last executing test programs:

11m50.14236268s ago: executing program 4 (id=269):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x281e, 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r2, r2, 0x0, 0x4)
sendmsg$tipc(r2, 0x0, 0x4000800)
io_submit(0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, 0x0)
gettid()
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x7}, 0x8)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)

11m47.404314815s ago: executing program 4 (id=275):
r0 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000080)=""/182, 0xb6}], 0x2, 0xfffffffe, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
set_mempolicy(0x2, &(0x7f00000001c0)=0x8005, 0x9)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xb)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', <r6=>0x0})
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x12}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{}, 0x8}}}, 0x7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000000000000000000000068006300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400058008000500", @ANYRES32=r6, @ANYBLOB="1f98f029ce1b673dc98188b01669557d76bd871ef3a12c7d63c56c59587505de0c91fbdef4d58850269443d9962902c3327d473fe0f23b815d846d43b0deba8bd2bb65f4fc0fa6e5177b3a207297d57adc5c8d4ceca3bb0a24e77c91ab1ff926154e7a698f31f00873"], 0x3c}, 0x1, 0x4800}, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f00000000c0)={0xfffffffe, [0x3b, 0xffff0000, 0x40], [{0x0, 0x9, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x35})
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0)
socket(0x0, 0x4, 0x29)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00')
pread64(r7, &(0x7f0000000240)=""/206, 0xce, 0x80000000)
wait4(0x0, 0x0, 0x0, 0x0)

11m47.13494533s ago: executing program 4 (id=277):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x802, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r0, &(0x7f0000000400)=""/228, 0xe4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280))
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200000009000100"], 0x1e4}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x24, &(0x7f0000000880)="d40b409b492157c5ab29c77f2f60554480e079f9dcc30977508a6099ec1cf083aa6c2eb9"}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0xa1, &(0x7f0000000080)="54667cf3465a7e36c33a2a0683111f2cf7bc362fe2f01f0b4f003cf43b9b7961d7cf38ea71cacb2f5e468d0da8048d2da99652c77798d25ade47f3114236040a6dc6c50330f298a661bf34a9e68b187cd27c87ecc10a16b4f30ebc55376684739d08fc32d0c11a60ccfb730bf88c286ded43385b0cbbb910255f424817e9730f601b14506ab8793c98921d167ca4d9c1f4e48a552afb9ed06504e31c48b1485c6f"}, {0x0, 0x0, 0xa7, &(0x7f00000004c0)="8ce4918f0867f7383b224c943878137192ecfc94130fcff9ef318679faec025a60c7e6b7e33c5fcef3f932e2c835421b1e20683f4007cf9f9375221c82e50590e353509d00d7385a1d56d8e166d68af13e14289872e7e06e8bac76a64ef96bf23bec471bde78bdb180e2a77c5e18767a88d88400ddd3a33b89cd8762cb0126f5e39dcdc63e115556cecfc48b9a9a192c53fd31bf2ccabb2fc290b1e35a36b7795e55943f882bdc"}, {0x0, 0x0, 0x4a, &(0x7f0000000280)="ea156a8b46f22243f0ec72d35db6866fffa928bee67a9edeefaf8bc9ef9d0298fc467fa5831e646748e5245f7f764abccdcf9fc35c2daef493c598056e4cad3d288bba0be35f06f92692"}, {0x0, 0x0, 0x68, &(0x7f0000000340)="ddcb3ede94ef129681394f01d96c9ef96799bf156506586f4b41aa9483c9d5f93b0039bc6a63c55e82ca058caf2278cd1e22acb5d60b6290faf1a365d8a55fb42398b618ede4fe8d8a68df0cbb03ad77b286c950e1056ebc55e154f0859d7843142198ba9adcc246"}], 0x7})

11m44.887611821s ago: executing program 4 (id=280):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000001980)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

11m43.154720161s ago: executing program 4 (id=289):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x749bc, 0x2})

11m42.770702914s ago: executing program 4 (id=293):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000700000000000000000085000000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x3d, 0x300, 0x0, 0x1, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

11m27.120747764s ago: executing program 32 (id=293):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000700000000000000000085000000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x3d, 0x300, 0x0, 0x1, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

11m4.838275419s ago: executing program 0 (id=361):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r4}, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5)
sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1}, 0x14}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)

11m3.590437161s ago: executing program 0 (id=364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000)
mount$cgroup(0x0, 0x0, 0x0, 0x10000, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
msgget(0x1, 0x50)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r2, 0x12)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)

11m2.809571288s ago: executing program 0 (id=367):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x16b)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa)
openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0)
openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x1896c7b1b5362330, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil)
mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

11m1.512125831s ago: executing program 0 (id=369):
creat(0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={<r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000", @ANYRES32=r5, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
getsockname(r0, 0x0, 0x0)

10m58.783007752s ago: executing program 3 (id=374):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001940)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x20020000, 0x0, {0x0, r5}})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)

10m57.819247585s ago: executing program 3 (id=375):
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
io_setup(0x1, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}])
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x8000000, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x48010)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100))

10m55.744629917s ago: executing program 3 (id=379):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x802, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r0, &(0x7f0000000400)=""/228, 0xe4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280))
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200000009000100"], 0x1e4}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x24, &(0x7f0000000880)="d40b409b492157c5ab29c77f2f60554480e079f9dcc30977508a6099ec1cf083aa6c2eb9"}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0xa1, &(0x7f0000000080)="54667cf3465a7e36c33a2a0683111f2cf7bc362fe2f01f0b4f003cf43b9b7961d7cf38ea71cacb2f5e468d0da8048d2da99652c77798d25ade47f3114236040a6dc6c50330f298a661bf34a9e68b187cd27c87ecc10a16b4f30ebc55376684739d08fc32d0c11a60ccfb730bf88c286ded43385b0cbbb910255f424817e9730f601b14506ab8793c98921d167ca4d9c1f4e48a552afb9ed06504e31c48b1485c6f"}, {0x0, 0x0, 0xa7, &(0x7f00000004c0)="8ce4918f0867f7383b224c943878137192ecfc94130fcff9ef318679faec025a60c7e6b7e33c5fcef3f932e2c835421b1e20683f4007cf9f9375221c82e50590e353509d00d7385a1d56d8e166d68af13e14289872e7e06e8bac76a64ef96bf23bec471bde78bdb180e2a77c5e18767a88d88400ddd3a33b89cd8762cb0126f5e39dcdc63e115556cecfc48b9a9a192c53fd31bf2ccabb2fc290b1e35a36b7795e55943f882bdc"}, {0x0, 0x0, 0x4a, &(0x7f0000000280)="ea156a8b46f22243f0ec72d35db6866fffa928bee67a9edeefaf8bc9ef9d0298fc467fa5831e646748e5245f7f764abccdcf9fc35c2daef493c598056e4cad3d288bba0be35f06f92692"}, {0x0, 0x0, 0x82, &(0x7f0000000340)="ddcb3ede94ef129681394f01d96c9ef96799bf156506586f4b41aa9483c9d5f93b0039bc6a63c55e82ca058caf2278cd1e22acb5d60b6290faf1a365d8a55fb42398b618ede4fe8d8a68df0cbb03ad77b286c950e1056ebc55e154f0859d7843142198ba9adcc246511a50c7c9a504b39684ac7eced08855ec892346e92315c35221"}], 0x7})

10m53.971626881s ago: executing program 3 (id=381):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x970}}}}, {{@ip={@loopback, @dev, 0x0, 0xffffff00, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff], @ipv4=@broadcast, [0x0, 0x35be66baa0a3113a, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff00007f, 0xffffff00, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 0x9377, 0x317, 0x3a, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x2000, 0x100}, 0x1, 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800})

10m52.997759331s ago: executing program 3 (id=383):
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0xda9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x763, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040efbff2820"], 0x7)

10m52.996777398s ago: executing program 0 (id=392):
r0 = socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x7)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x1, 0x4, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x4, 0x1, {0x2}})
io_uring_enter(r2, 0x47f6, 0x8095ac, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd9d}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)

10m51.919478931s ago: executing program 0 (id=385):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180)
getpid()
r1 = syz_io_uring_setup(0x629, &(0x7f0000000140)={0x0, 0x2117, 0x400, 0x1}, 0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents(r0, &(0x7f0000000140)=""/30, 0x1e)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000800)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r4, r4, 0x0, 0x30)

10m51.917875369s ago: executing program 3 (id=386):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)

10m36.342380073s ago: executing program 33 (id=385):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180)
getpid()
r1 = syz_io_uring_setup(0x629, &(0x7f0000000140)={0x0, 0x2117, 0x400, 0x1}, 0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents(r0, &(0x7f0000000140)=""/30, 0x1e)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000800)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r4, r4, 0x0, 0x30)

10m36.224073708s ago: executing program 34 (id=386):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)

10m33.240607762s ago: executing program 5 (id=418):
socket$kcm(0x2, 0x200000000000001, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r2], 0x50}}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x25, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, 0xffffffffffffffff, 0x0)

10m32.311393806s ago: executing program 5 (id=421):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x10}, 0x18)
sendmmsg(r1, 0x0, 0x0, 0x3ec0)
close(r0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r3, r3)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/121, 0x0})
r5 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0xffffffff, 0x10100, 0x0, 0x4}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r4, &(0x7f0000001600)={0x2020}, 0x2020)

10m32.200154156s ago: executing program 5 (id=422):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000020c0)=0x6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[], 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
poll(&(0x7f0000000040), 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
symlinkat(&(0x7f0000000180)='./file0/../file0\x00', r3, &(0x7f0000002080)='./file0/../file0\x00')
openat(r2, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001f0071113a000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

10m31.780710723s ago: executing program 5 (id=423):
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e5", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r4, 0x3)
socket$inet_dccp(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c090000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

10m30.832496878s ago: executing program 5 (id=424):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
r4 = socket$kcm(0x11, 0xa, 0x300)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfe33)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
socket$inet6_dccp(0xa, 0x6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
pwritev2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0)

10m30.56722437s ago: executing program 5 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x81)

10m15.465117755s ago: executing program 35 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x81)

9m4.180521578s ago: executing program 6 (id=570):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084102, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0xd000})
sendmsg$802154_dgram(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)="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", 0xc16}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10)
fcntl$notify(r5, 0x402, 0x3)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x8000003d)
fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0)

9m2.700907024s ago: executing program 6 (id=574):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod(0x0, 0x8001420, 0x0)
r4 = syz_open_dev$loop(0x0, 0x2, 0x40)
ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
r5 = fcntl$dupfd(r0, 0x0, r1)
preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r2})

9m1.402819462s ago: executing program 6 (id=576):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r5 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

9m0.36445715s ago: executing program 6 (id=582):
socket$packet(0x11, 0x2, 0x300)
memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x1e\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301)
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x4, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x4e21, 0x2, 0x800, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

8m55.93694888s ago: executing program 6 (id=591):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x200000c0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000600)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x7e77, 0x2b49, 0x0, 0x0, 0x0)

8m53.572503801s ago: executing program 6 (id=593):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, &(0x7f0000000100))
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x1, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x50)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)

8m37.030319798s ago: executing program 36 (id=593):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, &(0x7f0000000100))
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x1, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x50)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)

8.337267624s ago: executing program 9 (id=2947):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd(0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x20, r1, 0x1, 0x70bd27, 0x5, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

7.708665408s ago: executing program 9 (id=2950):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.072591174s ago: executing program 7 (id=2953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x30}}, 0xc000)

6.392836219s ago: executing program 8 (id=2954):
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$SHM_LOCK(0x0, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x80009)

6.075679895s ago: executing program 7 (id=2956):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2000001d, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008081)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, 0x0, 0x0)
writev(r2, &(0x7f0000000040)=[{0x0}], 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002000)=""/4096, 0x1000, 0x7)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

5.835350843s ago: executing program 8 (id=2957):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18)
write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

5.807510017s ago: executing program 9 (id=2958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x3, {0x0, 0xf0, 0x3}}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

5.545838217s ago: executing program 7 (id=2959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000300)={0x314, 0x1, 'client0\x00', 0x1, "7e02000000350a00", "3b25d78e50d5db3dcf3ff819bbf0b9d075c6ae974227f2436640bd0c2f5720ee", 0x2, 0x2})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc05c5340, &(0x7f0000000040))
tkill(r0, 0x7)

5.542627211s ago: executing program 1 (id=2960):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000001080)=""/236, 0xec}, {0x0}], 0x2, 0x42, 0x0)

5.471118322s ago: executing program 8 (id=2961):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)

5.276694329s ago: executing program 2 (id=2962):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x802, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r0, &(0x7f0000000400)=""/228, 0xe4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280))
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200000009000100"], 0x1e4}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x12, &(0x7f0000000880)="d40b409b492157c5ab29c77f2f60554480e0"}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0xa1, &(0x7f0000000080)="54667cf3465a7e36c33a2a0683111f2cf7bc362fe2f01f0b4f003cf43b9b7961d7cf38ea71cacb2f5e468d0da8048d2da99652c77798d25ade47f3114236040a6dc6c50330f298a661bf34a9e68b187cd27c87ecc10a16b4f30ebc55376684739d08fc32d0c11a60ccfb730bf88c286ded43385b0cbbb910255f424817e9730f601b14506ab8793c98921d167ca4d9c1f4e48a552afb9ed06504e31c48b1485c6f"}, {0x0, 0x0, 0xa7, &(0x7f00000004c0)="8ce4918f0867f7383b224c943878137192ecfc94130fcff9ef318679faec025a60c7e6b7e33c5fcef3f932e2c835421b1e20683f4007cf9f9375221c82e50590e353509d00d7385a1d56d8e166d68af13e14289872e7e06e8bac76a64ef96bf23bec471bde78bdb180e2a77c5e18767a88d88400ddd3a33b89cd8762cb0126f5e39dcdc63e115556cecfc48b9a9a192c53fd31bf2ccabb2fc290b1e35a36b7795e55943f882bdc"}, {0x0, 0x0, 0x4a, &(0x7f0000000280)="ea156a8b46f22243f0ec72d35db6866fffa928bee67a9edeefaf8bc9ef9d0298fc467fa5831e646748e5245f7f764abccdcf9fc35c2daef493c598056e4cad3d288bba0be35f06f92692"}, {0x0, 0x0, 0x8a, &(0x7f0000000340)="ddcb3ede94ef129681394f01d96c9ef96799bf156506586f4b41aa9483c9d5f93b0039bc6a63c55e82ca058caf2278cd1e22acb5d60b6290faf1a365d8a55fb42398b618ede4fe8d8a68df0cbb03ad77b286c950e1056ebc55e154f0859d7843142198ba9adcc246511a50c7c9a504b39684ac7eced08855ec892346e92315c352210a0a26715e9a186d"}], 0x7})

