]  should_fail_ex+0x512/0x640
[  536.538206][T11745]  _copy_from_user+0x2e/0xd0
[  536.538230][T11745]  io_register_resize_rings+0x18c/0x14f0
[  536.538252][T11745]  ? __pfx__kstrtoull+0x10/0x10
[  536.538275][T11745]  ? __pfx_io_register_resize_rings+0x10/0x10
[  536.538317][T11745]  ? __lock_acquire+0xb8a/0x1c90
[  536.538350][T11745]  ? __mutex_trylock_common+0xe9/0x250
[  536.538376][T11745]  ? __pfx___mutex_trylock_common+0x10/0x10
[  536.538404][T11745]  __io_uring_register+0x1637/0x2440
[  536.538425][T11745]  ? trace_contention_end+0xdd/0x130
[  536.538449][T11745]  ? __pfx___io_uring_register+0x10/0x10
[  536.538468][T11745]  ? __mutex_lock+0x1ca/0xb90
[  536.538496][T11745]  ? __x64_sys_io_uring_register+0x159/0x280
[  536.538520][T11745]  ? __pfx___mutex_lock+0x10/0x10
[  536.538551][T11745]  ? __fget_files+0x20e/0x3c0
[  536.538573][T11745]  ? fput+0x10/0xf0
[  536.538606][T11745]  __x64_sys_io_uring_register+0x169/0x280
[  536.538632][T11745]  do_syscall_64+0xcd/0x4c0
[  536.538659][T11745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.538677][T11745] RIP: 0033:0x7f3c7b38e929
[  536.538691][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  536.538708][T11745] RSP: 002b:00007f3c7c263038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  536.538725][T11745] RAX: ffffffffffffffda RBX: 00007f3c7b5b6160 RCX: 00007f3c7b38e929
[  536.538736][T11745] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000006
[  536.538746][T11745] RBP: 00007f3c7c263090 R08: 0000000000000000 R09: 0000000000000000
[  536.538757][T11745] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  536.538767][T11745] R13: 0000000000000000 R14: 00007f3c7b5b6160 R15: 00007ffdaba226a8
[  536.538802][T11745]  </TASK>
[  536.887183][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.895978][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.421115][T11741] bond1 (unregistering): (slave gretap1): Releasing active interface
[  537.464079][T11741] bond1 (unregistering): Released all slaves
[  537.930562][T11758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1595'.
[  538.131699][   T30] kauditd_printk_skb: 271 callbacks suppressed
[  538.131717][   T30] audit: type=1400 audit(1750460993.658:4621): avc:  denied  { read append } for  pid=11749 comm="syz.3.1595" name="sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  538.170977][   T30] audit: type=1400 audit(1750460993.668:4622): avc:  denied  { read append open } for  pid=11749 comm="syz.3.1595" path="/dev/sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  538.212781][   T30] audit: type=1400 audit(1750460993.698:4623): avc:  denied  { create } for  pid=11749 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  538.276228][   T30] audit: type=1400 audit(1750460993.718:4624): avc:  denied  { write } for  pid=11749 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  538.333415][   T30] audit: type=1400 audit(1750460993.828:4625): avc:  denied  { create } for  pid=11749 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  538.428530][   T30] audit: type=1400 audit(1750460993.858:4626): avc:  denied  { setopt } for  pid=11749 comm="syz.3.1595" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  538.461972][   T30] audit: type=1400 audit(1750460993.878:4627): avc:  denied  { getopt } for  pid=11749 comm="syz.3.1595" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  538.549392][   T30] audit: type=1400 audit(1750460993.888:4628): avc:  denied  { create } for  pid=11749 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  538.662263][   T30] audit: type=1400 audit(1750460993.908:4629): avc:  denied  { ioctl } for  pid=11749 comm="syz.3.1595" path="socket:[32259]" dev="sockfs" ino=32259 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  538.743799][   T30] audit: type=1400 audit(1750460993.968:4630): avc:  denied  { read } for  pid=11751 comm="syz.2.1596" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  539.294210][T11770] sp0: Synchronizing with TNC
[  540.221561][ T5886] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  540.266219][T11779] syz.4.1603 (11779): drop_caches: 2
[  540.394422][T11779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.403226][T11779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.541822][  T916] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  540.586726][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  540.607799][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.635565][ T5886] usb 1-1: Product: syz
[  540.639773][ T5886] usb 1-1: Manufacturer: syz
[  540.647152][ T5886] usb 1-1: SerialNumber: syz
[  540.660669][ T5886] usb 1-1: config 0 descriptor??
[  540.788207][ T5886] gspca_main: kinect-2.14.0 probing 045e:02bf
[  540.800426][  T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  540.817269][  T916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  541.413541][  T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  541.423593][  T916] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  541.432811][  T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.446393][  T916] usb 2-1: config 0 descriptor??
[  541.459451][  T916] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  541.544264][  T916] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  542.178924][T11796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  542.315039][T11794] fuse: Bad value for 'user_id'
[  542.350495][T11794] fuse: Bad value for 'user_id'
[  542.484988][ T5931] usb 1-1: USB disconnect, device number 56
[  542.846792][ T6090] usb 2-1: USB disconnect, device number 53
[  543.197804][   T30] kauditd_printk_skb: 260 callbacks suppressed
[  543.197820][   T30] audit: type=1400 audit(1750460998.978:4891): avc:  denied  { mounton } for  pid=11803 comm="syz.2.1608" path="/308/file0" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  543.800478][   T30] audit: type=1400 audit(1750460998.978:4892): avc:  denied  { mount } for  pid=11803 comm="syz.2.1608" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  543.851533][T11817] FAULT_INJECTION: forcing a failure.
[  543.851533][T11817] name failslab, interval 1, probability 0, space 0, times 0
[  543.864588][T11817] CPU: 1 UID: 0 PID: 11817 Comm: syz.1.1610 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  543.864613][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.864624][T11817] Call Trace:
[  543.864631][T11817]  <TASK>
[  543.864638][T11817]  dump_stack_lvl+0x16c/0x1f0
[  543.864670][T11817]  should_fail_ex+0x512/0x640
[  543.864694][T11817]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  543.864719][T11817]  should_failslab+0xc2/0x120
[  543.864745][T11817]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  543.864769][T11817]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  543.864797][T11817]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[  543.864826][T11817]  radix_tree_extend+0x1a2/0x4d0
[  543.864848][T11817]  ? kasan_save_stack+0x33/0x60
[  543.864873][T11817]  idr_get_free+0x5e9/0xa30
[  543.864908][T11817]  idr_alloc_u32+0x190/0x2f0
[  543.864934][T11817]  ? __pfx_idr_alloc_u32+0x10/0x10
[  543.864961][T11817]  ? __pfx___mutex_lock+0x10/0x10
[  543.864994][T11817]  idr_alloc+0xc0/0x130
[  543.865016][T11817]  ? __pfx_idr_alloc+0x10/0x10
[  543.865048][T11817]  shrinker_alloc+0x2dd/0xbf0
[  543.865083][T11817]  ? __pfx_shrinker_alloc+0x10/0x10
[  543.865111][T11817]  ? lockdep_init_map_type+0x5c/0x280
[  543.865140][T11817]  ? __raw_spin_lock_init+0x3a/0x110
[  543.865158][T11817]  ? __init_rwsem+0x12d/0x1b0
[  543.865178][T11817]  alloc_super+0x7c8/0xbd0
[  543.865206][T11817]  sget_fc+0x116/0xc20
[  543.865228][T11817]  ? __pfx_set_anon_super_fc+0x10/0x10
[  543.865250][T11817]  ? __pfx_proc_fill_super+0x10/0x10
[  543.865267][T11817]  get_tree_nodev+0x28/0x190
[  543.865290][T11817]  vfs_get_tree+0x8b/0x340
[  543.865309][T11817]  vfs_cmd_create+0xd7/0x2a0
[  543.865327][T11817]  __do_sys_fsconfig+0x7b8/0xbe0
[  543.865347][T11817]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  543.865369][T11817]  ? fput+0x70/0xf0
[  543.865407][T11817]  do_syscall_64+0xcd/0x4c0
[  543.865436][T11817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.865461][T11817] RIP: 0033:0x7f58e878e929
[  543.865476][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  543.865493][T11817] RSP: 002b:00007f58e95a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  543.865510][T11817] RAX: ffffffffffffffda RBX: 00007f58e89b6080 RCX: 00007f58e878e929
[  543.865521][T11817] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  543.865531][T11817] RBP: 00007f58e95a0090 R08: 0000000000000000 R09: 0000000000000000
[  543.865542][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.865553][T11817] R13: 0000000000000000 R14: 00007f58e89b6080 R15: 00007ffd2929c118
[  543.865577][T11817]  </TASK>
[  543.871709][   T30] audit: type=1400 audit(1750460998.988:4893): avc:  denied  { execute } for  pid=11803 comm="syz.2.1608" path="/308/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  545.041665][   T30] audit: type=1400 audit(1750460998.988:4894): avc:  denied  { create } for  pid=11803 comm="syz.2.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  545.063728][   T30] audit: type=1400 audit(1750460998.988:4895): avc:  denied  { ioctl } for  pid=11803 comm="syz.2.1608" path="/dev/radio8" dev="devtmpfs" ino=1010 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  545.089146][   T30] audit: type=1400 audit(1750460999.088:4896): avc:  denied  { read write } for  pid=11806 comm="syz.0.1609" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  545.271377][T11820] netlink: 'syz.2.1612': attribute type 46 has an invalid length.
