last executing test programs:

10.840058929s ago: executing program 3 (id=1304):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getpgrp(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000300600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90)

9.69136655s ago: executing program 4 (id=1307):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x88)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setrlimit(0x0, &(0x7f0000000040)={0x4, 0xe})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x51}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x10)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

9.62724878s ago: executing program 3 (id=1308):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bf8100000000000007010000f8ffffffb702000008000000b70300000000000085001f00b10000009500000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94)

9.175358343s ago: executing program 3 (id=1309):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x8200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffff8, 0x0)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="18002abd7000ffdbdf250b00000004000580"], 0x18}}, 0x804)
capset(&(0x7f00000001c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc6b9, 0x0, 0x2})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000000006, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="433fbb4db30afc3feab6198f25e65b97cf5280e96daa6673fee84ff5fd076d358d14b37fae9844e5f47ac8fcdbef1c84424d4084ceedcf3ba500cb1b47c7b370814b81", @ANYRES32, @ANYBLOB="00000000000000005704000008000000850000001c0000c976efb2003e00000086ce628c9e72412df8a41e9c9c590789171df923e553c7b5860999d1b717e417fa1de3be284a0705d521a82c46141522e9bfa0e6c6a10696f496f5ec76f969415f22aaebe235bae9ca3944a8dda85590da189014ae753e66e212ca60d3cc53f3e44f2a350feac06113d5fcac858319f8c2355aa0351478176d5f8d81f944a5a9c3ef11e0cbd8c058afc6e08929bec7a0cfe62bcd09899555e743f0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0)

9.016136081s ago: executing program 0 (id=1311):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x400000000}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300735f7af5ff00000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x543000, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x6, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x12, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x7, 0xb, 0x5, 0x6, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7d9b3d7c, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x3, 0xb, 0x0, 0x18, 0xfffffffffffffffc}], &(0x7f00000001c0)='GPL\x00', 0x9a27, 0xce, &(0x7f0000000480)=""/206, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, r1, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=[{0x4, 0x2, 0x10, 0x1}, {0x4, 0x3, 0x4}], 0x10, 0x40f0}, 0x94)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r4)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x99}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008045}, 0x4000)

8.970031428s ago: executing program 4 (id=1312):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r0, &(0x7f0000000380)=""/144, 0x90)
pwrite64(r0, &(0x7f0000000440)='}', 0x1, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

8.519918303s ago: executing program 0 (id=1313):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, 0x989680}})
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
bind$can_j1939(r1, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801d10000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r12 = getpid()
sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

8.203301513s ago: executing program 1 (id=1314):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x415, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x10)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680))
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x80000, 0x6, 0x2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'macvtap0\x00'})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0x401}, {{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f0000000880)=""/230, 0xe6}], 0x4, &(0x7f0000000380)=""/163, 0xa3}, 0xc}, {{&(0x7f0000000a40)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/222, 0xde}], 0x1}, 0x5}], 0x3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SET_SECUREBITS(0x1c, 0x10)
setuid(0xee01)
setregid(0x0, 0xee01)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f00000020c0)=<r9=>0x0)
r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r10, 0x4004550c, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r7, 0x47ba, 0x0, 0x10, 0x0, 0x0)

7.372026458s ago: executing program 3 (id=1316):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x6, &(0x7f0000000040)={0x2, 0x73})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
close(r2)

7.049894651s ago: executing program 1 (id=1318):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getpgrp(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000006500003f0600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90)

6.639656217s ago: executing program 1 (id=1319):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x88)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setrlimit(0x0, &(0x7f0000000040)={0x4, 0xe})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x51}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

6.56322979s ago: executing program 2 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
syz_usb_connect(0x3, 0xe8, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b316c910ce1ab2e93d5c010203010902d60002002a10000904ec0600fe02000309048104000e0100a807240126020400b40deb90a94aef33e509c09a395d4f850474c3824fec"], 0x0)

5.79818454s ago: executing program 1 (id=1321):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.233448498s ago: executing program 4 (id=1322):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async, rerun: 32)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0) (async, rerun: 32)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioperm(0x6, 0x2, 0x8) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="41e2714000002006860102000000000000000007000005050001000700000900030073797a32000000000900020073797a3200006205e68204eb5aa5629659e852c0f5f5d06fd5aa0ee600"/85], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48010) (async)
mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x7, 0x0, &(0x7f0000000040)) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000200)=0x8, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) (async, rerun: 32)
close_range(r0, r0, 0x0)