5.200689728s ago: executing program 8 (id=2963):
syz_open_procfs(0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2000001d, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008081)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000040)=[{0x0}], 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0)
pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x7)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

4.49365645s ago: executing program 7 (id=2964):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8)

4.421381266s ago: executing program 9 (id=2965):
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

4.340485596s ago: executing program 2 (id=2966):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x100000}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000001280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

3.185677465s ago: executing program 2 (id=2967):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0)

2.744818944s ago: executing program 9 (id=2968):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xe1d1}, 0x8)

2.744478704s ago: executing program 1 (id=2969):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2000001d, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008081)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000040)=[{0x0}], 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0)
pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x7)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

2.534554523s ago: executing program 8 (id=2970):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

2.518500857s ago: executing program 1 (id=2971):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x802, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r0, &(0x7f0000000400)=""/228, 0xe4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280))
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200000009000100"], 0x1e4}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0xa1, &(0x7f0000000080)="54667cf3465a7e36c33a2a0683111f2cf7bc362fe2f01f0b4f003cf43b9b7961d7cf38ea71cacb2f5e468d0da8048d2da99652c77798d25ade47f3114236040a6dc6c50330f298a661bf34a9e68b187cd27c87ecc10a16b4f30ebc55376684739d08fc32d0c11a60ccfb730bf88c286ded43385b0cbbb910255f424817e9730f601b14506ab8793c98921d167ca4d9c1f4e48a552afb9ed06504e31c48b1485c6f"}, {0x0, 0x0, 0xa7, &(0x7f00000004c0)="8ce4918f0867f7383b224c943878137192ecfc94130fcff9ef318679faec025a60c7e6b7e33c5fcef3f932e2c835421b1e20683f4007cf9f9375221c82e50590e353509d00d7385a1d56d8e166d68af13e14289872e7e06e8bac76a64ef96bf23bec471bde78bdb180e2a77c5e18767a88d88400ddd3a33b89cd8762cb0126f5e39dcdc63e115556cecfc48b9a9a192c53fd31bf2ccabb2fc290b1e35a36b7795e55943f882bdc"}, {0x0, 0x0, 0x4a, &(0x7f0000000280)="ea156a8b46f22243f0ec72d35db6866fffa928bee67a9edeefaf8bc9ef9d0298fc467fa5831e646748e5245f7f764abccdcf9fc35c2daef493c598056e4cad3d288bba0be35f06f92692"}, {0x0, 0x0, 0x8a, &(0x7f0000000340)="ddcb3ede94ef129681394f01d96c9ef96799bf156506586f4b41aa9483c9d5f93b0039bc6a63c55e82ca058caf2278cd1e22acb5d60b6290faf1a365d8a55fb42398b618ede4fe8d8a68df0cbb03ad77b286c950e1056ebc55e154f0859d7843142198ba9adcc246511a50c7c9a504b39684ac7eced08855ec892346e92315c352210a0a26715e9a186d"}], 0x6})

1.808676389s ago: executing program 7 (id=2972):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xe, 0xf, 0x4, 0x0, 0x2, 0x1, 0x8, 0x3, 0x7, 0x9, 0x0, 0x6, 0x0, 0x8, 0x1, 0xb, 0x8, 0xe, 0x2, '\x00', 0x2, 0x400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.78150539s ago: executing program 9 (id=2973):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x9, 0xffffffffffffffff, r4)

1.56518698s ago: executing program 1 (id=2974):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x8000001, 0x7}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r1, 0x13, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000400)=[0x0]}, 0x40)

1.440755743s ago: executing program 2 (id=2975):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.314310936s ago: executing program 1 (id=2976):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mmap(&(0x7f00008bb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty20(0xc, 0x4, 0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x48)

1.250820782s ago: executing program 2 (id=2977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x300000000000000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r2, r2, 0x0, 0x40008)

1.200728224s ago: executing program 8 (id=2978):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400)
ioctl$KVM_IRQFD(r0, 0x4020ae76, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2f, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1, 0x0, 0xa00369a4}, 0x38)

586.719322ms ago: executing program 2 (id=2979):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104)
r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
getpeername$ax25(0xffffffffffffffff, 0x0, 0x0)

296.123758ms ago: executing program 7 (id=2980):
syz_open_procfs(0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2000001d, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008081)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000040)=[{0x0}], 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0)
pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x7)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=2981):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2000001d, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008081)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000040)=[{0x0}], 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0)
pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x7)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