[  545.346499][   T30] audit: type=1400 audit(1750460999.088:4897): avc:  denied  { read write open } for  pid=11806 comm="syz.0.1609" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  545.371561][ T5812] audit: audit_backlog=65 > audit_backlog_limit=64
[  545.378059][ T5812] audit: audit_lost=369 audit_rate_limit=0 audit_backlog_limit=64
[  545.417196][T11819] audit: audit_backlog=65 > audit_backlog_limit=64
[  548.203010][   T30] kauditd_printk_skb: 415 callbacks suppressed
[  548.203025][   T30] audit: type=1400 audit(1750461003.998:5310): avc:  denied  { read write open } for  pid=11850 comm="syz.1.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.618866][T11855] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  548.689680][   T30] audit: type=1400 audit(1750461003.998:5311): avc:  denied  { ioctl } for  pid=11850 comm="syz.1.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.720130][   T30] audit: type=1400 audit(1750461003.998:5312): avc:  denied  { ioctl } for  pid=11850 comm="syz.1.1621" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.806263][   T30] audit: type=1400 audit(1750461004.128:5313): avc:  denied  { read } for  pid=11847 comm="syz.2.1620" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.836873][   T30] audit: type=1400 audit(1750461004.138:5314): avc:  denied  { read open } for  pid=11847 comm="syz.2.1620" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.862817][ T5886] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  548.874905][   T30] audit: type=1400 audit(1750461004.168:5315): avc:  denied  { ioctl } for  pid=11847 comm="syz.2.1620" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  548.904963][   T30] audit: type=1400 audit(1750461004.188:5316): avc:  denied  { allowed } for  pid=11847 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  548.932357][   T30] audit: type=1400 audit(1750461004.208:5317): avc:  denied  { create } for  pid=11847 comm="syz.2.1620" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  548.962900][   T30] audit: type=1400 audit(1750461004.238:5318): avc:  denied  { create } for  pid=11847 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  548.983590][T11839] audit: audit_backlog=65 > audit_backlog_limit=64
[  549.062192][ T5886] usb 2-1: Using ep0 maxpacket: 16
[  549.113844][ T5886] usb 2-1: config 9 has an invalid descriptor of length 64, skipping remainder of the config
[  549.144642][ T5886] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  549.169534][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00
[  549.181866][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.464801][ T5886] usb 2-1: string descriptor 0 read error: -71
[  549.503945][ T5886] usb 2-1: USB disconnect, device number 54
[  549.831582][ T6090] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  550.011722][ T6090] usb 3-1: device descriptor read/64, error -71
[  550.239226][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.259293][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.311618][ T6090] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  550.508694][ T6090] usb 3-1: device descriptor read/64, error -71
[  550.552868][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.563371][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.839238][ T6090] usb usb3-port1: attempt power cycle
[  551.291516][ T5886] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  551.391797][ T6090] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  551.729199][ T5886] usb 2-1: device descriptor read/64, error -71
[  552.155981][ T6090] usb 3-1: device descriptor read/8, error -71
[  552.492287][ T5886] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  552.642819][ T5886] usb 2-1: device descriptor read/64, error -71
[  552.753156][ T5886] usb usb2-port1: attempt power cycle
[  552.868158][T11890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1631'.
[  552.881299][T11898] netlink: 'syz.2.1633': attribute type 8 has an invalid length.
[  553.005557][T11890] Bluetooth: MGMT ver 1.23
[  553.091935][   T54] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  553.101627][ T5886] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  553.165129][ T5886] usb 2-1: device descriptor read/8, error -71
[  553.253624][   T30] kauditd_printk_skb: 1335 callbacks suppressed
[  553.253641][   T30] audit: type=1400 audit(1750461009.048:6397): avc:  denied  { ioctl } for  pid=11893 comm="syz.0.1634" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  553.331608][   T54] usb 1-1: Using ep0 maxpacket: 8
[  553.564095][   T54] usb 1-1: config 6 has an invalid interface number: 205 but max is 0
[  553.676423][   T54] usb 1-1: config 6 has an invalid descriptor of length 96, skipping remainder of the config
[  553.693339][   T30] audit: type=1400 audit(1750461009.098:6398): avc:  denied  { read } for  pid=11899 comm="syz.3.1635" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  553.969501][   T54] usb 1-1: config 6 has no interface number 0
[  553.977101][   T30] audit: type=1400 audit(1750461009.098:6399): avc:  denied  { read open } for  pid=11899 comm="syz.3.1635" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  554.073694][   T54] usb 1-1: too many endpoints for config 6 interface 205 altsetting 73: 192, using maximum allowed: 30
[  554.106319][   T54] usb 1-1: config 6 interface 205 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[  554.132520][   T30] audit: type=1400 audit(1750461009.158:6400): avc:  denied  { ioctl } for  pid=11893 comm="syz.0.1634" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  554.169534][   T54] usb 1-1: config 6 interface 205 has no altsetting 0
[  554.236130][   T30] audit: type=1400 audit(1750461009.168:6401): avc:  denied  { read } for  pid=11899 comm="syz.3.1635" dev="nsfs" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  554.236292][   T54] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  554.252522][T11909] audit: audit_backlog=65 > audit_backlog_limit=64
[  554.274246][T11896] audit: audit_backlog=65 > audit_backlog_limit=64
[  554.294952][T11896] audit: audit_lost=457 audit_rate_limit=0 audit_backlog_limit=64
[  554.296675][T11910] audit: audit_backlog=65 > audit_backlog_limit=64
[  554.312007][   T30] audit: type=1400 audit(1750461009.178:6402): avc:  denied  { read open } for  pid=11899 comm="syz.3.1635" path="net:[4026533134]" dev="nsfs" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  554.341921][   T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.350602][   T54] usb 1-1: Product: syz
[  554.357764][   T54] usb 1-1: Manufacturer: syz
[  554.367811][   T54] usb 1-1: SerialNumber: syz
[  554.444191][T11914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11914 comm=syz.2.1639
[  554.782586][ T5931] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  554.941638][ T5931] usb 4-1: Using ep0 maxpacket: 16
[  555.071617][T11923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.147492][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  555.317904][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  555.559610][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  555.581264][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.604307][ T5931] usb 4-1: Product: syz
[  555.615004][ T5931] usb 4-1: Manufacturer: syz
[  555.625091][ T5931] usb 4-1: SerialNumber: syz
[  555.913463][ T5931] usb 4-1: config 0 descriptor??