5.11050574s ago: executing program 0 (id=1323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4044004}, 0x4)

5.016071346s ago: executing program 4 (id=1324):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getrusage(0x0, &(0x7f0000000100))
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000f00002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.974782252s ago: executing program 1 (id=1325):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x6, &(0x7f0000000040)={0x2, 0x73})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
dup(r4)
close(r2)

4.930681601s ago: executing program 0 (id=1326):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r3=>0x0}, &(0x7f0000000500)=0xc)
setresuid(r3, 0x0, r3)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$cgroup(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000840)={[{@clone_children}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, ':@\\('}}, {@obj_type={'obj_type', 0x3d, 'target\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x05\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf'}}, {@fsname}]})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, 0x59801, 0x51343}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004890}, 0x80)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)

3.978966885s ago: executing program 3 (id=1327):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=[0x0, 0x0, <r4=>0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x6, 0x0, r1})
r5 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000200))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0)=0x1)
fanotify_init(0x200, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r11)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x3, r4, r3})

3.710777622s ago: executing program 0 (id=1328):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000020c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3.47600504s ago: executing program 2 (id=1329):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c44a51510091cd0c8ccd6248acb6d6457bb480", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2})
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043})
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb})
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd86dd", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.649353733s ago: executing program 4 (id=1330):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getpgrp(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000400600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90)

2.609222719s ago: executing program 2 (id=1331):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
open$dir(0x0, 0x408880, 0x2)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ustat(0xfffffffeffffffff, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x20004841)
sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086201, &(0x7f0000000140)=0x1)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.572996701s ago: executing program 1 (id=1332):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x6, &(0x7f0000000040)={0x2, 0x73})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
dup(r4)
close(r2)

1.620110722s ago: executing program 2 (id=1333):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = syz_clone3(&(0x7f0000000640)={0x140, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440), {0x3e}, &(0x7f0000000480)=""/103, 0x67, &(0x7f0000000500)=""/202, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x10000007)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setattr(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000040)="732fbf", 0x3)

1.619534387s ago: executing program 4 (id=1334):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, 0x989680}})
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
bind$can_j1939(r1, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801d10000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r12 = getpid()
sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

916.156708ms ago: executing program 0 (id=1335):
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) (async)
fcntl$dupfd(r0, 0x0, r1)

830.903206ms ago: executing program 3 (id=1336):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

83.954685ms ago: executing program 2 (id=1337):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10}]}, 0x3c}}, 0x40010)

0s ago: executing program 2 (id=1338):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x6, &(0x7f0000000040)={0x2, 0x73})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
close(r2)

kernel console output (not intermixed with test programs):