08][T11970] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22
[  778.378567][ T5867] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  778.415937][ T5867] sq905c 3-1:0.0: Reading version command failed
[  778.436285][T11970] usb 9-1: USB disconnect, device number 11
[  778.473273][ T5867] sq905c 3-1:0.0: probe with driver sq905c failed with error -71
[  778.502784][ T5867] usb 3-1: USB disconnect, device number 17
[  778.932980][ T5827] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  779.001008][T14564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.115511][T14566] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[  779.122153][T14566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  779.131367][T14566] vhci_hcd vhci_hcd.0: Device attached
[  779.165841][ T5827] usb 8-1: Using ep0 maxpacket: 8
[  779.307599][ T5827] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  779.322582][ T5827] usb 8-1: config 179 has no interface number 0
[  779.335527][ T5827] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  779.337722][ T5871] vhci_hcd: vhci_device speed not set
[  779.347967][ T5827] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  779.363349][ T5827] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  779.374599][ T5827] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  779.386089][ T5827] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  779.399411][ T5827] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  779.408519][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.425919][T14556] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  779.434145][ T5871] usb 51-1: new full-speed USB device number 6 using vhci_hcd
[  779.587823][T14567] vhci_hcd: connection reset by peer
[  779.596255][ T2969] vhci_hcd: stop threads
[  779.601341][ T2969] vhci_hcd: release socket
[  779.607529][ T2969] vhci_hcd: disconnect device
[  779.750315][T11970] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input28
[  779.785702][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  779.871800][   T46] vhci_hcd: vhci_device speed not set
[  779.950010][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  779.956820][ T5911] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  779.991542][ T5911] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.047629][ T5911] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  780.101070][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0
[  780.113526][    T8] usb 8-1: USB disconnect, device number 12
[  780.113638][    C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  780.128375][    C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending?
[  780.404547][T14581] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2274'.
[  780.765241][T14586] binder: 14585:14586 ioctl c0306201 0 returned -14
[  781.024577][    T8] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  781.088666][ T5911] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  781.121667][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.185087][ T5911] usb 3-1: config 0 descriptor??
[  782.084619][T14596] overlayfs: workdir and upperdir must reside under the same mount
[  782.097823][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  782.097837][   T29] audit: type=1400 audit(1734906089.803:344070): avc:  denied  { mount } for  pid=14595 comm="syz.7.2280" name="/" dev="ramfs" ino=39706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  782.126771][   T29] audit: type=1400 audit(1734906089.812:344071): avc:  denied  { mounton } for  pid=14595 comm="syz.7.2280" path="/348/bus" dev="ramfs" ino=39706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  782.189353][   T29] audit: type=1400 audit(1734906089.906:344072): avc:  denied  { unmount } for  pid=7734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  782.431269][ T5911] hid (null): nested delimiters
[  782.443919][ T5911] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.000A/input/input30
[  782.603696][ T5911] kye 0003:0458:5010.000A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  782.616080][    T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  782.671562][ T5911] usb 3-1: USB disconnect, device number 18
[  782.715028][ T5867] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  782.801470][    T8] usb 8-1: Using ep0 maxpacket: 8
[  782.811854][    T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  782.843077][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  782.864041][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  782.877702][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  782.885559][    T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  782.902725][ T5867] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  782.917558][    T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  782.930682][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  782.941195][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.949281][ T5867] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  783.004431][ T5867] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  783.013575][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.078818][ T5867] usb 10-1: config 0 descriptor??
[  783.202341][    T8] usb 8-1: GET_CAPABILITIES returned 0
[  783.224192][    T8] usbtmc 8-1:16.0: can't read capabilities
[  783.314364][ T5867] hdpvr 10-1:0.0: firmware version 0x0 dated 
[  783.321032][ T5867] hdpvr 10-1:0.0: untested firmware, the driver might not work.
[  783.486839][   T46] usb 8-1: USB disconnect, device number 13
[  783.822167][ T5867] hdpvr 10-1:0.0: Could not setup controls
[  783.840213][ T5867] hdpvr 10-1:0.0: registering videodev failed
[  783.939852][ T5867] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71
[  784.453742][ T5867] usb 10-1: USB disconnect, device number 6
[  784.907187][ T5871] vhci_hcd: vhci_device speed not set
[  785.088322][ T5867] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  785.294989][ T5867] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  785.334101][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.512731][T14650] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[  785.519375][T14650] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  785.527113][T14650] vhci_hcd vhci_hcd.0: Device attached
[  785.604634][T14657] Illegal XDP return value 4294967294 on prog  (id 235) dev N/A, expect packet loss!
[  785.677797][ T5867] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  785.691308][ T5867] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  785.700501][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.710933][ T5867] usb 9-1: config 0 descriptor??
[  785.790505][T14652] vhci_hcd: connection closed
[  785.790886][ T8708] vhci_hcd: stop threads
[  785.803003][ T8708] vhci_hcd: release socket
[  785.823617][ T8708] vhci_hcd: disconnect device
[  785.911308][ T5871] vhci_hcd: vhci_device speed not set
[  786.308320][   T29] audit: type=1400 audit(1734906093.769:344073): avc:  denied  { ioctl } for  pid=14666 comm="syz.2.2303" path="socket:[39833]" dev="sockfs" ino=39833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  786.425034][ T5867] hid-led 0003:1D34:0004.000B: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.8-1/input0
[  786.440853][ T5867] hid-led 0003:1D34:0004.000B: Dream Cheeky Webmail Notifier initialized
[  786.734581][    T8] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  786.800867][ T5871] usb 9-1: USB disconnect, device number 12
[  786.960293][    T8] usb 8-1: Using ep0 maxpacket: 16
[  787.074191][    T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  787.082632][    T8] usb 8-1: config 0 has no interface number 0
[  787.094220][    T8] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  787.103437][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.111530][    T8] usb 8-1: Product: syz
[  787.115691][    T8] usb 8-1: Manufacturer: syz
[  787.120353][    T8] usb 8-1: SerialNumber: syz
[  787.126554][    T8] usb 8-1: config 0 descriptor??
[  787.134606][    T8] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  787.508620][   T29] audit: type=1400 audit(1734906094.882:344074): avc:  denied  { bind } for  pid=14688 comm="syz.8.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  787.750049][   T46] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  788.037809][   T46] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  788.184390][   T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  788.347740][   T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 4
[  788.383483][   T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 13368, setting to 1023
[  788.419589][   T46] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  788.461685][   T46] usb 2-1: New USB device found, idVendor=fffb, idProduct=ffff, bcdDevice= 0.40
[  788.485807][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.515636][   T46] usb 2-1: Product: syz
[  788.531001][   T46] usb 2-1: Manufacturer: syz
[  788.545359][   T46] usb 2-1: SerialNumber: syz
[  788.556521][    T8] gspca_spca1528: reg_w err -71
[  788.568045][    T8] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71
[  788.605922][    T8] usb 8-1: USB disconnect, device number 14
[  789.909610][   T46] cdc_ncm 2-1:1.0: bind() failure
[  789.959104][   T46] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  789.984544][   T46] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  790.001799][   T46] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  790.026111][   T46] usb 2-1: USB disconnect, device number 10
[  790.101671][T14722] syzkaller1: entered promiscuous mode
[  790.182880][T14722] syzkaller1: entered allmulticast mode
[  790.857671][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2323'.
[  790.866889][T14736] nbd: must specify at least one socket
[  791.236941][T14744] netlink: 83 bytes leftover after parsing attributes in process `syz.9.2325'.
[  793.178426][T14780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  793.320974][   T29] audit: type=1400 audit(1734906100.298:344075): avc:  denied  { create } for  pid=14781 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  793.341303][   T29] audit: type=1400 audit(1734906100.298:344076): avc:  denied  { bind } for  pid=14781 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  793.361047][   T29] audit: type=1400 audit(1734906100.298:344077): avc:  denied  { name_bind } for  pid=14781 comm="syz.1.2339" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  793.382208][   T29] audit: type=1400 audit(1734906100.298:344078): avc:  denied  { node_bind } for  pid=14781 comm="syz.1.2339" saddr=::1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  793.403919][    C0] vkms_vblank_simulate: vblank timer overrun
[  793.569103][T14791] overlayfs: missing 'lowerdir'
[  794.443485][   T29] audit: type=1400 audit(1734906101.346:344079): avc:  denied  { getopt } for  pid=14806 comm="syz.9.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  794.464782][T14808] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  794.471397][T14808] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  794.478939][T14808] vhci_hcd vhci_hcd.0: Device attached
[  794.641514][T14809] vhci_hcd: connection closed
[  794.641930][T14224] vhci_hcd: stop threads
[  794.681871][T14224] vhci_hcd: release socket
[  794.691861][   T29] audit: type=1400 audit(1734906101.608:344080): avc:  denied  { write } for  pid=14815 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  794.720291][T14224] vhci_hcd: disconnect device
[  794.725190][ T5867] vhci_hcd: vhci_device speed not set
[  795.023335][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2356'.
[  795.155935][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2360'.
[  795.345900][T14837] loop9: detected capacity change from 0 to 7
[  795.357401][   T29] audit: type=1400 audit(1734906102.225:344081): avc:  denied  { ioctl } for  pid=14840 comm="syz.8.2363" path="socket:[40308]" dev="sockfs" ino=40308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  795.382338][    C0] vkms_vblank_simulate: vblank timer overrun
[  795.423562][ T8904] Dev loop9: unable to read RDB block 7
[  795.438712][ T8904]  loop9: unable to read partition table
[  795.452130][ T8904] loop9: partition table beyond EOD, truncated
[  795.479776][T14837] Dev loop9: unable to read RDB block 7
[  795.492752][T14837]  loop9: unable to read partition table
[  795.518441][T14837] loop9: partition table beyond EOD, truncated
[  795.532829][T14837] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  795.756604][T14856] netlink: 18 bytes leftover after parsing attributes in process `syz.7.2369'.
[  795.772118][T14858] hugetlbfs: syz.9.2371 (14858): Using mlock ulimits for SHM_HUGETLB is obsolete
[  795.788222][ T5911] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  795.966629][ T5911] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  795.977321][ T5911] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  796.012817][ T5911] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  796.055455][ T5911] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  796.080786][ T5911] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  796.126097][ T5911] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  796.153331][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  796.184238][ T5911] usb 9-1: Product: syz
[  796.209102][ T5911] usb 9-1: Manufacturer: syz
[  796.214233][   T29] audit: type=1400 audit(1734906103.030:344082): avc:  denied  { write } for  pid=14872 comm="syz.9.2377" path="socket:[41522]" dev="sockfs" ino=41522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  796.243948][ T5911] cdc_wdm 9-1:1.0: skipping garbage
[  796.251078][ T5911] cdc_wdm 9-1:1.0: skipping garbage
[  796.286424][ T5911] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  796.342664][ T5911] cdc_wdm 9-1:1.0: Unknown control protocol
[  796.356072][    T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  796.397149][T14875] io-wq is not configured for unbound workers
[  796.402572][T14879] input: syz1 as /devices/virtual/input/input32
[  796.623447][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.630319][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.644443][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.651081][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.657407][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.664007][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.670328][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.676931][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.683213][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.689808][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.696078][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.702672][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.709834][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.716447][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.723100][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.729696][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.735975][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.742571][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.748813][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  796.755405][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  796.780223][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  796.789247][ T5867] usb 9-1: USB disconnect, device number 13
[  796.975784][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  797.010627][    T8] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  797.046567][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.058198][   T29] audit: type=1400 audit(1734906103.815:344083): avc:  denied  { connect } for  pid=14889 comm="syz.2.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  797.088565][    T8] usb 8-1: config 0 descriptor??
[  797.643807][    T8] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  797.925493][    T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000C/input/input33
[  798.127870][T14910] dvmrp0: entered allmulticast mode
[  798.141051][T14910] dvmrp0: left allmulticast mode
[  798.163247][    T8] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  798.181319][T14908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  798.419134][T14914] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2392'.
[  798.429308][    T8] usb 8-1: USB disconnect, device number 15
[  798.697491][ T5871] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  798.838996][   T29] audit: type=1400 audit(1734906105.490:344084): avc:  denied  { read } for  pid=14941 comm="syz.9.2404" name="/" dev="configfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  798.889648][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  798.907604][   T29] audit: type=1400 audit(1734906105.508:344085): avc:  denied  { open } for  pid=14941 comm="syz.9.2404" path="/349/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  798.939969][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  798.950500][ T5871] usb 3-1: config 0 has no interfaces?
[  798.962063][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  798.977188][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.991548][ T5871] usb 3-1: config 0 descriptor??
[  799.107131][   T29] audit: type=1400 audit(1734906105.733:344086): avc:  denied  { create } for  pid=14953 comm="syz.7.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  799.132107][   T29] audit: type=1400 audit(1734906105.761:344087): avc:  denied  { ioctl } for  pid=14953 comm="syz.7.2410" path="socket:[40592]" dev="sockfs" ino=40592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  799.471954][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.472884][T14919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  799.480355][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.496300][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.503784][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.511217][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.513764][T14919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  799.518591][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.533757][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.541134][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.548740][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.556499][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.564326][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.571721][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.579926][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.587366][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.594767][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.602224][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.609678][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.617210][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.624612][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.632076][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.639511][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.644251][    T8] usb 3-1: USB disconnect, device number 19