[  556.037626][ T5931] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  556.063668][ T5931] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  556.323188][T11913] program syz.3.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  556.752623][   T54] hso 1-1:6.205: Not our interface
[  556.873013][   T54] usb 1-1: USB disconnect, device number 57
[  557.597540][ T5931] em28xx 4-1:0.0: chip ID is em2874
[  558.573651][   T30] kauditd_printk_skb: 376 callbacks suppressed
[  558.573667][   T30] audit: type=1400 audit(1750461013.968:6742): avc:  denied  { ioctl } for  pid=11940 comm="syz.0.1648" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  558.678542][T11943] audit: audit_backlog=65 > audit_backlog_limit=64
[  558.685099][T11943] audit: audit_lost=471 audit_rate_limit=0 audit_backlog_limit=64
[  558.696207][   T30] audit: type=1400 audit(1750461013.968:6743): avc:  denied  { ioctl } for  pid=11940 comm="syz.0.1648" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  558.701563][ T5886] usb 4-1: USB disconnect, device number 55
[  558.741612][   T30] audit: type=1400 audit(1750461013.978:6744): avc:  denied  { ioctl } for  pid=11940 comm="syz.0.1648" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  558.786799][   T30] audit: type=1400 audit(1750461013.978:6745): avc:  denied  { ioctl } for  pid=11940 comm="syz.0.1648" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  558.817371][T11948] audit: audit_backlog=65 > audit_backlog_limit=64
[  558.833489][T11943] audit: backlog limit exceeded
[  558.862423][T11948] audit: audit_lost=472 audit_rate_limit=0 audit_backlog_limit=64
[  558.890462][T11943] audit: audit_backlog=65 > audit_backlog_limit=64
[  558.898296][ T5886] em28xx 4-1:0.0: Disconnecting em28xx
[  558.967039][ T5886] em28xx 4-1:0.0: Freeing device
[  559.150958][T11959] FAULT_INJECTION: forcing a failure.
[  559.150958][T11959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.349280][T11959] CPU: 1 UID: 0 PID: 11959 Comm: syz.4.1651 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  559.349308][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  559.349318][T11959] Call Trace:
[  559.349324][T11959]  <TASK>
[  559.349331][T11959]  dump_stack_lvl+0x16c/0x1f0
[  559.349363][T11959]  should_fail_ex+0x512/0x640
[  559.349397][T11959]  _copy_from_user+0x2e/0xd0
[  559.349423][T11959]  copy_msghdr_from_user+0x98/0x160
[  559.349450][T11959]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  559.349487][T11959]  ___sys_sendmsg+0xfe/0x1d0
[  559.349513][T11959]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.349536][T11959]  ? __lock_acquire+0x622/0x1c90
[  559.349594][T11959]  __sys_sendmsg+0x16d/0x220
[  559.349619][T11959]  ? __pfx___sys_sendmsg+0x10/0x10
[  559.349659][T11959]  do_syscall_64+0xcd/0x4c0
[  559.349686][T11959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.349703][T11959] RIP: 0033:0x7fe07f78e929
[  559.349716][T11959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.349733][T11959] RSP: 002b:00007fe0805be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.349751][T11959] RAX: ffffffffffffffda RBX: 00007fe07f9b5fa0 RCX: 00007fe07f78e929
[  559.349762][T11959] RDX: 0000000004048850 RSI: 00002000000001c0 RDI: 0000000000000003
[  559.349772][T11959] RBP: 00007fe0805be090 R08: 0000000000000000 R09: 0000000000000000
[  559.349782][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.349792][T11959] R13: 0000000000000000 R14: 00007fe07f9b5fa0 R15: 00007ffdfa52fe28
[  559.349816][T11959]  </TASK>
[  560.413480][T11970] input: syz1 as /devices/virtual/input/input21
[  562.613544][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  562.620072][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  563.581674][   T30] kauditd_printk_skb: 1611 callbacks suppressed
[  563.581693][   T30] audit: type=1400 audit(1750461019.318:8230): avc:  denied  { execmem } for  pid=12004 comm="syz.3.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  563.709466][T12005] audit: audit_backlog=65 > audit_backlog_limit=64
[  563.716027][T12005] audit: audit_lost=515 audit_rate_limit=0 audit_backlog_limit=64
[  563.723923][T12005] audit: backlog limit exceeded
[  563.729264][T12005] audit: audit_backlog=65 > audit_backlog_limit=64
[  563.735836][T12005] audit: audit_lost=516 audit_rate_limit=0 audit_backlog_limit=64
[  563.743677][T12005] audit: backlog limit exceeded
[  563.754376][T12005] audit: audit_backlog=65 > audit_backlog_limit=64
[  563.760888][T12005] audit: audit_lost=517 audit_rate_limit=0 audit_backlog_limit=64
[  563.768716][T12005] audit: backlog limit exceeded
[  564.345767][T12014] loop2: detected capacity change from 0 to 7
[  564.366633][    C0] blk_print_req_error: 10 callbacks suppressed
[  564.366646][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.382397][    C0] buffer_io_error: 10 callbacks suppressed
[  564.382405][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.411518][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.420719][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.437963][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.447139][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.457719][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.466918][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.477030][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.486232][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.505046][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.514302][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.526613][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.535877][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.543792][T12014] ldm_validate_partition_table(): Disk read failed.
[  564.614037][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.623216][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.691999][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.701248][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.712843][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  564.722021][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  564.735219][T12014] Dev loop2: unable to read RDB block 0
[  564.911840][T12014]  loop2: unable to read partition table
[  564.921110][T12014] loop2: partition table beyond EOD, truncated
[  564.938935][T12014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  565.014234][T12001] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0
[  565.635597][T12037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  566.574255][T12045] FAULT_INJECTION: forcing a failure.
[  566.574255][T12045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  566.587376][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.3.1674 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  566.587401][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  566.587412][T12045] Call Trace:
[  566.587419][T12045]  <TASK>
[  566.587427][T12045]  dump_stack_lvl+0x16c/0x1f0
[  566.587458][T12045]  should_fail_ex+0x512/0x640
[  566.587485][T12045]  _copy_from_user+0x2e/0xd0
[  566.587511][T12045]  do_handle_open+0x500/0xb70
[  566.587533][T12045]  ? __fget_files+0x20e/0x3c0
[  566.587557][T12045]  ? __pfx_do_handle_open+0x10/0x10
[  566.587582][T12045]  ? ksys_write+0x1ac/0x250
[  566.587613][T12045]  ? do_syscall_64+0xcd/0x4c0
[  566.587638][T12045]  do_syscall_64+0xcd/0x4c0
[  566.587665][T12045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.587683][T12045] RIP: 0033:0x7f4f9218e929
[  566.587698][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.587715][T12045] RSP: 002b:00007f4f930ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  566.587733][T12045] RAX: ffffffffffffffda RBX: 00007f4f923b5fa0 RCX: 00007f4f9218e929
[  566.587745][T12045] RDX: 0000000000830200 RSI: 0000200000000140 RDI: 0000000000000007
[  566.587756][T12045] RBP: 00007f4f930ae090 R08: 0000000000000000 R09: 0000000000000000
[  566.587767][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.587778][T12045] R13: 0000000000000000 R14: 00007f4f923b5fa0 R15: 00007ffd953b9b88
[  566.587801][T12045]  </TASK>
[  566.742791][    C0] vkms_vblank_simulate: vblank timer overrun
[  566.903649][T12049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1675'.