318.383372][ T5817] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  318.492440][ T9701] FAULT_INJECTION: forcing a failure.
[  318.492440][ T9701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.509486][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.1.1036 Not tainted syzkaller #0 PREEMPT(full) 
[  318.509504][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.509511][ T9701] Call Trace:
[  318.509514][ T9701]  <TASK>
[  318.509519][ T9701]  dump_stack_lvl+0x16c/0x1f0
[  318.509534][ T9701]  should_fail_ex+0x512/0x640
[  318.509549][ T9701]  _copy_from_user+0x2e/0xd0
[  318.509563][ T9701]  copy_msghdr_from_user+0x98/0x160
[  318.509578][ T9701]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  318.509599][ T9701]  ___sys_sendmsg+0xfe/0x1d0
[  318.509613][ T9701]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.509626][ T9701]  ? __lock_acquire+0x622/0x1c90
[  318.509652][ T9701]  __sys_sendmsg+0x16d/0x220
[  318.509666][ T9701]  ? __pfx___sys_sendmsg+0x10/0x10
[  318.509688][ T9701]  do_syscall_64+0xcd/0xfa0
[  318.509704][ T9701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.509715][ T9701] RIP: 0033:0x7f2ad838f749
[  318.509724][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.509735][ T9701] RSP: 002b:00007f2ad92f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.509745][ T9701] RAX: ffffffffffffffda RBX: 00007f2ad85e5fa0 RCX: 00007f2ad838f749
[  318.509751][ T9701] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  318.509757][ T9701] RBP: 00007f2ad92f0090 R08: 0000000000000000 R09: 0000000000000000
[  318.509763][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.509769][ T9701] R13: 00007f2ad85e6038 R14: 00007f2ad85e5fa0 R15: 00007ffee966b118
[  318.509783][ T9701]  </TASK>
[  318.668297][ T1213] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  318.688896][ T5817] usb 4-1: Using ep0 maxpacket: 8
[  318.697162][ T5817] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  318.706640][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.721080][ T5817] pvrusb2: Hardware description: Terratec Grabster AV400
[  318.728589][ T5817] pvrusb2: **********
[  318.732643][ T5817] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  318.743053][ T5817] pvrusb2: Important functionality might not be entirely working.
[  318.751121][ T5817] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  318.762825][ T5817] pvrusb2: **********
[  318.817046][ T9704] tmpfs: Unknown parameter 'noinode32'
[  318.818095][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  318.830613][    C0] lec:lec_tx_timeout: lec0
[  318.835358][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  318.839600][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.950886][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  318.962294][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  318.980176][ T2337] pvrusb2: Invalid write control endpoint
[  318.994708][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  319.077184][ T9707] ubi31: attaching mtd0
[  319.104366][ T9707] ubi31: scanning is finished
[  319.109237][ T9707] ubi31: empty MTD device detected
[  319.430149][ T1213] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  319.470347][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.484732][ T1213] usb 5-1: Product: syz
[  319.489661][ T9691] pvrusb2: Invalid write control endpoint
[  319.495984][ T1213] usb 5-1: Manufacturer: syz
[  319.507164][ T1213] usb 5-1: SerialNumber: syz
[  319.512937][ T5817] usb 1-1: USB disconnect, device number 32
[  319.589681][ T2337] pvrusb2: Invalid write control endpoint
[  319.595645][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  319.608822][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  319.639734][ T5880] usb 4-1: USB disconnect, device number 45
[  319.649657][ T1213] usb 5-1: config 0 descriptor??
[  319.668420][ T9707] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  319.675999][ T9707] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  319.683330][ T9707] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  319.690752][ T9707] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  319.698341][ T9707] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  319.705204][ T9707] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  319.713281][ T9707] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2283277243
[  319.723465][ T9707] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  319.734607][ T9712] ubi31: background thread "ubi_bgt31d" started, PID 9712
[  319.743982][ T1213] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  319.759227][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  319.770875][ T1213] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  319.781160][ T2337] pvrusb2: Device being rendered inoperable
[  319.787649][ T1213] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  319.803677][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  319.828208][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  319.936940][ T9718] veth1_macvtap: left promiscuous mode
[  319.942833][ T9718] macsec0: entered promiscuous mode
[  319.948381][ T9718] macsec0: entered allmulticast mode
[  320.019287][ T9718] veth1_macvtap: entered promiscuous mode
[  320.020493][ T2337] pvrusb2: Attached sub-driver cx25840
[  320.030858][ T9718] veth1_macvtap: entered allmulticast mode
[  320.031347][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  320.039191][ T9718] macsec0: left promiscuous mode
[  320.052466][ T9718] macsec0: left allmulticast mode
[  320.057678][ T9718] veth1_macvtap: left allmulticast mode
[  320.057706][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  320.919542][   T24] usb 5-1: USB disconnect, device number 29
[  320.951144][   T24] garmin_gps 5-1:0.0: device disconnected
[  321.369461][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.381388][ T7965] net_ratelimit: 48 callbacks suppressed
[  321.381408][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  321.397713][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.406128][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.438656][   T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  321.477005][   T30] audit: type=1400 audit(1764079870.910:1002): avc:  denied  { read } for  pid=9741 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  321.553088][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  321.569622][ T5817] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  321.569980][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.651925][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  321.802988][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  321.810925][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  321.830816][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  321.847771][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  321.889638][ T5817] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  321.897348][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  321.912826][   T24] usb 5-1: string descriptor 0 read error: -22
[  321.921399][ T5817] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  321.933545][   T24] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  321.941702][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  321.943783][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.955067][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  321.964225][   T24] usb 5-1: config 0 descriptor??
[  321.975695][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  322.013589][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  322.137936][   T24] em28xx 5-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  322.148627][   T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  322.149955][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  322.388572][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  322.400872][ T5817] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  322.480889][   T24] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  322.494267][   T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  322.499937][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  322.504415][   T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  322.521745][   T24] em28xx 5-1:0.0: No AC97 audio processor