[  799.646887][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.660822][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.668981][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.676445][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.683922][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.691722][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.699300][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.706950][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.714464][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.721975][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.731706][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.739135][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.747262][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.754685][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.762459][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.779113][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.786524][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.793989][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.801444][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.808875][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.816330][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.823777][ T5867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  799.856706][ T5867] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  799.989382][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2421'.
[  800.059480][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2423'.
[  800.183813][   T29] audit: type=1400 audit(1734906106.734:344089): avc:  denied  { read } for  pid=14989 comm="syz.1.2426" path="socket:[40682]" dev="sockfs" ino=40682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  800.267094][   T29] audit: type=1400 audit(1734906106.734:344088): avc:  denied  { shutdown } for  pid=14993 comm="syz.8.2425" lport=55953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  800.370575][   T29] audit: type=1400 audit(1734906106.771:344090): avc:  denied  { getopt } for  pid=14993 comm="syz.8.2425" lport=55953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  800.478021][    T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  800.600795][ T5867] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  800.644810][    T8] usb 10-1: Using ep0 maxpacket: 8
[  800.652667][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  800.658038][T14999] team0 (unregistering): Port device team_slave_0 removed
[  800.668317][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  800.681291][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  800.696152][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  800.708631][T14999] team0 (unregistering): Port device team_slave_1 removed
[  800.730803][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  800.741706][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.742589][T14999] team0 (unregistering): Port device netdevsim0 removed
[  800.797313][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  800.809136][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.856804][ T5867] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  800.862209][   T29] audit: type=1400 audit(1734906107.379:344091): avc:  denied  { create } for  pid=15012 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  800.876670][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.914750][ T5867] usb 9-1: config 0 descriptor??
[  800.929272][   T29] audit: type=1400 audit(1734906107.417:344092): avc:  denied  { sys_admin } for  pid=15012 comm="syz.2.2434" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  800.961219][   T29] audit: type=1400 audit(1734906107.463:344093): avc:  denied  { sys_ptrace } for  pid=15012 comm="syz.2.2434" capability=19  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  801.005723][    T8] usb 10-1: GET_CAPABILITIES returned 0
[  801.011741][    T8] usbtmc 10-1:16.0: can't read capabilities
[  801.130174][T15019] kvm: MONITOR instruction emulated as NOP!
[  801.238776][ T5827] usb 10-1: USB disconnect, device number 7
[  801.657251][ T5867] usb 9-1: language id specifier not provided by device, defaulting to English
[  801.668833][T15041] vlan0: entered allmulticast mode
[  801.706799][T15041] bond0: entered allmulticast mode
[  801.713820][T15041] bond_slave_0: entered allmulticast mode
[  801.719599][T15041] bond_slave_1: entered allmulticast mode
[  801.733390][T15041] syz_tun: entered allmulticast mode
[  801.759359][T15037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  801.787011][T15041] bond0: left allmulticast mode
[  801.792297][ T5867] letsketch 0003:6161:4D15.000E: Device info: �
[  801.800573][T15041] bond_slave_0: left allmulticast mode
[  801.819911][T15041] bond_slave_1: left allmulticast mode
[  801.825470][T15041] syz_tun: left allmulticast mode
[  802.040719][ T5867] usb 9-1: Max retries (5) exceeded reading string descriptor 201
[  802.069638][ T5867] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -71
[  802.101850][ T5867] usb 9-1: USB disconnect, device number 14
[  802.469227][T15067] overlayfs: invalid redirect ((null))
[  802.868081][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  803.465593][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  803.614017][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.771078][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  803.954198][ T5871] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  804.042746][ T5911] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  804.072023][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.097328][ T5871] usb 3-1: config 0 descriptor??
[  804.102779][T15084] VFS: could not find a valid V7 on nullb0.
[  804.214734][ T5911] usb 9-1: Using ep0 maxpacket: 16
[  804.221809][ T5911] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  804.241280][ T5911] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  804.256522][ T5911] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  804.268824][ T5911] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  804.279497][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.287592][ T5911] usb 9-1: Product: syz
[  804.292890][ T5911] usb 9-1: Manufacturer: syz
[  804.297558][ T5911] usb 9-1: SerialNumber: syz
[  804.717312][ T5141] Bluetooth: hci2: unexpected cc 0x202d length: 5 > 1
[  804.724317][ T5141] Bluetooth: hci2: unexpected event for opcode 0x202d
[  805.430227][   T29] audit: type=1400 audit(1734906111.645:344094): avc:  denied  { watch watch_reads } for  pid=15103 comm="syz.9.2467" path="/proc/1091/net/dev_snmp6" dev="proc" ino=4026533864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  805.571621][ T5871] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  805.590874][ T5911] usb 9-1: 0:2 : does not exist
[  805.647926][ T5871] ft260 0003:0403:6030.000F: chip code: 5e81 abf2
[  805.654943][ T5871] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  806.003484][T15117] netlink: 'syz.9.2473': attribute type 11 has an invalid length.
[  806.063201][ T5867] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  806.103726][   T29] audit: type=1400 audit(1734906112.271:344095): avc:  denied  { create } for  pid=15118 comm="syz.9.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  806.123535][    C1] vkms_vblank_simulate: vblank timer overrun
[  806.159298][    T8] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  806.166995][ T5871] ft260 0003:0403:6030.000F: failed to retrieve status: -71, no wakeup
[  806.180449][ T5871] ft260 0003:0403:6030.000F: failed to retrieve status: -71
[  806.190160][ T5871] ft260 0003:0403:6030.000F: failed to reset I2C controller: -71
[  806.190574][   T29] audit: type=1400 audit(1734906112.309:344096): avc:  denied  { connect } for  pid=15118 comm="syz.9.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  806.215127][ T5871] usb 3-1: USB disconnect, device number 20
[  806.244131][ T5911] usb 9-1: USB disconnect, device number 15
[  806.275068][   T29] audit: type=1400 audit(1734906112.421:344097): avc:  denied  { write } for  pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  806.277206][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  806.313933][   T29] audit: type=1400 audit(1734906112.421:344098): avc:  denied  { remove_name } for  pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  806.331362][ T5867] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  806.339805][   T29] audit: type=1400 audit(1734906112.421:344099): avc:  denied  { rename } for  pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  806.348280][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  806.376166][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  806.384398][ T5867] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  806.392580][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  806.401552][ T5867] usb 2-1: config 0 has no interface number 0
[  806.407683][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  806.418740][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  806.428602][ T5867] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  806.438479][ T5867] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  806.438498][    T8] usb 8-1: config index 0 descriptor too short (expected 200, got 144)
[  806.451582][ T5867] usb 2-1: config 0 interface 125 has no altsetting 0
[  806.467218][ T5867] usb 2-1: config 0 interface 125 has no altsetting 2
[  806.470899][T13506] udevd[13506]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  806.524499][    T8] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  806.530319][ T5867] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  806.537124][   T29] audit: type=1400 audit(1734906112.421:344100): avc:  denied  { add_name } for  pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  806.544525][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.569720][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  806.573924][ T5867] usb 2-1: Product: syz
[  806.586033][    T8] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  806.587832][ T5867] usb 2-1: Manufacturer: syz
[  806.587849][ T5867] usb 2-1: SerialNumber: syz
[  806.609996][    T8] usb 8-1: config 1 has no interface number 1
[  806.613256][ T5867] usb 2-1: config 0 descriptor??
[  806.622593][   T29] audit: type=1400 audit(1734906112.421:344101): avc:  denied  { unlink } for  pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  806.639694][T14601] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  806.653880][   T29] audit: type=1400 audit(1734906112.421:344102): avc:  denied  { create } for  pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  806.681032][ T5867] usb 2-1: selecting invalid altsetting 2
[  806.683320][    T8] usb 8-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  806.713544][T15123] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.724540][    T8] usb 8-1: config 1 interface 2 has no altsetting 1
[  806.749042][    T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  806.758397][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.766381][    T8] usb 8-1: Product: syz
[  806.770710][    T8] usb 8-1: Manufacturer: syz
[  806.775477][    T8] usb 8-1: SerialNumber: syz
[  806.803328][T15123] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.835008][T14601] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  806.846473][T14601] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.857409][T14601] usb 10-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  806.867294][T14601] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.880454][T14601] usb 10-1: config 0 descriptor??
[  806.907444][T15123] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.987670][T15123] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.993193][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  807.024980][    T8] usb 8-1: 2:2 : no or invalid class specific endpoint descriptor
[  807.067363][    T8] usb 8-1: USB disconnect, device number 16
[  807.144664][T15123] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.165113][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  807.173504][ T5911] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  807.182223][ T5911] usb 3-1: config 0 has no interface number 0
[  807.189149][T15123] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.191924][ T5911] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  807.207615][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.210547][T15123] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.215614][ T5911] usb 3-1: Product: syz
[  807.215633][ T5911] usb 3-1: Manufacturer: syz
[  807.233849][ T5911] usb 3-1: SerialNumber: syz
[  807.235941][T15123] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.255928][ T5911] usb 3-1: config 0 descriptor??
[  807.272462][ T5911] smsc95xx v2.0.0
[  807.378986][T14601] cougar 0003:060B:700A.0010: unknown main item tag 0x0
[  807.386004][T14601] cougar 0003:060B:700A.0010: unknown main item tag 0x0
[  807.412556][T13503] udevd[13503]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  807.431592][T14601] cougar 0003:060B:700A.0010: unknown main item tag 0x0
[  807.439181][T14601] cougar 0003:060B:700A.0010: unknown main item tag 0x0
[  807.465060][T14601] cougar 0003:060B:700A.0010: unknown main item tag 0x0
[  807.482850][T14601] cougar 0003:060B:700A.0010: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.9-1/input0
[  807.600282][ T5867] usb 10-1: USB disconnect, device number 8
[  807.730536][   T29] audit: type=1400 audit(1734906113.796:344103): avc:  denied  { connect } for  pid=15132 comm="syz.7.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  807.753664][    T8] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  807.868891][T14601] usb 2-1: USB disconnect, device number 11
[  807.937451][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.948770][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.959294][    T8] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  807.969397][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.980121][    T8] usb 9-1: config 0 descriptor??
[  808.192569][ T5911] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  808.414820][ T5911] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  808.444315][ T5911] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  808.477914][ T5911] usb 3-1: USB disconnect, device number 21
[  809.184845][T11970] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  809.306682][    T8] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #100: -71
[  809.338590][    T8] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71
[  809.348582][    T8] uclogic 0003:256C:006D.0011: failed probing pen v1 parameters: -71
[  809.356878][    T8] uclogic 0003:256C:006D.0011: failed probing parameters: -71
[  809.364400][    T8] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71
[  809.378760][T11970] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  809.409324][T11970] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  809.419469][T11970] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  809.437147][    T8] usb 9-1: USB disconnect, device number 16
[  809.457202][T11970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.489320][T15154] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  809.504911][T11970] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  809.852228][T11970] usb 10-1: USB disconnect, device number 9
[  810.574559][    T8] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  810.595968][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'.
[  810.747994][    T8] usb 8-1: Using ep0 maxpacket: 16
[  810.764626][    T8] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.785237][    T8] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.805959][    T8] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  810.838417][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[  810.852136][    T8] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  810.871746][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.891339][    T8] usb 8-1: config 0 descriptor??
[  811.010223][T15231] loop3: detected capacity change from 0 to 16384
[  811.079660][T15231] loop3: detected capacity change from 16384 to 16383
[  811.843962][    T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5010.0012/input/input34
[  811.875721][    T8] kye 0003:0458:5010.0012: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0
[  811.912710][    T8] usb 8-1: USB disconnect, device number 17
[  812.083611][T15246] bond0: entered promiscuous mode
[  812.088670][T15246] bond_slave_0: entered promiscuous mode
[  812.129787][T15246] bond_slave_1: entered promiscuous mode
[  812.350738][T15262] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.357874][T15262] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.408547][T15262] bridge0: entered promiscuous mode
[  812.482210][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  812.482226][   T29] audit: type=1400 audit(1734906118.239:344111): avc:  denied  { mount } for  pid=15265 comm="syz.9.2534" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  812.483406][T15258] lo speed is unknown, defaulting to 1000
[  812.492291][   T29] audit: type=1400 audit(1734906118.258:344112): avc:  denied  { watch watch_reads } for  pid=15265 comm="syz.9.2534" path="/374/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  812.539013][    C1] vkms_vblank_simulate: vblank timer overrun
[  812.593689][T15272] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2537'.
[  812.626632][   T29] audit: type=1400 audit(1734906118.379:344113): avc:  denied  { unmount } for  pid=8904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  813.621443][   T46] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  813.696197][T11970] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  813.810964][   T46] usb 3-1: Using ep0 maxpacket: 32
[  813.818402][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.844774][ T5827] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  813.861128][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.932001][T11970] usb 10-1: Using ep0 maxpacket: 32
[  813.944653][T11970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.952724][    T8] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  813.959524][   T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  813.980009][T11970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.990385][T11970] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  814.000282][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.014352][T11970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.024532][   T46] usb 3-1: config 0 descriptor??
[  814.037237][   T46] hub 3-1:0.0: USB hub found
[  814.078037][T11970] usb 10-1: config 0 descriptor??
[  814.091782][ T5827] usb 9-1: Using ep0 maxpacket: 8
[  814.108067][ T5827] usb 9-1: config 150 has an invalid interface number: 204 but max is 1
[  814.118601][ T5827] usb 9-1: config 150 has no interface number 0
[  814.123762][    T8] usb 8-1: Using ep0 maxpacket: 32
[  814.131285][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  814.135096][ T5827] usb 9-1: config 150 interface 204 has no altsetting 0
[  814.146184][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  814.149781][ T5827] usb 9-1: config 150 interface 1 has no altsetting 0
[  814.161548][    T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  814.168485][ T5827] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  814.176405][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.219927][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.223948][    T8] usb 8-1: config 0 descriptor??
[  814.248072][ T5827] usb 9-1: Product: syz
[  814.250225][    T8] hub 8-1:0.0: USB hub found
[  814.263001][ T5827] usb 9-1: Manufacturer: syz