[  566.912744][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'.
[  566.921690][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  567.924430][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'.
[  568.231709][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  568.266368][T12067] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1681'.
[  568.512165][  T916] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  568.561855][ T5886] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  568.581550][ T5886] usb 3-1: config 0 has no interface number 0
[  568.587855][ T5886] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  568.600594][ T5886] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  568.616625][   T30] kauditd_printk_skb: 997 callbacks suppressed
[  568.616641][   T30] audit: type=1400 audit(1750461025.414:8887): avc:  denied  { ioctl } for  pid=12063 comm="syz.1.1680" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  568.655555][ T5886] usb 3-1: config 0 interface 153 has no altsetting 0
[  568.669504][   T30] audit: type=1400 audit(1750461025.424:8888): avc:  denied  { prog_load } for  pid=12076 comm="syz.4.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  568.911499][T12079] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  569.073190][   T30] audit: type=1400 audit(1750461025.424:8889): avc:  denied  { bpf } for  pid=12076 comm="syz.4.1683" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.101187][ T5886] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  569.557699][   T30] audit: type=1400 audit(1750461025.424:8890): avc:  denied  { perfmon } for  pid=12076 comm="syz.4.1683" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.581508][   T30] audit: type=1400 audit(1750461025.424:8891): avc:  denied  { perfmon } for  pid=12076 comm="syz.4.1683" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.602448][    C0] vkms_vblank_simulate: vblank timer overrun
[  569.610694][   T30] audit: type=1400 audit(1750461025.424:8892): avc:  denied  { perfmon } for  pid=12076 comm="syz.4.1683" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.636971][   T30] audit: type=1400 audit(1750461025.424:8893): avc:  denied  { perfmon } for  pid=12076 comm="syz.4.1683" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.659902][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.668077][  T916] usb 2-1: unable to get BOS descriptor or descriptor too short
[  569.675832][ T5886] usb 3-1: Product: syz
[  569.680008][ T5886] usb 3-1: Manufacturer: syz
[  569.707412][   T30] audit: type=1400 audit(1750461025.424:8894): avc:  denied  { perfmon } for  pid=12076 comm="syz.4.1683" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.708872][ T5886] usb 3-1: SerialNumber: syz
[  569.733502][   T30] audit: type=1400 audit(1750461025.424:8895): avc:  denied  { bpf } for  pid=12076 comm="syz.4.1683" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.734606][  T916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  569.759914][   T30] audit: type=1400 audit(1750461025.424:8896): avc:  denied  { create } for  pid=12076 comm="syz.4.1683" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  569.784656][    C0] vkms_vblank_simulate: vblank timer overrun
[  569.829732][ T5886] usb 3-1: config 0 descriptor??
[  569.835248][  T916] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  569.874029][  T916] usb 2-1: config 1 interface 0 has no altsetting 1
[  569.893932][  T916] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  569.904725][  T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.915254][ T5886] hub 3-1:0.153: bad descriptor, ignoring hub
[  569.921364][ T5886] hub 3-1:0.153: probe with driver hub failed with error -5
[  569.950848][  T916] usb 2-1: Product: syz
[  569.958296][ T5886] sierra 3-1:0.153: Sierra USB modem converter detected
[  569.967105][  T916] usb 2-1: Manufacturer: syz
[  569.975356][  T916] usb 2-1: SerialNumber: syz
[  570.016613][  T916] smsusb:smsusb_probe: board id=8, interface number 0
[  570.154649][ T5886] usb 3-1: USB disconnect, device number 57
[  570.183874][ T5886] sierra 3-1:0.153: device disconnected
[  570.417763][ T5933] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  570.796624][ T5933] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  570.827774][ T5933] usb 1-1: config 5 has no interface number 0
[  570.853183][ T5933] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  570.990958][  T916] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  570.992431][ T5933] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  571.041544][  T916] smsusb 2-1:1.0: probe with driver smsusb failed with error -71
[  571.061503][ T5933] usb 1-1: config 5 interface 123 has no altsetting 0
[  571.094918][  T916] usb 2-1: USB disconnect, device number 59
[  571.168668][ T5933] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  571.222523][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.230557][ T5933] usb 1-1: Product: syz
[  571.429566][ T5886] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  571.447411][ T5933] usb 1-1: Manufacturer: syz
[  571.589575][ T5933] usb 1-1: SerialNumber: syz
[  571.847538][ T5886] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  572.021789][ T5886] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  572.037337][ T5886] usb 4-1: config 8 has no interface number 0
[  572.050577][ T5886] usb 4-1: config 8 interface 177 altsetting 1 has an endpoint descriptor with address 0xE8, changing to 0x88
[  572.067339][ T5886] usb 4-1: config 8 interface 177 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0
[  572.084204][ T5886] usb 4-1: config 8 interface 177 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 0
[  572.329884][ T5886] usb 4-1: config 8 interface 177 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  572.591129][ T5886] usb 4-1: config 8 interface 177 has no altsetting 0
[  572.631545][ T5886] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  572.661078][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.941063][ T5886] usb 4-1: string descriptor 0 read error: -71
[  572.961311][ T5886] ir_toy 4-1:8.177: required endpoints not found
[  572.986982][ T5886] usb 4-1: USB disconnect, device number 56
[  573.551891][ T7364] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  573.797103][   T30] kauditd_printk_skb: 308 callbacks suppressed
[  573.797120][   T30] audit: type=1400 audit(1750461030.444:9206): avc:  denied  { ioctl } for  pid=12118 comm="syz.2.1694" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  573.838119][ T5933] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  573.884046][ T7364] usb 3-1: Using ep0 maxpacket: 8
[  573.900994][ T5933] usb 1-1: USB disconnect, device number 58
[  573.927322][   T30] audit: type=1400 audit(1750461030.444:9207): avc:  denied  { ioctl } for  pid=12118 comm="syz.2.1694" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  573.954768][ T7364] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  573.971538][ T7364] usb 3-1: config 0 has no interface number 0
[  574.054468][   T30] audit: type=1400 audit(1750461030.414:9205): avc:  denied  { map_read map_write } for  pid=12124 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  574.077099][ T7364] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  574.120806][ T7364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.166830][ T7364] usb 3-1: Product: syz
[  574.171028][ T7364] usb 3-1: Manufacturer: syz
[  574.193509][   T30] audit: type=1400 audit(1750461030.524:9209): avc:  denied  { prog_load } for  pid=12124 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  574.212767][ T7364] usb 3-1: SerialNumber: syz
[  574.226645][ T7364] usb 3-1: config 0 descriptor??
[  574.235840][   T30] audit: type=1400 audit(1750461030.524:9210): avc:  denied  { bpf } for  pid=12124 comm="syz.1.1696" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  574.296625][   T30] audit: type=1400 audit(1750461030.544:9211): avc:  denied  { perfmon } for  pid=12124 comm="syz.1.1696" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  574.378432][T12131] audit: audit_backlog=65 > audit_backlog_limit=64
[  574.386393][T12137] audit: audit_backlog=65 > audit_backlog_limit=64
[  574.402710][T12139] audit: audit_backlog=65 > audit_backlog_limit=64
[  574.419619][T12131] audit: audit_lost=632 audit_rate_limit=0 audit_backlog_limit=64
[  575.281839][ T7364] msi2500 3-1:0.246: Registered as swradio24
[  575.287875][ T7364] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  576.948581][T12172] ip6gretap0: mtu less than device minimum
[  577.134222][  T916] usb 3-1: USB disconnect, device number 58
[  577.612525][ T5886] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  577.800649][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.831569][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.863803][ T5886] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  577.881635][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.917015][ T5886] usb 2-1: config 0 descriptor??