[  322.552401][   T24] usb 5-1: USB disconnect, device number 30
[  322.566003][   T24] em28xx 5-1:0.0: Disconnecting em28xx
[  322.576460][   T24] em28xx 5-1:0.0: Freeing device
[  322.649990][  T975] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  322.659465][ T5817] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  322.688262][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  322.708102][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  323.268873][  T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  323.290842][  T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  323.301049][ T5817] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  323.315709][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  323.338171][  T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  323.347231][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.355753][ T5817] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  323.379102][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  323.398351][ T9752] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  323.418201][ T5817] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  323.430084][  T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  323.548610][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  323.654884][ T9751] zonefs (nullb0) ERROR: Not a zoned block device
[  323.711420][   T24] usb 5-1: Using ep0 maxpacket: 8
[  323.727525][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  323.737396][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.848190][ T5880] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  324.012055][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  324.019885][   T24] pvrusb2: **********
[  324.024070][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  324.044479][   T24] pvrusb2: Important functionality might not be entirely working.
[  324.058460][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  324.081414][   T24] pvrusb2: **********
[  324.081713][  T975] usb 1-1: USB disconnect, device number 33
[  324.160181][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short
[  324.168644][ T5880] usb 2-1: not running at top speed; connect to a high speed hub
[  324.177348][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.191578][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  324.205225][ T5880] usb 2-1: string descriptor 0 read error: -22
[  324.211598][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.221840][ T2337] pvrusb2: Invalid write control endpoint
[  324.223943][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.243165][ T5880] usb 2-1: 0:2 : does not exist
[  324.272385][ T2337] pvrusb2: Invalid write control endpoint
[  324.278247][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  324.287559][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  324.298015][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  324.308377][ T2337] pvrusb2: Device being rendered inoperable
[  324.315343][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  324.322762][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  324.335357][ T2337] pvrusb2: Attached sub-driver cx25840
[  324.342572][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  324.343559][ T5817] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  324.353109][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  324.362226][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.384023][ T5817] usb 4-1: can't set config #168, error -71
[  324.393489][ T5817] usb 4-1: USB disconnect, device number 46
[  324.479868][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.498350][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.507386][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'.
[  324.658033][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'.
[  324.658093][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  324.675293][    C0] lec:lec_tx_timeout: lec0
[  324.681036][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  324.733280][ T9761] pvrusb2: Attempted to execute control transfer when device not ok
[  324.989937][ T5817] usb 5-1: USB disconnect, device number 31
[  325.040579][ T5880] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  325.402463][ T5880] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  325.426114][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.428853][ T5880] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  325.434992][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.457995][ T5880] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  325.649040][ T5880] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  325.964573][ T5880] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  325.993651][ T5880] usb 2-1: USB disconnect, device number 36
[  326.008527][  T975] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  326.685497][ T9803] dlm: no local IP address has been set
[  326.693297][ T9803] dlm: cannot start dlm midcomms -107
[  326.743448][   T13] net_ratelimit: 50 callbacks suppressed
[  326.743464][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  326.763770][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  326.780032][  T975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  326.840687][  T975] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  326.851566][  T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  326.863777][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.898276][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  326.926780][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  326.934910][ T9786] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  326.960248][  T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  327.076825][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1067'.
[  327.078927][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  327.088354][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1067'.
[  327.102017][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  327.178406][ T5880] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[  327.219365][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1067'.
[  327.228648][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  327.360440][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  327.385650][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  327.422695][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  327.483861][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  327.495229][ T5880] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.509089][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  327.520417][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  327.528203][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  327.541475][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  327.556105][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  327.596440][ T5880] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.646350][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  327.658439][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  327.682023][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  327.690173][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  327.701290][ T5880] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.713221][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  328.077796][  T975] usb 4-1: USB disconnect, device number 47
[  328.110226][ T9816] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004
[  328.123182][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  328.143097][ T5866] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  328.148196][ T5880] usb 2-1: string descriptor 0 read error: -22