[  814.267810][   T46] hub 3-1:0.0: 1 port detected
[  814.272666][ T5827] usb 9-1: SerialNumber: syz
[  814.465519][    T8] hub 8-1:0.0: 1 port detected
[  814.536962][ T5827] xr_serial 9-1:150.204: xr_serial converter detected
[  814.592354][T11970] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  814.897851][T11970] usb 10-1: USB disconnect, device number 10
[  814.917920][    T8] usb 8-1: USB disconnect, device number 18
[  814.962117][   T46] hub 3-1:0.0: activate --> -90
[  815.393166][ T5827] usb 9-1: xr_serial converter now attached to ttyUSB0
[  815.401452][T14601] usb 3-1: USB disconnect, device number 22
[  815.539116][   T29] audit: type=1400 audit(1734906121.101:344114): avc:  denied  { ioctl } for  pid=15306 comm="syz.9.2550" path="socket:[42683]" dev="sockfs" ino=42683 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  815.692402][T14601] usb 9-1: USB disconnect, device number 17
[  815.704765][T15310] loop9: detected capacity change from 0 to 7
[  815.716187][T14601] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  815.726572][T14601] xr_serial 9-1:150.204: device disconnected
[  815.732367][T15310] Dev loop9: unable to read RDB block 7
[  815.753621][T15310]  loop9: unable to read partition table
[  815.770222][T15310] loop9: partition table beyond EOD, truncated
[  815.787418][T15310] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  815.840094][   T29] audit: type=1400 audit(1734906121.382:344115): avc:  denied  { read } for  pid=15313 comm="syz.1.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  816.189927][T15321] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2554'.
[  816.533668][T15323] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2556'.
[  816.592551][   T29] audit: type=1400 audit(1734906122.084:344116): avc:  denied  { watch } for  pid=15325 comm="syz.7.2557" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  816.620093][    C1] vkms_vblank_simulate: vblank timer overrun
[  816.751505][T15329] netlink: 'syz.2.2559': attribute type 39 has an invalid length.
[  816.829115][ T5827] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  817.022471][ T5827] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  817.052353][ T5827] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64
[  817.143670][ T5827] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  817.246738][ T5827] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  817.288957][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.354685][ T5827] usb 9-1: Product: syz
[  817.358887][ T5827] usb 9-1: Manufacturer: syz
[  817.383708][ T5827] usb 9-1: SerialNumber: syz
[  817.418356][T15326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  817.596377][T15353] netlink: 'syz.2.2568': attribute type 4 has an invalid length.
[  817.629632][T15353] netlink: 'syz.2.2568': attribute type 4 has an invalid length.
[  817.812535][T15326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  818.017857][T15365] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2569'.
[  818.588657][T15326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  818.812490][   T29] audit: type=1400 audit(1734906124.170:344117): avc:  denied  { getopt } for  pid=15373 comm="syz.7.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  818.846999][ T5827] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[  818.853678][ T5827] cdc_ncm 9-1:1.0: setting rx_max = 16384
[  819.080269][ T5827] cdc_ncm 9-1:1.0: setting tx_max = 16384
[  819.148417][T11970] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  819.166493][T15380] input: syz0 as /devices/virtual/input/input35
[  819.176394][ T5827] cdc_ncm 9-1:1.0 eth21: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  819.262412][ T5827] usb 9-1: USB disconnect, device number 18
[  819.305528][ T5827] cdc_ncm 9-1:1.0 eth21: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[  819.352438][T11970] usb 3-1: Using ep0 maxpacket: 16
[  819.371203][T11970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  819.389888][T11970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  819.418209][T11970] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  819.432977][T11970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.444574][T11970] usb 3-1: Product: syz
[  819.452303][T11970] usb 3-1: Manufacturer: syz
[  819.457875][T11970] usb 3-1: SerialNumber: syz
[  819.496277][T11970] usb 3-1: config 0 descriptor??
[  819.519182][T11970] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  819.530813][T11970] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  820.595939][T15392] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[  820.602582][T15392] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  820.611769][T15394] vhci_hcd: connection closed
[  820.621927][T15392] vhci_hcd vhci_hcd.0: Device attached
[  820.731303][ T2969] vhci_hcd: stop threads
[  820.739863][ T2969] vhci_hcd: release socket
[  820.816258][ T2969] vhci_hcd: disconnect device
[  821.048449][T11970] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  821.071874][T11970] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  821.319389][T11970] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  821.332036][T11970] em28xx 3-1:0.0: No AC97 audio processor
[  821.363366][T11970] usb 3-1: USB disconnect, device number 23
[  821.376259][T11970] em28xx 3-1:0.0: Disconnecting em28xx
[  821.384502][T15419] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  821.392781][T15419] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  821.394595][T11970] em28xx 3-1:0.0: Freeing device
[  821.430140][T15419] hsr_slave_0: left promiscuous mode
[  821.436597][T15419] hsr_slave_1: left promiscuous mode
[  821.551298][   T29] audit: type=1400 audit(1734906126.723:344118): avc:  denied  { bind } for  pid=15422 comm="syz.7.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  821.611169][T15427] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2593'.
[  821.624732][T15428] sctp: [Deprecated]: syz.1.2594 (pid 15428) Use of struct sctp_assoc_value in delayed_ack socket option.
[  821.624732][T15428] Use struct sctp_sack_info instead
[  821.740790][   T29] audit: type=1400 audit(1734906126.901:344119): avc:  denied  { read } for  pid=15431 comm="syz.7.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  822.259566][ T5911] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  822.490383][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  822.519605][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.554885][ T5911] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  822.589765][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.630838][ T5911] usb 2-1: config 0 descriptor??
[  822.728390][T15463] overlayfs: invalid redirect ((null))
[  822.824464][   T29] audit: type=1400 audit(1734906127.911:344120): avc:  denied  { append } for  pid=15465 comm="syz.2.2607" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  822.886632][T15467] loop6: detected capacity change from 0 to 5
[  822.925681][T15467] buffer_io_error: 25 callbacks suppressed
[  822.925699][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  822.954664][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  822.962613][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  822.975650][   T29] audit: type=1400 audit(1734906127.958:344121): avc:  denied  { append } for  pid=15464 comm="syz.7.2608" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  823.004462][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.012478][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.020604][   T29] audit: type=1400 audit(1734906128.080:344122): avc:  denied  { bind } for  pid=15471 comm="syz.8.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  823.045552][T15467] ldm_validate_partition_table(): Disk read failed.
[  823.054291][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.066380][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.074672][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.086975][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.096107][T15467] Dev loop6: unable to read RDB block 0
[  823.101804][T15467] Buffer I/O error on dev loop6, logical block 0, async page read
[  823.110601][T15467]  loop6: unable to read partition table
[  823.115913][ T5911] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0
[  823.117117][T15467] loop6: partition table beyond EOD, truncated
[  823.130484][T15474] veth1_virt_wifi: entered promiscuous mode
[  823.131530][ T5911] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0
[  823.138216][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2611'.
[  823.153337][T15467] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  823.153337][T15467] 
) failed (rc=-5)
[  823.176519][ T5911] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0
[  823.193304][ T5911] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0
[  823.214288][ T5911] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0
[  823.233269][ T5911] nzxt-kraken2 0003:1E71:170E.0014: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0
[  823.260214][T15474] veth1_virt_wifi (unregistering): left promiscuous mode
[  823.352705][ T5911] usb 2-1: USB disconnect, device number 12
[  823.900215][T15487] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  823.906852][T15487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  823.914652][T15487] vhci_hcd vhci_hcd.0: Device attached
[  824.196073][ T5911] vhci_hcd: vhci_device speed not set
[  824.269165][ T5827] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  824.290661][ T5911] usb 37-1: new full-speed USB device number 7 using vhci_hcd
[  824.418993][T15488] vhci_hcd: connection reset by peer
[  824.429774][ T5827] usb 10-1: Using ep0 maxpacket: 16
[  824.438832][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.451026][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  824.467004][ T8931] vhci_hcd: stop threads
[  824.471305][ T8931] vhci_hcd: release socket
[  824.649636][T15500] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2618'.
[  824.708982][ T5827] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  824.746210][ T8931] vhci_hcd: disconnect device
[  824.851292][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.077980][T15504] loop2: detected capacity change from 0 to 7
[  825.106867][T15504] Dev loop2: unable to read RDB block 7
[  825.124809][T15504]  loop2: unable to read partition table
[  825.176603][T15504] loop2: partition table beyond EOD, truncated
[  825.265810][T15504] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  825.792885][ T5827] usb 10-1: config 0 descriptor??
[  826.029095][   T29] audit: type=1400 audit(1734906130.914:344123): avc:  denied  { read write } for  pid=15518 comm="syz.2.2629" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  826.170287][   T29] audit: type=1400 audit(1734906130.914:344124): avc:  denied  { open } for  pid=15518 comm="syz.2.2629" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  826.370973][ T5827] elan 0003:04F3:0755.0015: failed to start in urb: -90
[  826.386112][ T5827] elan 0003:04F3:0755.0015: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[  826.511701][    T8] usb 10-1: USB disconnect, device number 11
[  826.957718][T15554] input: syz0 as /devices/virtual/input/input36
[  827.076596][T15557] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[  827.083234][T15557] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  827.103666][ T5827] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  827.139422][T15557] vhci_hcd vhci_hcd.0: Device attached
[  827.141454][   T29] audit: type=1400 audit(1734906131.943:344125): avc:  denied  { append } for  pid=15561 comm="syz.9.2645" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  827.145254][ T5867] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  827.279273][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  827.293101][ T5827] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  827.308907][ T5867] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  827.325561][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  827.337432][   T25] vhci_hcd: vhci_device speed not set
[  827.347736][ T5827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  827.362025][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.372346][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  827.384589][ T5827] usb 2-1: Product: syz
[  827.389145][ T5827] usb 2-1: Manufacturer: syz
[  827.394213][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  827.405547][   T25] usb 47-1: new full-speed USB device number 16 using vhci_hcd
[  827.413500][ T5827] usb 2-1: SerialNumber: syz
[  827.419058][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  827.445048][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  827.455394][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.466993][T15559] vhci_hcd: connection reset by peer
[  827.477922][ T5867] usb 3-1: config 0 descriptor??
[  827.484896][ T7444] vhci_hcd: stop threads
[  827.485452][T15549] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  827.501923][ T7444] vhci_hcd: release socket
[  827.524506][ T7444] vhci_hcd: disconnect device
[  827.540622][    T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  827.666194][T15545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  827.711640][    T8] usb 9-1: Using ep0 maxpacket: 8
[  827.724492][    T8] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  827.742610][    T8] usb 9-1: config 0 interface 0 has no altsetting 0
[  827.760465][    T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00
[  827.784415][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.816768][    T8] usb 9-1: config 0 descriptor??
[  827.953647][ T5867] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd
[  827.972257][ T5867] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  827.997099][ T5867] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  828.301510][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  828.303528][    T8] apple 0003:05AC:0236.0017: unexpected long global item
[  828.310074][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  828.325518][T15545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  828.340668][    T8] apple 0003:05AC:0236.0017: parse failed
[  828.365287][    T8] apple 0003:05AC:0236.0017: probe with driver apple failed with error -22
[  828.367729][ T5867] usb 3-1: USB disconnect, device number 24
[  828.544583][    T8] usb 9-1: USB disconnect, device number 19
[  828.557074][ T5827] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  828.564210][ T5827] cdc_mbim 2-1:1.0: setting rx_max = 16384
[  828.615458][T15605] overlayfs: invalid redirect ((null))
[  828.636612][   T29] audit: type=1400 audit(1734906133.355:344126): avc:  denied  { mount } for  pid=15606 comm="syz.9.2652" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  828.665912][   T29] audit: type=1400 audit(1734906133.383:344127): avc:  denied  { unmount } for  pid=8904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  828.763314][T15611] netlink: 'syz.9.2654': attribute type 29 has an invalid length.
[  828.774845][T15611] netlink: 'syz.9.2654': attribute type 29 has an invalid length.
[  828.785901][ T5827] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  828.788284][T15611] netlink: 500 bytes leftover after parsing attributes in process `syz.9.2654'.
[  828.803109][T15611] unsupported nla_type 40
[  828.806991][ T5827] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  828.851566][ T5827] wwan wwan0: port wwan0mbim0 attached
[  828.860784][ T5827] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42
[  828.875776][ T5827] usb 2-1: USB disconnect, device number 13
[  828.882363][ T5827] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  828.905762][   T29] audit: type=1400 audit(1734906133.608:344128): avc:  denied  { unmount } for  pid=8904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  828.954101][ T5827] wwan wwan0: port wwan0mbim0 disconnected
[  829.466300][T15632] loop2: detected capacity change from 0 to 7
[  829.488602][T15632] Dev loop2: unable to read RDB block 7
[  829.494326][T15632]  loop2: unable to read partition table
[  829.507629][T15632] loop2: partition table beyond EOD, truncated
[  829.514332][T15632] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5)
[  829.800886][T15641] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[  829.807532][T15641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  829.818076][ T5911] vhci_hcd: vhci_device speed not set
[  829.874522][T15641] vhci_hcd vhci_hcd.0: Device attached
[  829.955072][T15648] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  829.961615][T15648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  829.969287][T15648] vhci_hcd vhci_hcd.0: Device attached
[  830.072434][T15642] vhci_hcd: connection closed
[  830.073837][ T6094] vhci_hcd: stop threads
[  830.119885][ T6094] vhci_hcd: release socket
[  830.135856][ T6094] vhci_hcd: disconnect device
[  830.177227][   T29] audit: type=1400 audit(1734906134.796:344129): avc:  denied  { connect } for  pid=15653 comm="syz.9.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  830.197427][ T5827] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  830.205088][ T5867] vhci_hcd: vhci_device speed not set
[  830.226827][   T29] audit: type=1400 audit(1734906134.842:344130): avc:  denied  { watch_mount } for  pid=15655 comm="syz.1.2670" path="/596" dev="tmpfs" ino=3183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  830.250107][   T29] audit: type=1400 audit(1734906134.842:344131): avc:  denied  { listen } for  pid=15653 comm="syz.9.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  830.270486][   T29] audit: type=1400 audit(1734906134.889:344132): avc:  denied  { watch watch_reads } for  pid=15655 comm="syz.1.2670" path="/596" dev="tmpfs" ino=3183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  830.459495][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  830.469569][ T5827] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  830.478730][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.480410][    T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  830.488160][ T5827] usb 3-1: config 0 descriptor??
[  830.527012][T15662] overlayfs: invalid redirect ((null))
[  830.573310][T15649] vhci_hcd: connection closed
[  830.580633][ T6094] vhci_hcd: stop threads
[  830.589849][ T6094] vhci_hcd: release socket
[  830.594370][ T6094] vhci_hcd: disconnect device
[  830.651655][    T8] usb 10-1: Using ep0 maxpacket: 8
[  830.670970][    T8] usb 10-1: no configurations
[  830.676337][    T8] usb 10-1: can't read configurations, error -22
[  830.742608][ T5827] usbhid 3-1:0.0: can't add hid device: -71
[  830.752020][ T5827] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  830.769780][ T5827] usb 3-1: USB disconnect, device number 25
[  830.823592][    T8] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  830.996180][    T8] usb 10-1: Using ep0 maxpacket: 8
[  831.003361][    T8] usb 10-1: no configurations
[  831.009280][    T8] usb 10-1: can't read configurations, error -22
[  831.022855][    T8] usb usb10-port1: attempt power cycle
[  831.393394][    T8] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  831.425520][    T8] usb 10-1: Using ep0 maxpacket: 8
[  831.434212][    T8] usb 10-1: no configurations
[  831.445777][    T8] usb 10-1: can't read configurations, error -22