[  578.624785][ T5886] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0
[  578.642428][ T5886] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0
[  578.822353][ T5886] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001F/input/input22
[  578.833897][   T30] kauditd_printk_skb: 316 callbacks suppressed
[  578.833911][   T30] audit: type=1400 audit(1750461035.614:9498): avc:  denied  { read write } for  pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  579.110947][ T5886] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  579.127881][   T30] audit: type=1400 audit(1750461035.614:9499): avc:  denied  { read write open } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  579.575589][T12198] blktrace: Concurrent blktraces are not allowed on loop3
[  580.058535][   T30] audit: type=1400 audit(1750461035.614:9500): avc:  denied  { ioctl } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  580.181638][ T5886] usb 2-1: USB disconnect, device number 60
[  580.201756][   T30] audit: type=1400 audit(1750461035.664:9501): avc:  denied  { write } for  pid=12183 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  580.226333][   T30] audit: type=1400 audit(1750461035.834:9502): avc:  denied  { read } for  pid=12191 comm="syz.4.1714" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  580.298982][   T30] audit: type=1400 audit(1750461035.844:9503): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  580.400882][   T30] audit: type=1400 audit(1750461035.844:9504): avc:  denied  { read open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  580.554294][   T30] audit: type=1400 audit(1750461035.844:9505): avc:  denied  { read open } for  pid=12191 comm="syz.4.1714" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  580.610879][   T30] audit: type=1400 audit(1750461035.854:9506): avc:  denied  { allowed } for  pid=12189 comm="syz.2.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  580.706009][T12208] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  580.802880][T12212] netlink: 'syz.3.1715': attribute type 1 has an invalid length.
[  580.824597][T12207] audit: audit_backlog=65 > audit_backlog_limit=64
[  580.926922][T12212] netlink: 'syz.3.1715': attribute type 1 has an invalid length.
[  580.966931][T12206] fido_id[12206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  581.151727][T12218] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  581.186303][ T1093] Bluetooth: hci5: Frame reassembly failed (-84)
[  582.921954][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.943650][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.173371][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  583.180954][ T5826] Bluetooth: hci5: command 0x1003 tx timeout
[  583.813050][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.848396][   T30] kauditd_printk_skb: 345 callbacks suppressed
[  583.848412][   T30] audit: type=1400 audit(1750461040.634:9847): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  583.908175][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.931829][   T30] audit: type=1400 audit(1750461040.644:9848): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  583.944582][T12250] Failed to initialize the IGMP autojoin socket (err -2)
[  584.009503][   T30] audit: type=1400 audit(1750461040.644:9849): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  584.095672][T12239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.142929][T12252] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.156675][T12251] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.179614][T12252] audit: audit_lost=645 audit_rate_limit=0 audit_backlog_limit=64
[  584.187805][T12251] audit: audit_lost=646 audit_rate_limit=0 audit_backlog_limit=64
[  584.191644][T12223] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.204122][T12252] audit: backlog limit exceeded
[  584.218421][   T30] audit: type=1400 audit(1750461040.674:9850): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  584.495270][T12255] syz.1.1729 (12255): drop_caches: 2
[  584.861767][ T7364] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  585.042728][ T7364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  585.094807][ T7364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.251729][ T7364] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  585.301630][ T7364] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  585.309686][ T7364] usb 2-1: Manufacturer: syz
[  585.322685][ T7364] usb 2-1: config 0 descriptor??
[  585.748875][ T7364] cougar 0003:060B:700A.0020: unknown main item tag 0x0
[  585.831603][ T7364] cougar 0003:060B:700A.0020: unknown main item tag 0x0
[  585.857747][ T7364] cougar 0003:060B:700A.0020: unknown main item tag 0x0
[  585.872522][ T7364] cougar 0003:060B:700A.0020: unknown main item tag 0x0
[  585.905747][ T7364] cougar 0003:060B:700A.0020: unknown main item tag 0x0
[  585.930677][ T7364] cougar 0003:060B:700A.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  585.992483][ T7364] usb 2-1: USB disconnect, device number 61
[  586.427328][T12265] fido_id[12265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  586.558497][T12268] vhci_hcd vhci_hcd.0: port 0 already used
[  586.582374][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.700584][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.165930][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'.
[  588.272188][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.301176][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.634570][T12290] ALSA: mixer_oss: invalid index 40000
[  588.661238][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'.
[  588.931481][   T30] kauditd_printk_skb: 2247 callbacks suppressed
[  588.931498][   T30] audit: type=1400 audit(1750461045.714:11876): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  589.011611][   T30] audit: type=1400 audit(1750461045.714:11877): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  589.096735][   T30] audit: type=1400 audit(1750461045.714:11878): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  589.124565][   T30] audit: type=1400 audit(1750461045.754:11879): avc:  denied  { write } for  pid=12221 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  589.149707][T12223] audit: audit_backlog=65 > audit_backlog_limit=64
[  589.159852][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64
[  589.168034][ T5819] audit: audit_lost=721 audit_rate_limit=0 audit_backlog_limit=64
[  589.176173][T12223] audit: audit_lost=722 audit_rate_limit=0 audit_backlog_limit=64
[  589.184799][T12223] audit: backlog limit exceeded
[  589.190274][T12223] audit: audit_backlog=65 > audit_backlog_limit=64
[  589.338730][T12300] fuse: Bad value for 'fd'
[  589.367376][T12290] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  589.376841][T12290] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  589.385067][T12290] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  591.244399][ T5826] Bluetooth: hci2: unexpected event for opcode 0x1003
[  591.253914][ T5826] Bluetooth: hci2: ACL packet for unknown connection handle 172
[  591.421560][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  591.427605][ T5826] Bluetooth: hci0: command 0x0406 tx timeout
[  591.460026][T12310] syz.2.1743 (12310): drop_caches: 2
[  591.551533][   T54] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  591.741918][   T54] usb 4-1: Using ep0 maxpacket: 8
[  591.786472][   T54] usb 4-1: unable to read config index 0 descriptor/start: -61
[  591.809348][   T54] usb 4-1: can't read configurations, error -61
[  591.851715][ T5886] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  591.961604][   T54] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  592.032697][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  592.075837][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.121790][   T54] usb 4-1: Using ep0 maxpacket: 8
[  592.142955][ T5886] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  592.183505][ T5886] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  592.217857][   T54] usb 4-1: unable to read config index 0 descriptor/start: -61
[  592.228013][ T5886] usb 3-1: Manufacturer: syz
[  592.246324][   T54] usb 4-1: can't read configurations, error -61
[  592.271129][   T54] usb usb4-port1: attempt power cycle
[  592.277684][ T5886] usb 3-1: config 0 descriptor??
[  592.641997][   T54] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  592.674479][   T54] usb 4-1: Using ep0 maxpacket: 8
[  592.750107][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'.
[  592.766606][T12336] binder: 12334:12336 ioctl 40047435 2000000006c0 returned -22
[  592.846543][ T5886] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  592.856382][ T5886] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  592.864769][ T5886] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  592.872049][   T54] usb 4-1: unable to read config index 0 descriptor/start: -61
[  592.879629][   T54] usb 4-1: can't read configurations, error -61
[  592.887910][ T5886] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  592.895166][ T5886] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  592.917437][ T5886] cougar 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  593.899740][ T5886] usb 3-1: USB disconnect, device number 59
[  593.969257][   T30] kauditd_printk_skb: 451 callbacks suppressed
[  593.969285][   T30] audit: type=1400 audit(1750461050.754:12268): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  594.018284][   T54] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  594.098022][   T30] audit: type=1400 audit(1750461050.864:12269): avc:  denied  { execmem } for  pid=12339 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  594.203158][   T54] usb 4-1: Using ep0 maxpacket: 8
[  594.211964][   T30] audit: type=1400 audit(1750461050.874:12270): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.237796][   T30] audit: type=1400 audit(1750461050.874:12271): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.315634][   T30] audit: type=1400 audit(1750461050.914:12272): avc:  denied  { read write } for  pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.319665][   T54] usb 4-1: device descriptor read/all, error -71
[  594.411298][   T30] audit: type=1400 audit(1750461050.914:12273): avc:  denied  { read write open } for  pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.522374][   T54] usb usb4-port1: unable to enumerate USB device
[  594.553595][   T30] audit: type=1400 audit(1750461050.914:12274): avc:  denied  { ioctl } for  pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.608068][T12349] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.608607][T12353] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.646220][T12354] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.771009][T12351] fido_id[12351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  594.930785][T12359] FAT-fs (nullb0): bogus number of reserved sectors
[  594.981013][T12359] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  595.153061][ T7364] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  595.272090][ T5826] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  595.280766][ T5826] Bluetooth: hci2: Injecting HCI hardware error event
[  595.292542][ T5826] Bluetooth: hci2: hardware error 0x00
[  596.211606][ T7364] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  596.229510][T12365] binder: 12361:12365 ioctl c018620c 200000000000 returned -1
[  596.247356][ T7364] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  596.316971][ T7364] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  596.544314][ T7364] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  596.563032][ T7364] usb 2-1: Manufacturer: syz
[  596.575577][ T7364] usb 2-1: SerialNumber: syz
[  596.865575][ T7364] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  596.904383][ T7364] usb 2-1: USB disconnect, device number 62
[  597.344253][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  599.022891][   T30] kauditd_printk_skb: 337 callbacks suppressed
[  599.022905][   T30] audit: type=1400 audit(1750461055.814:12597): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  599.056807][   T30] audit: type=1400 audit(1750461055.814:12598): avc:  denied  { read write open } for  pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  599.083444][   T30] audit: type=1400 audit(1750461055.814:12599): avc:  denied  { ioctl } for  pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  599.109064][    C0] vkms_vblank_simulate: vblank timer overrun
[  599.910666][   T30] audit: type=1400 audit(1750461055.924:12600): avc:  denied  { create } for  pid=12396 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  599.934467][   T30] audit: type=1400 audit(1750461055.924:12601): avc:  denied  { prog_load } for  pid=12396 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  599.954929][   T30] audit: type=1400 audit(1750461055.924:12602): avc:  denied  { bpf } for  pid=12396 comm="syz.0.1772" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  599.975576][    C0] vkms_vblank_simulate: vblank timer overrun
[  599.985656][   T30] audit: type=1400 audit(1750461055.934:12603): avc:  denied  { create } for  pid=12396 comm="syz.0.1772" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  600.007278][    C0] vkms_vblank_simulate: vblank timer overrun
[  600.021951][   T30] audit: type=1400 audit(1750461055.964:12604): avc:  denied  { write } for  pid=12390 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  600.042634][    C0] vkms_vblank_simulate: vblank timer overrun
[  600.058972][   T30] audit: type=1400 audit(1750461056.814:12605): avc:  denied  { read write } for  pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  600.139175][   T30] audit: type=1400 audit(1750461056.814:12606): avc:  denied  { read write open } for  pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  600.164285][    C0] vkms_vblank_simulate: vblank timer overrun
[  601.208685][T12420] blktrace: Concurrent blktraces are not allowed on loop3
[  602.112186][T12422] /dev/nbd4: Can't open blockdev
[  602.660492][T12441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1783'.
[  602.941832][ T5886] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  603.174142][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  603.216518][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.251903][ T5886] usb 1-1: Product: syz
[  603.256213][ T5886] usb 1-1: Manufacturer: syz
[  603.260840][ T5886] usb 1-1: SerialNumber: syz
[  603.367882][ T5886] usb 1-1: config 0 descriptor??
[  603.398878][ T5886] gspca_main: kinect-2.14.0 probing 045e:02bf
[  604.061605][   T30] kauditd_printk_skb: 307 callbacks suppressed
[  604.061617][   T30] audit: type=1400 audit(1750461060.844:12914): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.149812][   T30] audit: type=1400 audit(1750461060.844:12915): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.206488][   T30] audit: type=1400 audit(1750461060.874:12916): avc:  denied  { perfmon } for  pid=12459 comm="syz.2.1787" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.227520][    C1] vkms_vblank_simulate: vblank timer overrun
[  604.369434][   T30] audit: type=1400 audit(1750461060.894:12917): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.520216][   T30] audit: type=1400 audit(1750461060.894:12918): avc:  denied  { perfmon } for  pid=12459 comm="syz.2.1787" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.541310][    C1] vkms_vblank_simulate: vblank timer overrun
[  604.548614][   T30] audit: type=1400 audit(1750461060.894:12919): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  604.586145][   T30] audit: type=1400 audit(1750461060.894:12920): avc:  denied  { perfmon } for  pid=12459 comm="syz.2.1787" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  605.131692][   T30] audit: type=1400 audit(1750461060.894:12921): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  605.155565][   T30] audit: type=1400 audit(1750461060.894:12922): avc:  denied  { perfmon } for  pid=12459 comm="syz.2.1787" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  605.176617][    C1] vkms_vblank_simulate: vblank timer overrun
[  605.281577][   T30] audit: type=1400 audit(1750461060.894:12923): avc:  denied  { bpf } for  pid=12459 comm="syz.2.1787" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  605.316421][ T7364] usb 1-1: USB disconnect, device number 59
[  605.324476][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'.
[  605.771554][ T7364] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  605.795687][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'.
[  605.942030][ T7364] usb 2-1: Using ep0 maxpacket: 8
[  606.003876][ T7364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  606.040191][ T7364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024
[  606.082014][ T7364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  606.121709][ T1208] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  606.150958][ T7364] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  606.206145][ T7364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.294444][ T7364] usb 2-1: config 0 descriptor??
[  606.335669][ T1208] usb 3-1: Using ep0 maxpacket: 8
[  606.463797][ T1208] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  606.500178][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.500868][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1794'.
[  606.518262][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1794'.
[  606.549200][ T1208] usb 3-1: Product: syz
[  606.554647][T12482] veth5: entered promiscuous mode
[  606.559827][T12482] veth5: entered allmulticast mode
[  606.565549][ T1208] usb 3-1: Manufacturer: syz
[  606.580026][ T1208] usb 3-1: SerialNumber: syz
[  606.606961][ T1208] usb 3-1: config 0 descriptor??