[  831.677801][ T5870] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  831.685581][    T8] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  832.116637][T15693] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[  832.123273][T15693] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  832.228372][T15693] vhci_hcd vhci_hcd.0: Device attached
[  832.431972][T15694] vhci_hcd: connection closed
[  832.432320][   T11] vhci_hcd: stop threads
[  832.481233][   T11] vhci_hcd: release socket
[  832.511709][   T11] vhci_hcd: disconnect device
[  832.885954][   T25] vhci_hcd: vhci_device speed not set
[  833.313462][ T5827] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  833.500351][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.539617][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.572558][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  833.586497][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  833.774438][ T5827] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  833.889615][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.976062][ T5827] usb 2-1: config 0 descriptor??
[  834.429239][    T8] usb 10-1: device descriptor read/8, error -71
[  834.480736][ T5827] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0
[  834.557526][    T8] usb usb10-port1: unable to enumerate USB device
[  834.563255][ T5827] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0
[  834.609645][ T5827] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0
[  834.616992][ T5827] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0
[  834.641162][ T5827] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0
[  834.661777][ T5827] gt683r_led 0003:1770:FF00.0018: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0
[  834.721690][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  834.721704][   T29] audit: type=1326 audit(1734906139.042:344134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.9.2691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0174d85d29 code=0x0
[  834.772547][   T25] usb 2-1: USB disconnect, device number 14
[  834.798137][ T5827] gt683r_led 0003:1770:FF00.0018: failed to send set report request: -19
[  834.842654][ T5870] usb 9-1: device not accepting address 20, error -71
[  834.904944][   T29] audit: type=1400 audit(1734906139.220:344135): avc:  denied  { setopt } for  pid=15724 comm="syz.2.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  835.066316][   T29] audit: type=1400 audit(1734906139.370:344136): avc:  denied  { connect } for  pid=15728 comm="syz.2.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  835.126542][   T29] audit: type=1400 audit(1734906139.379:344137): avc:  denied  { setopt } for  pid=15728 comm="syz.2.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  836.723234][   T29] audit: type=1326 audit(1734906140.913:344138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.2711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac79f85d29 code=0x0
[  836.991564][T15773] netlink: 'syz.1.2712': attribute type 1 has an invalid length.
[  836.999865][T15773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2712'.
[  837.333371][ T5870] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  837.637658][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  837.675431][ T5827] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  837.683580][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  837.717252][ T5870] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  837.726973][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.745522][ T5870] usb 9-1: config 0 descriptor??
[  837.868077][ T5827] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  837.893105][ T5827] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  837.914740][ T5827] usb 8-1: config 0 has no interface number 0
[  837.920870][ T5827] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  837.948565][ T5827] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  837.974642][ T5827] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  837.996080][    T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  838.008810][ T5870] usbhid 9-1:0.0: can't add hid device: -71
[  838.014641][ T5827] usb 8-1: config 0 interface 52 has no altsetting 0
[  838.014992][ T5870] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  838.040695][ T5870] usb 9-1: USB disconnect, device number 22
[  838.040695][ T5827] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  838.040720][ T5827] usb 8-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  838.075500][ T5827] usb 8-1: Product: syz
[  838.158010][    T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  838.173494][    T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  838.188188][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  838.197877][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  838.198298][   T29] audit: type=1400 audit(1734906142.279:344139): avc:  denied  { ioctl } for  pid=15799 comm="syz.2.2724" path="socket:[45761]" dev="sockfs" ino=45761 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  838.217299][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  838.245474][ T5827] usb 8-1: Manufacturer: syz
[  838.250306][ T5827] usb 8-1: SerialNumber: syz
[  838.259077][ T5827] usb 8-1: config 0 descriptor??
[  838.263459][    T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  838.273202][    T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  838.284412][    T8] usb 2-1: Product: syz
[  838.288760][    T8] usb 2-1: Manufacturer: syz
[  838.300385][    T8] cdc_wdm 2-1:1.0: skipping garbage
[  838.305737][    T8] cdc_wdm 2-1:1.0: skipping garbage
[  838.316061][    T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  838.325611][    T8] cdc_wdm 2-1:1.0: Unknown control protocol
[  838.325662][T15802] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  838.338019][T15802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  838.345555][T15802] vhci_hcd vhci_hcd.0: Device attached
[  838.484396][ T5827] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  838.494038][ T5827] synaptics_usb 8-1:0.52: probe with driver synaptics_usb failed with error -5
[  838.552085][   T25] vhci_hcd: vhci_device speed not set
[  838.552889][    C0] wdm_int_callback: 110 callbacks suppressed
[  838.552907][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.570126][    C0] wdm_int_callback: 110 callbacks suppressed
[  838.570138][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.582769][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.589380][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.596804][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.603413][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.609701][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.616297][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.622569][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.626699][   T25] usb 51-1: new full-speed USB device number 7 using vhci_hcd
[  838.629151][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.643874][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.650485][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.657083][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.663679][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.669971][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.676560][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.682798][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.689386][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.695654][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  838.702253][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  838.723149][    T8] usb 2-1: USB disconnect, device number 15
[  838.729100][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  838.733119][ T5867] usb 8-1: USB disconnect, device number 19
[  838.742304][   T29] audit: type=1400 audit(1734906142.793:344140): avc:  denied  { create } for  pid=15783 comm="syz.7.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  838.878286][   T29] audit: type=1400 audit(1734906142.934:344141): avc:  denied  { bind } for  pid=15810 comm="syz.8.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  838.898269][   T29] audit: type=1400 audit(1734906142.952:344142): avc:  denied  { listen } for  pid=15810 comm="syz.8.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  838.923895][T15803] vhci_hcd: connection reset by peer
[  838.934034][   T11] vhci_hcd: stop threads
[  838.935394][   T29] audit: type=1400 audit(1734906142.952:344143): avc:  denied  { accept } for  pid=15810 comm="syz.8.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  838.944931][   T11] vhci_hcd: release socket
[  838.986752][   T11] vhci_hcd: disconnect device
[  839.626418][T15832] netlink: 'syz.1.2735': attribute type 10 has an invalid length.
[  839.661713][T15832] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2735'.
[  840.272739][T15841] geneve2: entered promiscuous mode
[  840.670567][T15869] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  840.677120][T15869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  840.685623][T15869] vhci_hcd vhci_hcd.0: Device attached
[  840.775902][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  840.775918][   T29] audit: type=1400 audit(1734906144.702:344147): avc:  denied  { bind } for  pid=15877 comm="syz.2.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  841.117654][ T5867] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  841.306202][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.311450][T15872] vhci_hcd: connection closed
[  841.348105][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.384628][ T6094] vhci_hcd: stop threads
[  841.390561][ T6094] vhci_hcd: release socket
[  841.395719][ T6094] vhci_hcd: disconnect device
[  841.402890][ T5867] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  841.430231][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.447598][ T5867] usb 9-1: config 0 descriptor??
[  841.480332][T15898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.487643][T15898] IPv6: NLM_F_CREATE should be set when creating new route
[  841.494911][T15898] IPv6: NLM_F_CREATE should be set when creating new route
[  841.505565][T15898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.534478][   T29] audit: type=1400 audit(1734906145.403:344148): avc:  denied  { nlmsg_write } for  pid=15900 comm="syz.2.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  841.676565][ T5867] usbhid 9-1:0.0: can't add hid device: -71
[  841.698205][ T5867] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  841.727394][ T5867] usb 9-1: USB disconnect, device number 23
[  843.341413][ T5867] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  843.407615][T15934] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2769'.
[  843.524646][ T5867] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.556766][ T5867] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  843.604947][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.661632][ T5867] usb 9-1: config 0 descriptor??
[  843.722881][ T5867] pwc: Askey VC010 type 2 USB webcam detected.
[  843.745821][   T29] audit: type=1400 audit(1734906147.489:344149): avc:  denied  { write } for  pid=15941 comm="syz.1.2774" path="socket:[46484]" dev="sockfs" ino=46484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  844.106479][   T25] vhci_hcd: vhci_device speed not set
[  844.177288][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00
[  844.209947][ T5867] pwc: recv_control_msg error -32 req 02 val 2700
[  844.263671][T15952] netlink: 'syz.2.2779': attribute type 29 has an invalid length.
[  844.292875][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00
[  844.383553][T15952] netlink: 'syz.2.2779': attribute type 29 has an invalid length.
[  844.604985][ T5867] pwc: recv_control_msg error -71 req 04 val 1300
[  844.613631][ T5867] pwc: recv_control_msg error -71 req 04 val 1400
[  844.625302][ T5867] pwc: recv_control_msg error -71 req 02 val 2000
[  844.632060][ T5867] pwc: recv_control_msg error -71 req 02 val 2100
[  844.639678][ T5867] pwc: recv_control_msg error -71 req 04 val 1500
[  844.647220][ T5867] pwc: recv_control_msg error -71 req 02 val 2500
[  844.653955][ T5867] pwc: recv_control_msg error -71 req 02 val 2400
[  844.661841][ T5867] pwc: recv_control_msg error -71 req 02 val 2600
[  844.670316][ T5867] pwc: recv_control_msg error -71 req 02 val 2900
[  844.710437][ T5867] pwc: recv_control_msg error -71 req 02 val 2800
[  844.719069][ T5867] pwc: recv_control_msg error -71 req 04 val 1100
[  844.752415][ T5827] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  844.976459][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  845.060820][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  845.158396][ T5867] pwc: recv_control_msg error -71 req 04 val 1200
[  845.183680][ T5867] pwc: Registered as video103.
[  845.189439][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39
[  845.199677][ T5827] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  845.209279][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  845.217765][ T5827] usb 10-1: Product: syz
[  845.229790][ T5827] usb 10-1: config 0 descriptor??
[  845.257211][ T5867] usb 9-1: USB disconnect, device number 24
[  845.830977][ T5827] konepure 0003:1E7D:2DB4.0019: unknown main item tag 0x4
[  845.838778][ T5827] konepure 0003:1E7D:2DB4.0019: item fetching failed at offset 9/11
[  845.911795][ T5827] konepure 0003:1E7D:2DB4.0019: parse failed
[  845.920199][ T5827] konepure 0003:1E7D:2DB4.0019: probe with driver konepure failed with error -22
[  846.047054][ T5827] usb 10-1: USB disconnect, device number 16
[  846.153933][T15991] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  846.160568][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  846.181552][T15991] vhci_hcd vhci_hcd.0: Device attached
[  846.366822][ T5867] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  846.374699][T11970] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  846.384360][   T25] vhci_hcd: vhci_device speed not set
[  846.467489][   T25] usb 35-1: new full-speed USB device number 11 using vhci_hcd
[  846.559559][T11970] usb 3-1: Using ep0 maxpacket: 16
[  846.564935][ T5867] usb 9-1: Using ep0 maxpacket: 8
[  846.572156][ T5867] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  846.582877][T11970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  846.594505][T11970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  846.606443][ T5867] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  846.633234][T11970] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  846.648509][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.670268][ T5867] usb 9-1: config 0 descriptor??
[  846.682071][T11970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  846.707641][T11970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.729324][ T5867] gspca_main: vc032x-2.14.0 probing 046d:0892
[  846.736291][T11970] usb 3-1: Product: syz
[  846.745774][T11970] usb 3-1: Manufacturer: syz
[  846.766362][T11970] usb 3-1: SerialNumber: syz
[  846.837290][T15992] vhci_hcd: connection reset by peer
[  846.848883][ T6094] vhci_hcd: stop threads
[  846.853155][ T6094] vhci_hcd: release socket
[  846.875447][ T6094] vhci_hcd: disconnect device
[  846.954703][ T5870] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  847.116977][ T5870] usb 10-1: Using ep0 maxpacket: 8
[  847.135405][ T5870] usb 10-1: config 0 has an invalid interface number: 150 but max is 0
[  847.144959][ T5870] usb 10-1: config 0 has an invalid interface number: 112 but max is 0
[  847.173761][ T5870] usb 10-1: config 0 has an invalid interface number: 3 but max is 0
[  847.209080][ T5870] usb 10-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  847.238672][T11970] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  847.253824][ T5870] usb 10-1: config 0 has no interface number 0
[  847.260457][ T5870] usb 10-1: config 0 has no interface number 1
[  847.281132][ T5870] usb 10-1: config 0 has no interface number 2
[  847.295946][ T5870] usb 10-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  847.762144][ T5870] usb 10-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[  847.773491][ T5870] usb 10-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[  847.787011][ T5870] usb 10-1: config 0 interface 150 has no altsetting 0
[  847.793956][ T5870] usb 10-1: config 0 interface 112 has no altsetting 0
[  847.800896][ T5870] usb 10-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  847.810113][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.820498][    C1] hrtimer: interrupt took 20132 ns
[  847.830415][ T5870] usb 10-1: config 0 descriptor??
[  848.550952][T16025] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2803'.
[  848.584558][T11970] usb 3-1: current rate 9338617 is different from the runtime rate 9338507
[  848.647860][ T5867] gspca_vc032x: reg_w err -110
[  848.658564][ T5867] vc032x 9-1:0.0: probe with driver vc032x failed with error -110
[  848.939339][ T5870] usb 10-1: string descriptor 0 read error: -71
[  849.328026][T11970] usb 3-1: USB disconnect, device number 26
[  849.401935][T16030] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  849.408571][T16030] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  849.416310][T16030] vhci_hcd vhci_hcd.0: Device attached
[  849.431457][T16032] vhci_hcd: connection closed
[  849.495483][   T11] vhci_hcd: stop threads
[  849.528104][   T11] vhci_hcd: release socket
[  849.563376][   T11] vhci_hcd: disconnect device
[  849.660713][T15131] udevd[15131]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  849.738387][ T5870] usb 10-1: USB disconnect, device number 17
[  849.744905][    T8] usb 9-1: USB disconnect, device number 25
[  849.871304][T16048] 8021q: adding VLAN 0 to HW filter on device bond1
[  849.977083][T13502] udevd[13502]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.150/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  850.157102][T16063] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  850.850911][T16048] bond1 (unregistering): Released all slaves
[  851.231654][T16072] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[  851.238301][T16072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  851.330886][T16074] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2687774503 (86008784096 ns) > initial count (67893909056 ns). Using initial count to start timer.
[  851.448454][T16072] vhci_hcd vhci_hcd.0: Device attached
[  851.538367][   T29] audit: type=1400 audit(1734906154.776:344150): avc:  denied  { read } for  pid=16084 comm="syz.9.2819" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  851.634302][T16078] vhci_hcd: connection closed
[  851.635842][ T6094] vhci_hcd: stop threads
[  851.645020][ T5870] vhci_hcd: vhci_device speed not set
[  851.650928][ T6094] vhci_hcd: release socket
[  851.659554][ T6094] vhci_hcd: disconnect device
[  851.693130][   T29] audit: type=1400 audit(1734906154.804:344151): avc:  denied  { open } for  pid=16084 comm="syz.9.2819" path="/417/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  851.723844][ T5870] usb 49-1: new full-speed USB device number 12 using vhci_hcd
[  851.731583][ T5870] usb 49-1: enqueue for inactive port 0
[  851.843069][ T5870] vhci_hcd: vhci_device speed not set
[  851.958296][   T25] vhci_hcd: vhci_device speed not set