[  606.627038][ T1208] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  606.851617][ T7364] logitech 0003:046D:C293.0022: unknown main item tag 0x0
[  606.858821][ T7364] logitech 0003:046D:C293.0022: unknown main item tag 0x0
[  606.882050][ T7364] logitech 0003:046D:C293.0022: unknown main item tag 0x0
[  606.896362][ T7364] logitech 0003:046D:C293.0022: unknown main item tag 0x0
[  606.944645][ T7364] logitech 0003:046D:C293.0022: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0
[  606.974178][ T7364] logitech 0003:046D:C293.0022: no inputs found
[  607.148444][  T916] usb 2-1: USB disconnect, device number 63
[  607.405022][T12488] fido_id[12488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  607.862249][T12463] [U] 
[  608.238167][ T1208] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32
[  608.327881][ T1208] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  608.608177][T12509] blktrace: Concurrent blktraces are not allowed on loop3
[  609.085384][   T30] kauditd_printk_skb: 316 callbacks suppressed
[  609.085400][   T30] audit: type=1400 audit(1750461065.874:13240): avc:  denied  { prog_load } for  pid=12504 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  609.129140][   T30] audit: type=1400 audit(1750461065.874:13241): avc:  denied  { bpf } for  pid=12504 comm="syz.3.1801" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  609.164585][ T1208] usb 3-1: USB disconnect, device number 60
[  609.187196][   T30] audit: type=1400 audit(1750461065.874:13242): avc:  denied  { prog_load } for  pid=12500 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  609.501979][   T30] audit: type=1400 audit(1750461065.874:13243): avc:  denied  { write } for  pid=12500 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  609.636393][   T30] audit: type=1400 audit(1750461065.874:13244): avc:  denied  { read write } for  pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  609.681123][   T30] audit: type=1400 audit(1750461065.874:13245): avc:  denied  { read write open } for  pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  609.738504][T12506] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1801'.
[  609.782176][T12518] audit: audit_backlog=65 > audit_backlog_limit=64
[  609.788804][T12518] audit: audit_lost=750 audit_rate_limit=0 audit_backlog_limit=64
[  609.796886][T12518] audit: backlog limit exceeded
[  609.807232][T12516] audit: audit_backlog=65 > audit_backlog_limit=64
[  610.131735][  T916] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  610.188485][T12526] SELinux:  Context Ü is not valid (left unmapped).
[  610.360709][T12526] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  610.391615][ T5140] Bluetooth: hci1: command 0x0406 tx timeout
[  610.555651][  T916] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  610.575174][  T916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.597582][  T916] usb 4-1: Product: syz
[  610.615346][  T916] usb 4-1: Manufacturer: syz
[  610.627054][  T916] usb 4-1: SerialNumber: syz
[  610.667647][  T916] usb 4-1: config 0 descriptor??
[  610.716135][  T916] gspca_main: kinect-2.14.0 probing 045e:02bf
[  611.978848][   T54] usb 4-1: USB disconnect, device number 61
[  612.532110][   T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
[  612.547060][   T31]       Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0
[  612.641570][T12564] blktrace: Concurrent blktraces are not allowed on loop3
[  612.772174][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  612.995068][   T31] task:kworker/1:0     state:D stack:19720 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00004000
[  613.007202][   T31] Workqueue: usb_hub_wq hub_event
[  613.075298][   T31] Call Trace:
[  613.078720][   T31]  <TASK>
[  613.081787][   T31]  __schedule+0x116a/0x5de0
[  613.086321][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  613.091352][   T31]  ? __pfx___schedule+0x10/0x10
[  613.096372][   T31]  ? find_held_lock+0x2b/0x80
[  613.101037][   T31]  ? schedule+0x2d7/0x3a0
[  613.105484][   T31]  schedule+0xe7/0x3a0
[  613.110148][   T31]  schedule_preempt_disabled+0x13/0x30
[  613.115776][   T31]  __mutex_lock+0x6c7/0xb90
[  613.122877][   T31]  ? hub_event+0x2434/0x4fa0
[  613.131303][   T31]  ? hub_event+0x292b/0x4fa0
[  613.161217][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  613.191493][   T31]  ? irqentry_exit+0x3b/0x90
[  613.198683][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  613.227009][   T31]  ? hub_event+0xb68/0x4fa0
[  613.239448][   T31]  ? hub_event+0x292b/0x4fa0
[  613.251516][   T31]  hub_event+0x292b/0x4fa0
[  613.256999][   T31]  ? __pfx_hub_event+0x10/0x10
[  613.273742][   T31]  ? rcu_is_watching+0x12/0xc0
[  613.290658][   T31]  ? irqentry_exit+0x3b/0x90
[  613.305709][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  613.348227][   T31]  process_one_work+0x9cc/0x1b70
[  613.348258][   T31]  ? __pfx_wg_packet_encrypt_worker+0x10/0x10
[  613.348274][   T31]  ? __pfx_process_one_work+0x10/0x10
[  613.348290][   T31]  ? assign_work+0x1a0/0x250
[  613.348310][   T31]  worker_thread+0x6c8/0xf10
[  613.348328][   T31]  ? __pfx_worker_thread+0x10/0x10
[  613.348339][   T31]  kthread+0x3c2/0x780
[  613.348350][   T31]  ? __pfx_kthread+0x10/0x10
[  613.348361][   T31]  ? rcu_is_watching+0x12/0xc0
[  613.348376][   T31]  ? __pfx_kthread+0x10/0x10
[  613.348387][   T31]  ret_from_fork+0x5d4/0x6f0
[  613.348404][   T31]  ? __pfx_kthread+0x10/0x10
[  613.348414][   T31]  ret_from_fork_asm+0x1a/0x30
[  613.348434][   T31]  </TASK>
[  613.349078][   T31] 
[  613.349078][   T31] Showing all locks held in the system:
[  613.349091][   T31] 5 locks held by kworker/0:1/10:
[  613.349148][   T31]  #0: ffff888144681948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  613.349203][   T31]  #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  613.349250][   T31]  #2: ffff88802af2c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  613.349296][   T31]  #3: ffff88802af2f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0
[  613.349343][   T31]  #4: ffff888144785168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0
[  613.349391][   T31] 4 locks held by kworker/u8:0/12:
[  613.349404][   T31] 5 locks held by kworker/1:0/24:
[  613.349414][   T31]  #0: ffff888144681948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  613.349461][   T31]  #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  613.349509][   T31]  #2: ffff88802aeef198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  613.349555][   T31]  #3: ffff88802af8a510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0
[  613.349603][   T31]  #4: ffff888144785168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0
[  613.349650][   T31] 1 lock held by khungtaskd/31:
[  613.349660][   T31]  #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  613.349735][   T31] 2 locks held by getty/5574:
[  613.349747][   T31]  #0: ffff888036fe20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  613.349798][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  613.349860][   T31] 1 lock held by syz.4.1814/12556:
[  613.349871][   T31]  #0: ffff88807acb6d60 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1d8/0x450
[  613.349926][   T31] 1 lock held by syz.4.1814/12558:
[  613.349937][   T31] 10 locks held by syz.0.1815/12562:
[  613.349947][   T31]  #0: ffff88802e86c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  613.349996][   T31]  #1: ffff88802e86c130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.constprop.0+0x283/0x9b0