[  852.080328][   T29] audit: type=1400 audit(1734906155.253:344152): avc:  denied  { execute } for  pid=16095 comm="syz.7.2824" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  852.498889][   T29] audit: type=1400 audit(1734906155.665:344153): avc:  denied  { append } for  pid=16105 comm="syz.7.2826" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  852.548009][   T29] audit: type=1400 audit(1734906155.665:344154): avc:  denied  { ioctl } for  pid=16105 comm="syz.7.2826" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  852.663327][T16107] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[  852.669968][T16107] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  852.677633][T16107] vhci_hcd vhci_hcd.0: Device attached
[  852.756415][T16108] vhci_hcd: connection closed
[  853.305332][ T5911] vhci_hcd: vhci_device speed not set
[  853.376289][ T6094] vhci_hcd: stop threads
[  853.390712][ T5911] usb 51-1: new full-speed USB device number 8 using vhci_hcd
[  853.413757][ T6094] vhci_hcd: release socket
[  853.450229][ T6094] vhci_hcd: disconnect device
[  854.563169][T16124] lo speed is unknown, defaulting to 1000
[  854.756002][T16137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  854.762547][T16137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  854.770194][T16137] vhci_hcd vhci_hcd.0: Device attached
[  854.780877][T11970] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  854.951347][T11970] usb 9-1: Using ep0 maxpacket: 16
[  854.994248][   T25] vhci_hcd: vhci_device speed not set
[  855.010045][T11970] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  855.133319][   T25] usb 37-1: new full-speed USB device number 8 using vhci_hcd
[  855.162511][T11970] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.192450][T11970] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  855.207759][T11970] usb 9-1: config 0 interface 0 has no altsetting 0
[  855.214385][T11970] usb 9-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  855.223484][T11970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.251293][T11970] usb 9-1: config 0 descriptor??
[  855.311517][T16142] netlink: 'syz.7.2836': attribute type 4 has an invalid length.
[  855.353032][T16138] vhci_hcd: connection reset by peer
[  855.360480][ T2969] vhci_hcd: stop threads
[  855.365340][ T2969] vhci_hcd: release socket
[  855.403185][ T2969] vhci_hcd: disconnect device
[  855.679826][T16146] nbd1: detected capacity change from 0 to 30
[  855.713557][T16150] block nbd1: shutting down sockets
[  855.716494][T13506] blk_print_req_error: 25 callbacks suppressed
[  855.716507][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.776592][T13506] buffer_io_error: 2 callbacks suppressed
[  855.776627][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  855.843266][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.856944][   T10] Buffer I/O error on dev nbd1, logical block 0, async page read
[  855.874625][T11970] hid-generic 0003:045E:05DA.001A: ignoring exceeding usage max
[  855.883813][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.884148][T11970] hid-generic 0003:045E:05DA.001A: unbalanced collection at end of report description
[  855.897150][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  855.903858][T11970] hid-generic 0003:045E:05DA.001A: probe with driver hid-generic failed with error -22
[  855.956903][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.983208][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  855.991211][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.000378][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.008237][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.017508][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.025416][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.034510][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.042386][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.052230][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.060021][T13506] ldm_validate_partition_table(): Disk read failed.
[  856.066892][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.076015][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.083857][T13506] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  856.096460][T13506] Buffer I/O error on dev nbd1, logical block 0, async page read
[  856.104440][T13506] Dev nbd1: unable to read RDB block 0
[  856.110282][T13506]  nbd1: unable to read partition table
[  856.115949][T13506] nbd1: partition table beyond EOD, truncated
[  856.149533][T16151] ldm_validate_partition_table(): Disk read failed.
[  856.155510][   T29] audit: type=1400 audit(1734906159.097:344155): avc:  denied  { bind } for  pid=16153 comm="syz.2.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  856.156793][T16151] Dev nbd1: unable to read RDB block 0
[  856.198755][T16151]  nbd1: unable to read partition table
[  856.232525][   T29] audit: type=1400 audit(1734906159.125:344156): avc:  denied  { name_bind } for  pid=16153 comm="syz.2.2840" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  856.239940][T16134] lo speed is unknown, defaulting to 1000
[  856.271707][T16151] nbd1: partition table beyond EOD, truncated
[  856.340253][T13506] ldm_validate_partition_table(): Disk read failed.
[  856.347314][T13506] Dev nbd1: unable to read RDB block 0
[  856.353071][T13506]  nbd1: unable to read partition table
[  856.358723][T13506] nbd1: partition table beyond EOD, truncated
[  856.367180][   T29] audit: type=1400 audit(1734906159.125:344157): avc:  denied  { node_bind } for  pid=16153 comm="syz.2.2840" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  856.433914][T16157] Bluetooth: (null): Non-link packet received in non-active state
[  856.478130][   T29] audit: type=1400 audit(1734906159.125:344158): avc:  denied  { listen } for  pid=16153 comm="syz.2.2840" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  856.551203][   T29] audit: type=1400 audit(1734906159.135:344159): avc:  denied  { accept } for  pid=16153 comm="syz.2.2840" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  856.553475][ T5827] usb 9-1: USB disconnect, device number 26
[  856.591209][T16163] binder: 16148:16163 ioctl c0306201 0 returned -14
[  856.946860][T16172] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  856.953497][T16172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  857.002525][ T5827] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  857.014384][ T5827] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  857.044663][T16172] vhci_hcd vhci_hcd.0: Device attached
[  857.228553][    T8] vhci_hcd: vhci_device speed not set
[  857.281743][ T5867] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  857.292443][    T8] usb 35-1: new full-speed USB device number 12 using vhci_hcd
[  857.305601][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  857.305614][   T29] audit: type=1400 audit(1734906160.164:344164): avc:  denied  { block_suspend } for  pid=16186 comm="syz.8.2851" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  857.465254][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  857.474769][ T5867] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  857.503851][ T5867] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  857.571582][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0
[  857.589812][ T5867] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  857.595745][T16174] vhci_hcd: connection reset by peer
[  857.623233][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.623872][T14601] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  857.643702][   T11] vhci_hcd: stop threads
[  857.658952][   T11] vhci_hcd: release socket
[  857.675744][   T29] audit: type=1400 audit(1734906160.519:344165): avc:  denied  { transfer } for  pid=16193 comm="syz.8.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  857.702321][   T11] vhci_hcd: disconnect device
[  857.726699][ T5867] usb 3-1: config 0 descriptor??
[  857.811890][T14601] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  857.823930][T14601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.851051][T14601] usb 8-1: Product: syz
[  857.855262][T14601] usb 8-1: Manufacturer: syz
[  857.860060][T14601] usb 8-1: SerialNumber: syz
[  857.881884][T14601] usb 8-1: config 0 descriptor??
[  857.989126][ T5867] usbhid 3-1:0.0: can't add hid device: -71
[  857.998886][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  858.004860][   T29] audit: type=1400 audit(1734906160.828:344166): avc:  denied  { setattr } for  pid=16199 comm="syz.9.2856" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  858.019280][ T5867] usb 3-1: USB disconnect, device number 27
[  858.048750][   T29] audit: type=1400 audit(1734906160.865:344167): avc:  denied  { write } for  pid=16199 comm="syz.9.2856" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  858.069899][   T29] audit: type=1400 audit(1734906160.865:344168): avc:  denied  { open } for  pid=16199 comm="syz.9.2856" path="/424/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  858.399097][   T29] audit: type=1400 audit(1734906161.193:344169): avc:  denied  { mounton } for  pid=16207 comm="syz.1.2859" path="/638/file0" dev="tmpfs" ino=3425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  858.436415][ T5871] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  858.484018][T16206] binder: 16205:16206 ioctl c0306201 0 returned -14
[  858.596844][ T5871] usb 9-1: Using ep0 maxpacket: 32
[  858.603470][ T5871] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  858.614355][ T5871] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  858.624943][ T5871] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  858.635010][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  858.659526][ T5871] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  858.670758][ T5871] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  858.689309][ T5871] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  858.706423][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.727278][ T5871] usb 9-1: config 0 descriptor??
[  858.896296][ T5911] vhci_hcd: vhci_device speed not set
[  858.969301][ T5871] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  858.983828][ T5871] usb 9-1: USB disconnect, device number 27
[  858.992920][ T5871] usblp0: removed
[  859.016300][T16227] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2865'.
[  859.094937][   T29] audit: type=1400 audit(1734906161.847:344170): avc:  denied  { append } for  pid=16229 comm="syz.9.2866" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  859.179081][T16230] binder: 16229:16230 ioctl c0306201 20000280 returned -14
[  859.462670][ T5871] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  859.481621][T14601] usb 8-1: f81604_read: reg: 200f failed: -EPROTO
[  859.492742][T14601] usb 8-1: USB disconnect, device number 20
[  859.522938][T14601] usb 8-1: f81604_read: reg: 100f failed: -ENODEV
[  859.612948][T14601] usb 8-1: f81604_read: reg: 200f failed: -ENODEV
[  859.641723][ T5871] usb 9-1: Using ep0 maxpacket: 32
[  859.649221][ T5871] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  859.658063][ T5871] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  859.667411][ T5871] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  859.676698][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  859.686360][ T5871] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  859.696548][ T5871] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  859.709690][ T5871] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  859.718726][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.731434][ T5871] usb 9-1: config 0 descriptor??
[  860.075194][ T5871] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  860.360370][   T29] audit: type=1400 audit(1734906163.026:344171): avc:  denied  { read write } for  pid=16203 comm="syz.8.2857" name="lp0" dev="devtmpfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  860.392707][   T29] audit: type=1400 audit(1734906163.026:344172): avc:  denied  { open } for  pid=16203 comm="syz.8.2857" path="/dev/usb/lp0" dev="devtmpfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  860.475999][    C0] usblp0: nonzero read bulk status received: -71
[  860.490142][ T5871] usb 9-1: USB disconnect, device number 28
[  860.496197][T16204] usblp0: error -71 reading from printer
[  860.515718][T16258] usblp0: error -19 reading from printer
[  860.724189][   T25] vhci_hcd: vhci_device speed not set
[  860.732342][T16203] usblp0: removed
[  860.831046][ T5870] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  860.991444][ T5870] usb 8-1: Using ep0 maxpacket: 32
[  860.999403][ T5870] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42
[  861.008564][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.016894][ T5870] usb 8-1: Product: syz
[  861.021075][ T5870] usb 8-1: Manufacturer: syz
[  861.032935][ T5870] usb 8-1: SerialNumber: syz
[  861.039817][ T5870] usb 8-1: config 0 descriptor??
[  861.049730][ T5870] ttusb_dec_send_command: command bulk message failed: error -22
[  861.058477][ T5870] ttusb-dec 8-1:0.0: probe with driver ttusb-dec failed with error -22
[  861.248786][T16270] Unknown status report in ack skb
[  861.385856][T11970] usb 8-1: USB disconnect, device number 21
[  861.624576][T16275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  861.631122][T16275] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  861.639247][T16275] vhci_hcd vhci_hcd.0: Device attached
[  862.148033][T16277] vhci_hcd: connection closed
[  862.163438][ T7444] vhci_hcd: stop threads
[  862.172640][   T25] vhci_hcd: vhci_device speed not set
[  862.182842][ T7444] vhci_hcd: release socket
[  862.242513][ T5827] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  862.250134][   T25] usb 37-1: device descriptor read/64, error -110
[  862.270302][ T7444] vhci_hcd: disconnect device
[  862.349226][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'.
[  862.381795][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'.
[  862.413410][ T5827] usb 9-1: Using ep0 maxpacket: 32
[  862.419179][T16288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2883'.
[  862.434181][T16286] lo speed is unknown, defaulting to 1000
[  862.443296][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.456088][   T25] vhci_hcd: vhci_device speed not set
[  862.461677][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.471565][ T5827] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  862.487188][ T5827] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  862.530827][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.553280][ T5827] usb 9-1: config 0 descriptor??
[  862.703807][T16298] 9pnet_fd: Insufficient options for proto=fd
[  862.734926][    T8] vhci_hcd: vhci_device speed not set
[  862.927875][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  863.086870][ T5870] usb 2-1: Using ep0 maxpacket: 16
[  863.093528][ T5870] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  863.116141][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  863.165865][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  863.223009][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  863.270697][ T5827] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.001C/input/input41
[  863.287491][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.342828][ T5870] usb 2-1: Product: syz
[  863.358419][ T5827] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.001C/input/input42
[  863.364784][ T5870] usb 2-1: Manufacturer: syz
[  863.415907][ T5870] usb 2-1: SerialNumber: syz
[  863.482337][ T5827] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0
[  863.653433][T11970] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  863.916483][ T5870] usb 2-1: 0:2 : does not exist
[  863.953797][T11970] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.984868][T11970] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  864.009855][T11970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.194276][T11970] usb 10-1: config 0 descriptor??
[  864.271869][T11970] pwc: Askey VC010 type 2 USB webcam detected.
[  864.457869][    T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  864.474900][    C0] kye 0003:0458:5011.001C: usb_submit_urb(ctrl) failed: -1
[  864.488498][T14601] usb 9-1: USB disconnect, device number 29
[  864.647677][    T8] usb 3-1: Using ep0 maxpacket: 8
[  864.656317][    T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  864.666298][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.674441][    T8] usb 3-1: Product: syz
[  864.678635][    T8] usb 3-1: Manufacturer: syz
[  864.683304][    T8] usb 3-1: SerialNumber: syz
[  864.688782][T11970] pwc: recv_control_msg error -32 req 02 val 2b00
[  864.690050][    T8] usb 3-1: config 0 descriptor??
[  864.701463][T11970] pwc: recv_control_msg error -32 req 02 val 2700
[  864.711072][T11970] pwc: recv_control_msg error -32 req 02 val 2c00
[  864.724827][T11970] pwc: recv_control_msg error -32 req 04 val 1000
[  864.731874][T11970] pwc: recv_control_msg error -32 req 04 val 1300
[  864.739655][T11970] pwc: recv_control_msg error -32 req 04 val 1400
[  864.924080][    T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  864.963028][T11970] pwc: recv_control_msg error -71 req 02 val 2100
[  864.971702][T11970] pwc: recv_control_msg error -71 req 04 val 1500
[  864.978420][T11970] pwc: recv_control_msg error -71 req 02 val 2500
[  864.985772][T11970] pwc: recv_control_msg error -71 req 02 val 2400
[  864.993191][T11970] pwc: recv_control_msg error -71 req 02 val 2600
[  865.000032][T11970] pwc: recv_control_msg error -71 req 02 val 2900
[  865.007140][T11970] pwc: recv_control_msg error -71 req 02 val 2800
[  865.014333][T11970] pwc: recv_control_msg error -71 req 04 val 1100
[  865.021826][T11970] pwc: recv_control_msg error -71 req 04 val 1200
[  865.031302][T11970] pwc: Registered as video103.
[  865.036990][T11970] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input43
[  865.064866][T11970] usb 10-1: USB disconnect, device number 18
[  865.406940][T14601] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  865.540946][ T5870] usb 2-1: USB disconnect, device number 16
[  865.684789][T14601] usb 9-1: Using ep0 maxpacket: 16
[  865.694090][T14601] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  865.781855][T14601] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  865.784712][T13502] udevd[13502]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  865.792944][T14601] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  866.012530][T14601] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  866.027103][T14601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.038510][T14601] usb 9-1: Product: syz
[  866.044225][T14601] usb 9-1: Manufacturer: syz
[  866.056250][T14601] usb 9-1: SerialNumber: syz
[  866.176050][   T29] audit: type=1400 audit(1734906168.470:344173): avc:  denied  { setattr } for  pid=16341 comm="syz.7.2902" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  866.502269][    T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  866.537340][    T8] usb 3-1: USB disconnect, device number 28
[  866.686744][   T29] audit: type=1400 audit(1734906168.947:344174): avc:  denied  { setattr } for  pid=16351 comm="syz.1.2905" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  866.711204][T14601] usb 9-1: 0:2 : does not exist
[  867.257350][ T5827] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  867.475894][   T29] audit: type=1400 audit(1734906169.686:344175): avc:  denied  { create } for  pid=16370 comm="syz.1.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  867.628345][ T5827] usb 10-1: Using ep0 maxpacket: 32
[  867.637933][   T29] audit: type=1400 audit(1734906169.714:344176): avc:  denied  { connect } for  pid=16370 comm="syz.1.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  867.639287][ T5827] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  867.873307][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.993270][ T5827] usb 10-1: config 0 descriptor??
[  868.041062][ T5827] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  868.310247][T14601] usb 9-1: 1:0: cannot get min/max values for control 6 (id 1)
[  868.342204][T14601] usb 9-1: USB disconnect, device number 30
[  868.574382][T13506] udevd[13506]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  869.167160][   T29] audit: type=1400 audit(1734906171.267:344177): avc:  denied  { mount } for  pid=16393 comm="syz.8.2919" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  869.267210][T16396] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  869.298676][T16396] overlayfs: failed to set xattr on upper
[  869.319223][T16396] overlayfs: ...falling back to redirect_dir=nofollow.
[  869.334609][T16396] overlayfs: ...falling back to index=off.
[  869.349934][T16396] overlayfs: ...falling back to uuid=null.
[  869.610505][   T29] audit: type=1400 audit(1734906171.688:344178): avc:  denied  { write } for  pid=16401 comm="syz.1.2923" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.655795][   T29] audit: type=1400 audit(1734906171.688:344179): avc:  denied  { add_name } for  pid=16401 comm="syz.1.2923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.712362][   T29] audit: type=1400 audit(1734906171.688:344180): avc:  denied  { create } for  pid=16401 comm="syz.1.2923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  869.757963][   T29] audit: type=1400 audit(1734906171.688:344181): avc:  denied  { associate } for  pid=16401 comm="syz.1.2923" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  869.864638][T11970] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  870.037459][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.044327][T11970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.066647][T11970] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  870.075864][T11970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.090551][T11970] usb 9-1: config 0 descriptor??
[  870.175630][T16414] syzkaller0: entered promiscuous mode
[  870.181258][T16414] syzkaller0: entered allmulticast mode
[  870.251699][ T5827] gspca_vc032x: reg_w err -71
[  870.256447][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.261798][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.267148][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.272838][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.279597][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.285049][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.290432][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.295983][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.301349][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.306989][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.312270][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.317747][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.323015][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.328588][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.333860][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.339632][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.345980][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  870.351361][ T5827] gspca_vc032x: Unknown sensor...
[  870.356548][ T5827] vc032x 10-1:0.0: probe with driver vc032x failed with error -22
[  870.387006][ T5827] usb 10-1: USB disconnect, device number 19
[  870.613966][T11970] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor
[  870.659578][    T8] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  870.660401][T11970] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.001D/input/input44
[  870.826823][    T8] usb 8-1: Using ep0 maxpacket: 8
[  870.850575][T16405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.900686][    T8] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  870.918149][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.928417][    T8] usb 8-1: Product: syz
[  870.941951][    T8] usb 8-1: Manufacturer: syz
[  870.948837][    T8] usb 8-1: SerialNumber: syz
[  871.010337][T16405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.076890][T11970] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  871.113095][    T8] usb 8-1: config 0 descriptor??
[  871.457567][ T5867] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  871.593552][    T8] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  871.651295][ T5867] usb 10-1: config 0 has no interfaces?
[  871.657025][ T5867] usb 10-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  871.666577][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.696343][ T5867] usb 10-1: config 0 descriptor??
[  871.779242][ T5871] usb 9-1: USB disconnect, device number 31
[  872.181536][   T29] audit: type=1400 audit(1734906174.083:344182): avc:  denied  { mount } for  pid=16445 comm="syz.1.2936" name="/" dev="autofs" ino=48742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  872.310372][   T29] audit: type=1400 audit(1734906174.204:344183): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  872.625763][ T5871] usb 10-1: USB disconnect, device number 20
[  872.783555][    T8] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  872.824650][    T8] usb 8-1: USB disconnect, device number 22
[  872.851574][   T29] audit: type=1804 audit(1734906174.644:344184): pid=16451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2938" name="/newroot/465/bus/bus" dev="overlay" ino=2496 res=1 errno=0
[  873.075358][T16453] kvm: emulating exchange as write
[  873.574447][T11970] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  874.027628][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b59c00: rx timeout, send abort
[  874.038650][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b59800: rx timeout, send abort
[  874.047166][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033b59c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  874.063586][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033b59800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  874.109590][   T29] audit: type=1400 audit(1734906175.878:344185): avc:  denied  { setopt } for  pid=16462 comm="syz.7.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  874.364882][   T29] audit: type=1400 audit(1734906176.122:344186): avc:  denied  { read } for  pid=16466 comm="syz.7.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  874.412774][T11970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  874.424641][T11970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  874.672232][T11970] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  874.740385][T11970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.958391][T11970] usb 3-1: config 0 descriptor??
[  875.446898][T11970] cypress 0003:04B4:DE61.001E: unknown main item tag 0x0
[  875.454988][T11970] cypress 0003:04B4:DE61.001E: unknown main item tag 0x0
[  875.467827][T11970] cypress 0003:04B4:DE61.001E: unknown main item tag 0x0
[  875.515125][T11970] cypress 0003:04B4:DE61.001E: unknown main item tag 0x0
[  875.524290][T11970] cypress 0003:04B4:DE61.001E: unknown main item tag 0x0
[  875.538436][T11970] cypress 0003:04B4:DE61.001E: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0
[  875.787291][ T5871] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  875.821784][   T25] usb 3-1: USB disconnect, device number 29
[  875.879266][   T29] audit: type=1400 audit(1734906177.544:344187): avc:  denied  { read } for  pid=16491 comm="syz.7.2951" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  875.958523][ T5871] usb 2-1: Using ep0 maxpacket: 8
[  875.970333][ T5871] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  875.991935][ T5871] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  876.000128][ T5871] usb 2-1: config 0 has no interface number 0
[  876.012112][ T5871] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  876.047883][ T5871] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  876.076232][ T5871] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  876.150403][ T5871] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  876.184780][ T5871] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  876.210658][ T5871] usb 2-1: Product: syz
[  876.225608][ T5871] usb 2-1: Manufacturer: syz
[  876.238900][ T5871] usb 2-1: config 0 descriptor??
[  876.244464][T16478] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  876.394001][T16510] netlink: 'syz.7.2953': attribute type 2 has an invalid length.
[  876.943429][ T5871] usb 2-1: USB disconnect, device number 17
[  877.618976][T16530] overlayfs: overlapping lowerdir path
[  877.683747][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2958'.
[  877.944336][T16539] kvm: pic: single mode not supported
[  877.945435][T16539] kvm: pic: single mode not supported
[  878.002338][T16539] kvm: pic: level sensitive irq not supported
[  878.025353][   T29] audit: type=1400 audit(1734906179.545:344188): avc:  denied  { create } for  pid=16546 comm="syz.8.2961" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  878.083251][T16539] kvm: pic: level sensitive irq not supported
[  878.360830][T16562] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2962'.
[  881.187475][T16599] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2971'.
[  881.968644][T16604] kvm: pic: non byte write
[  883.292750][T16624] 
[  883.295109][T16624] ======================================================
[  883.302116][T16624] WARNING: possible circular locking dependency detected
[  883.309123][T16624] 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Not tainted
[  883.316219][T16624] ------------------------------------------------------
[  883.323203][T16624] syz.2.2979/16624 is trying to acquire lock:
[  883.329234][T16624] ffff88814371e7a8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.339553][T16624] 
[  883.339553][T16624] but task is already holding lock:
[  883.346883][T16624] ffff88814371e278 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[  883.358245][T16624] 
[  883.358245][T16624] which lock already depends on the new lock.
[  883.358245][T16624] 
[  883.368629][T16624] 
[  883.368629][T16624] the existing dependency chain (in reverse order) is:
[  883.377625][T16624] 
[  883.377625][T16624] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  883.386201][T16624]        blk_mq_submit_bio+0x1fb6/0x24c0
[  883.391809][T16624]        __submit_bio+0x384/0x540
[  883.396804][T16624]        submit_bio_noacct_nocheck+0x698/0xd70
[  883.402928][T16624]        submit_bio_noacct+0x93a/0x1e20
[  883.408439][T16624]        block_read_full_folio+0x812/0xa50
[  883.414231][T16624]        filemap_read_folio+0xc6/0x2a0
[  883.419663][T16624]        filemap_get_pages+0x155f/0x1be0
[  883.425265][T16624]        filemap_read+0x3ca/0xd70
[  883.430271][T16624]        blkdev_read_iter+0x187/0x480
[  883.435616][T16624]        vfs_read+0x87f/0xbe0
[  883.440261][T16624]        ksys_read+0x12b/0x250
[  883.444991][T16624]        do_syscall_64+0xcd/0x250
[  883.449988][T16624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.456375][T16624] 
[  883.456375][T16624] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[  883.464857][T16624]        down_read+0x9a/0x330
[  883.469507][T16624]        filemap_fault+0x62c/0x2820
[  883.474675][T16624]        __do_fault+0x10a/0x490
[  883.479498][T16624]        do_pte_missing+0xebd/0x3e00
[  883.484752][T16624]        __handle_mm_fault+0x103c/0x2a40
[  883.490354][T16624]        handle_mm_fault+0x3fa/0xaa0
[  883.495612][T16624]        __get_user_pages+0x8d9/0x3b50
[  883.501038][T16624]        populate_vma_page_range+0x27f/0x3a0
[  883.506996][T16624]        __mm_populate+0x1d6/0x380
[  883.512076][T16624]        do_mlock+0x40a/0x7d0
[  883.516723][T16624]        __x64_sys_mlock+0x59/0x80
[  883.521809][T16624]        do_syscall_64+0xcd/0x250
[  883.526820][T16624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.533207][T16624] 
[  883.533207][T16624] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  883.540729][T16624]        __might_fault+0x11b/0x190
[  883.545812][T16624]        _copy_from_user+0x29/0xd0
[  883.550893][T16624]        __blk_trace_setup+0xa8/0x180
[  883.556245][T16624]        blk_trace_ioctl+0x163/0x290
[  883.561498][T16624]        blkdev_ioctl+0x109/0x6d0
[  883.566501][T16624]        __x64_sys_ioctl+0x190/0x200
[  883.571759][T16624]        do_syscall_64+0xcd/0x250
[  883.576754][T16624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.583138][T16624] 
[  883.583138][T16624] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  883.590918][T16624]        __mutex_lock+0x19b/0xa60
[  883.595915][T16624]        blk_register_queue+0x13c/0x4f0
[  883.601434][T16624]        add_disk_fwnode+0x785/0x1300
[  883.606784][T16624]        brd_alloc.isra.0+0x5a2/0x840
[  883.612127][T16624]        brd_init+0x12b/0x1d0
[  883.616779][T16624]        do_one_initcall+0x128/0x700
[  883.622050][T16624]        kernel_init_freeable+0x5c7/0x900
[  883.627751][T16624]        kernel_init+0x1c/0x2b0
[  883.632580][T16624]        ret_from_fork+0x45/0x80
[  883.637494][T16624]        ret_from_fork_asm+0x1a/0x30
[  883.642787][T16624] 
[  883.642787][T16624] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  883.650313][T16624]        __lock_acquire+0x249e/0x3c40
[  883.655661][T16624]        lock_acquire.part.0+0x11b/0x380
[  883.661262][T16624]        __mutex_lock+0x19b/0xa60
[  883.666269][T16624]        __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.672737][T16624]        blk_mq_update_nr_hw_queues+0x2a/0x40
[  883.678772][T16624]        nbd_start_device+0x15b/0xd70
[  883.684115][T16624]        nbd_ioctl+0x21a/0xfd0
[  883.688846][T16624]        blkdev_ioctl+0x276/0x6d0
[  883.693841][T16624]        __x64_sys_ioctl+0x190/0x200
[  883.699100][T16624]        do_syscall_64+0xcd/0x250
[  883.704094][T16624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.710481][T16624] 
[  883.710481][T16624] other info that might help us debug this:
[  883.710481][T16624] 
[  883.720678][T16624] Chain exists of:
[  883.720678][T16624]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51
[  883.720678][T16624] 
[  883.735420][T16624]  Possible unsafe locking scenario:
[  883.735420][T16624] 
[  883.742839][T16624]        CPU0                    CPU1
[  883.748188][T16624]        ----                    ----
[  883.753520][T16624]   lock(&q->q_usage_counter(io)#51);
[  883.758863][T16624]                                lock(mapping.invalidate_lock#2);
[  883.766638][T16624]                                lock(&q->q_usage_counter(io)#51);
[  883.774506][T16624]   lock(&q->sysfs_lock);
[  883.778812][T16624] 
[  883.778812][T16624]  *** DEADLOCK ***
[  883.778812][T16624] 
[  883.786938][T16624] 4 locks held by syz.2.2979/16624:
[  883.792100][T16624]  #0: ffff8880261f0198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0
[  883.801373][T16624]  #1: ffff8880261f00d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40
[  883.812122][T16624]  #2: ffff88814371e278 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[  883.823913][T16624]  #3: ffff88814371e2b0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[  883.835965][T16624] 
[  883.835965][T16624] stack backtrace:
[  883.841822][T16624] CPU: 0 UID: 0 PID: 16624 Comm: syz.2.2979 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0
[  883.852551][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  883.862577][T16624] Call Trace:
[  883.865827][T16624]  <TASK>
[  883.868730][T16624]  dump_stack_lvl+0x116/0x1f0
[  883.873386][T16624]  print_circular_bug+0x419/0x5d0
[  883.878381][T16624]  check_noncircular+0x31a/0x400
[  883.883288][T16624]  ? __pfx_check_noncircular+0x10/0x10
[  883.888718][T16624]  ? add_lock_to_list+0x17d/0x390
[  883.893719][T16624]  __lock_acquire+0x249e/0x3c40
[  883.898542][T16624]  ? __pfx___lock_acquire+0x10/0x10
[  883.903710][T16624]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  883.909485][T16624]  ? stack_depot_save_flags+0x38f/0x9c0
[  883.915008][T16624]  lock_acquire.part.0+0x11b/0x380
[  883.920089][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.926215][T16624]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  883.931816][T16624]  ? rcu_is_watching+0x12/0xc0
[  883.936552][T16624]  ? trace_lock_acquire+0x14e/0x1f0
[  883.941723][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.947846][T16624]  ? lock_acquire+0x2f/0xb0
[  883.952327][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.958451][T16624]  __mutex_lock+0x19b/0xa60
[  883.962928][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.969052][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.975174][T16624]  ? __pfx___mutex_lock+0x10/0x10
[  883.980173][T16624]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.986294][T16624]  __blk_mq_update_nr_hw_queues+0x446/0x14e0
[  883.992247][T16624]  ? __mutex_trylock_common+0xea/0x250
[  883.997679][T16624]  ? __pfx___mutex_trylock_common+0x10/0x10
[  884.003561][T16624]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[  884.009262][T16624]  ? rcu_is_watching+0x12/0xc0
[  884.013999][T16624]  ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10
[  884.020385][T16624]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[  884.026074][T16624]  ? __pfx___mutex_lock+0x10/0x10
[  884.031071][T16624]  ? lockdep_hardirqs_on+0x7c/0x110
[  884.036239][T16624]  ? __mutex_lock+0x1cc/0xa60
[  884.040888][T16624]  ? nbd_ioctl+0x151/0xfd0
[  884.045275][T16624]  ? __pfx___mutex_lock+0x10/0x10
[  884.050275][T16624]  blk_mq_update_nr_hw_queues+0x2a/0x40
[  884.055797][T16624]  nbd_start_device+0x15b/0xd70
[  884.060619][T16624]  ? bpf_lsm_capable+0x9/0x10
[  884.065265][T16624]  nbd_ioctl+0x21a/0xfd0
[  884.069480][T16624]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[  884.075955][T16624]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  884.082440][T16624]  ? __pfx_nbd_ioctl+0x10/0x10
[  884.087174][T16624]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  884.093998][T16624]  ? __pfx_lock_release+0x10/0x10
[  884.098994][T16624]  ? __pfx_nbd_ioctl+0x10/0x10
[  884.103732][T16624]  blkdev_ioctl+0x276/0x6d0
[  884.108219][T16624]  ? __pfx_blkdev_ioctl+0x10/0x10
[  884.113217][T16624]  ? selinux_file_ioctl+0x180/0x270
[  884.118389][T16624]  ? selinux_file_ioctl+0xb4/0x270
[  884.123474][T16624]  ? __pfx_blkdev_ioctl+0x10/0x10
[  884.128470][T16624]  __x64_sys_ioctl+0x190/0x200
[  884.133208][T16624]  do_syscall_64+0xcd/0x250
[  884.137688][T16624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.143552][T16624] RIP: 0033:0x7fac79f85d29
[  884.147935][T16624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  884.167513][T16624] RSP: 002b:00007fac7ad5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  884.175896][T16624] RAX: ffffffffffffffda RBX: 00007fac7a176080 RCX: 00007fac79f85d29
[  884.183841][T16624] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000008
[  884.191782][T16624] RBP: 00007fac7a001aa8 R08: 0000000000000000 R09: 0000000000000000
[  884.199722][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  884.207673][T16624] R13: 0000000000000000 R14: 00007fac7a176080 R15: 00007ffdf7bc6588
[  884.215620][T16624]  </TASK>
[  884.495621][ T5141] block nbd2: Receive control failed (result -32)
[  884.502525][ T5141] block nbd2: Receive control failed (result -32)
[  884.521644][T16625] block nbd2: shutting down sockets