[  613.350050][   T31]  #2: ffff88802e86c2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1b9/0x1160
[  613.350095][   T31]  #3: ffffc9000631b380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x549/0x1160
[  613.350141][   T31]  #4: ffffffff8e5b2240 (console_lock){+.+.}-{0:0}, at: do_con_write+0x152/0x8280
[  613.354493][   T31]  #5: ffff888146af7a80 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_pan_display+0xd6/0xa40
[  613.354554][   T31]  #6: ffff888025d881b8 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80
[  613.354602][   T31]  #7: ffff888146af7898 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x580
[  613.354658][   T31]  #8: ffffc9000fe574f8 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  613.354713][   T31]  #9: ffffc9000fe57520 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  613.354771][   T31] 2 locks held by syz.2.1816/12561:
[  613.354782][   T31] 
[  613.354787][   T31] =============================================
[  613.354787][   T31] 
[  613.354795][   T31] NMI backtrace for cpu 1
[  613.354806][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  613.354831][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  613.354841][   T31] Call Trace:
[  613.354847][   T31]  <TASK>
[  613.354854][   T31]  dump_stack_lvl+0x116/0x1f0
[  613.354881][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  613.354901][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  613.354923][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  613.354943][   T31]  watchdog+0xf70/0x12c0
[  613.354965][   T31]  ? __pfx_watchdog+0x10/0x10
[  613.354980][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  613.355004][   T31]  ? __kthread_parkme+0x19e/0x250
[  613.355027][   T31]  ? __pfx_watchdog+0x10/0x10
[  613.355043][   T31]  kthread+0x3c2/0x780
[  613.355059][   T31]  ? __pfx_kthread+0x10/0x10
[  613.355076][   T31]  ? rcu_is_watching+0x12/0xc0
[  613.355097][   T31]  ? __pfx_kthread+0x10/0x10
[  613.355114][   T31]  ret_from_fork+0x5d4/0x6f0
[  613.355137][   T31]  ? __pfx_kthread+0x10/0x10
[  613.355152][   T31]  ret_from_fork_asm+0x1a/0x30
[  613.355182][   T31]  </TASK>
[  613.355188][   T31] Sending NMI from CPU 1 to CPUs 0:
[  613.355211][    C0] NMI backtrace for cpu 0
[  613.355221][    C0] CPU: 0 UID: 0 PID: 5802 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  613.355238][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  613.355246][    C0] RIP: 0010:__lock_acquire+0x3f3/0x1c90
[  613.355267][    C0] Code: 00 4c 89 ee 48 89 ef e8 9b f3 ff ff 85 c0 74 5e ba 08 00 00 00 4c 89 ee 48 89 ef e8 87 f3 ff ff 85 c0 74 4a 8b 05 fd e4 43 19 <85> c0 74 72 48 8b 8d e0 0a 00 00 85 db 0f 85 56 03 00 00 8b 05 e4
[  613.355281][    C0] RSP: 0018:ffffc90003c1f778 EFLAGS: 00000002
[  613.355292][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff95d42858
[  613.355301][    C0] RDX: 0000000000000000 RSI: ffff88807b8b5398 RDI: ffff88807b8b4880
[  613.355310][    C0] RBP: ffff88807b8b4880 R08: 0000000000000000 R09: 0000000000000001
[  613.355318][    C0] R10: 0000000000000028 R11: 0000000000000001 R12: ffff88807b8b5370
[  613.355327][    C0] R13: ffff88807b8b5398 R14: 0000000000000001 R15: 0000000000000001
[  613.355335][    C0] FS:  0000555557f33500(0000) GS:ffff888124753000(0000) knlGS:0000000000000000
[  613.355349][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  613.355358][    C0] CR2: 0000200000003000 CR3: 0000000028b33000 CR4: 00000000003526f0
[  613.355367][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  613.355375][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  613.355383][    C0] Call Trace:
[  613.355387][    C0]  <TASK>
[  613.355396][    C0]  lock_acquire+0x179/0x350
[  613.355414][    C0]  ? avc_alloc_node+0xe0/0x6a0
[  613.355436][    C0]  avc_alloc_node+0x268/0x6a0
[  613.355454][    C0]  ? avc_alloc_node+0xe0/0x6a0
[  613.355472][    C0]  ? avc_alloc_node+0xe0/0x6a0
[  613.355492][    C0]  avc_compute_av+0x100/0x7f0
[  613.355512][    C0]  avc_perm_nonode+0xab/0x180
[  613.355531][    C0]  ? __pfx_avc_perm_nonode+0x10/0x10
[  613.355552][    C0]  ? find_held_lock+0x2b/0x80
[  613.355567][    C0]  ? avc_has_perm_noaudit+0x2bd/0x3b0
[  613.355582][    C0]  avc_has_perm_noaudit+0x2de/0x3b0
[  613.355594][    C0]  ? trace_sched_exit_tp+0xde/0x130
[  613.355612][    C0]  avc_has_perm+0xc0/0x1c0
[  613.355624][    C0]  ? __pfx_avc_has_perm+0x10/0x10
[  613.355639][    C0]  inode_has_perm+0x168/0x1d0
[  613.355653][    C0]  file_has_perm+0x2e4/0x350
[  613.355666][    C0]  ? __pfx_file_has_perm+0x10/0x10
[  613.355680][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  613.355700][    C0]  selinux_file_permission+0x498/0x660
[  613.355719][    C0]  security_file_permission+0x1e3/0x210
[  613.355737][    C0]  rw_verify_area+0xb9/0x680
[  613.355753][    C0]  vfs_read+0x150/0xc60
[  613.355769][    C0]  ? find_held_lock+0x2b/0x80
[  613.355783][    C0]  ? __might_fault+0xe3/0x190
[  613.355800][    C0]  ? __pfx_vfs_read+0x10/0x10
[  613.355816][    C0]  ? rcu_is_watching+0x12/0xc0
[  613.355831][    C0]  ? __rseq_handle_notify_resume+0x681/0x10e0
[  613.355854][    C0]  ksys_read+0x1f8/0x250
[  613.355868][    C0]  ? __pfx_ksys_read+0x10/0x10
[  613.355886][    C0]  do_syscall_64+0xcd/0x4c0
[  613.355906][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.355919][    C0] RIP: 0033:0x7f461438d2fd
[  613.355930][    C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 82 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec
[  613.355942][    C0] RSP: 002b:00007ffdb317e818 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  613.355954][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f461438d2fd
[  613.355962][    C0] RDX: 0000000000000004 RSI: 00007ffdb317e82c RDI: 0000000000000003
[  613.355971][    C0] RBP: 0000000000000000 R08: 000000000001cf48 R09: 00007f46151a4000
[  613.355979][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb317ec40
[  613.355987][    C0] R13: 0000000000000004 R14: 00007ffdb317e82c R15: 00007ffdb317e8c0
[  613.356000][    C0]  </TASK>
[  613.356207][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  613.356219][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) 
[  613.356240][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  613.356250][   T31] Call Trace:
[  613.356256][   T31]  <TASK>
[  613.356262][   T31]  dump_stack_lvl+0x3d/0x1f0
[  613.356288][   T31]  panic+0x71c/0x800
[  613.356314][   T31]  ? __pfx_panic+0x10/0x10
[  613.356336][   T31]  ? __pfx__printk+0x10/0x10
[  613.356350][   T31]  ? ret_from_fork_asm+0x1a/0x30
[  613.356371][   T31]  ? nmi_backtrace_stall_check+0x6e/0x540
[  613.356398][   T31]  ? irq_work_queue+0xce/0x100
[  613.356421][   T31]  ? watchdog+0xdda/0x12c0
[  613.356439][   T31]  ? watchdog+0xdcd/0x12c0
[  613.356461][   T31]  watchdog+0xdeb/0x12c0
[  613.356484][   T31]  ? __pfx_watchdog+0x10/0x10
[  613.356501][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  613.356524][   T31]  ? __kthread_parkme+0x19e/0x250
[  613.356549][   T31]  ? __pfx_watchdog+0x10/0x10
[  613.356567][   T31]  kthread+0x3c2/0x780
[  613.356583][   T31]  ? __pfx_kthread+0x10/0x10
[  613.356599][   T31]  ? rcu_is_watching+0x12/0xc0
[  613.356618][   T31]  ? __pfx_kthread+0x10/0x10
[  613.356636][   T31]  ret_from_fork+0x5d4/0x6f0
[  613.356658][   T31]  ? __pfx_kthread+0x10/0x10
[  613.356675][   T31]  ret_from_fork_asm+0x1a/0x30
[  613.356705][   T31]  </TASK>
[  613.356926][   T31] Kernel Offset: disabled