[  328.160120][ T5880] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  328.163304][ T5866] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  328.185284][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.240221][ T5880] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  328.417224][   T30] audit: type=1400 audit(1764079877.850:1003): avc:  denied  { read } for  pid=9822 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  328.841817][   T30] audit: type=1400 audit(1764079878.280:1004): avc:  denied  { getopt } for  pid=9826 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  328.918203][   T30] audit: type=1400 audit(1764079878.300:1005): avc:  denied  { lock } for  pid=9826 comm="syz.2.1070" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  328.999092][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'.
[  329.688083][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  329.696125][    C0] lec:lec_tx_timeout: lec0
[  329.701909][  T975] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  329.726453][   T30] audit: type=1400 audit(1764079879.140:1006): avc:  denied  { mount } for  pid=9837 comm="syz.3.1074" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  329.841989][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.854602][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.174225][ T5880] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  330.189898][  T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  330.204067][  T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  330.214357][  T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  330.223739][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.240524][ T9840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  330.318313][ T5880] usb 4-1: device descriptor read/64, error -71
[  330.319329][  T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  330.558242][ T5880] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  330.822346][ T1213] usb 2-1: USB disconnect, device number 37
[  331.038219][ T5880] usb 4-1: device descriptor read/64, error -71
[  331.073954][  T975] usb 1-1: USB disconnect, device number 34
[  331.228628][ T5880] usb usb4-port1: attempt power cycle
[  331.229538][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.298559][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.638453][ T5880] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  331.684781][ T5880] usb 4-1: device descriptor read/8, error -71
[  331.791167][ T9877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1079'.
[  331.798416][   T13] net_ratelimit: 57 callbacks suppressed
[  331.798431][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  331.801887][ T9877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1079'.
[  331.805925][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  331.938239][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  331.975571][ T5880] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  332.001879][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'.
[  332.028795][  T975] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  332.038205][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  332.114701][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  332.115404][ T5880] usb 4-1: device descriptor read/8, error -71
[  332.210175][  T975] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  332.221633][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  332.234287][  T975] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  332.251936][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  332.255566][  T975] usb 5-1: string descriptor 0 read error: -22
[  332.268499][ T5880] usb usb4-port1: unable to enumerate USB device
[  332.296529][  T975] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  332.310952][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  332.316542][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.355671][  T975] usb 5-1: config 0 descriptor??
[  332.370052][  T975] em28xx 5-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  332.380504][  T975] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  332.428741][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  332.447425][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  332.570052][ T9892] binder: 9889:9892 ioctl c0306201 200000000640 returned -22
[  333.035357][   T30] audit: type=1400 audit(1764079882.470:1007): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  333.063969][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.155110][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'.
[  333.669858][  T975] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  333.676285][  T975] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  333.742293][  T975] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  333.752746][  T975] em28xx 5-1:0.0: No AC97 audio processor
[  333.816056][ T9907] dlm: no local IP address has been set
[  333.822413][ T9907] dlm: cannot start dlm midcomms -107
[  333.939105][   T30] audit: type=1400 audit(1764079883.380:1008): avc:  denied  { getopt } for  pid=9908 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  333.971069][   T30] audit: type=1400 audit(1764079883.400:1009): avc:  denied  { write } for  pid=9908 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  334.249014][ T5866] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  334.514339][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  334.631807][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  334.733947][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  334.747240][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  334.760821][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  334.772997][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  334.780800][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  334.798129][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  334.845237][ T5880] usb 5-1: USB disconnect, device number 32
[  334.857029][ T5880] em28xx 5-1:0.0: Disconnecting em28xx
[  334.888986][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  334.915398][ T5880] em28xx 5-1:0.0: Freeing device
[  334.955507][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  334.975026][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  334.985159][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.013378][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.039128][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.053441][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.069257][ T5866] usb 2-1: string descriptor 0 read error: -22
[  335.075707][ T5866] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  335.091815][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.109922][ T5866] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  335.258897][ T5880] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  335.338720][  T975] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  335.389668][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.401414][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.465772][ T5880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  335.498609][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.613594][ T5880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.632011][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.638153][  T975] usb 4-1: device descriptor read/64, error -71
[  335.645619][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.668510][ T9931] zonefs (nullb0) ERROR: Not a zoned block device
[  335.678242][ T5880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  335.686285][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.697838][ T5880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.713503][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.725865][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.753968][ T5880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  335.762044][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.776262][ T5880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.802848][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.814304][ T5880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.840979][ T5880] usb 5-1: string descriptor 0 read error: -22
[  335.847863][ T5880] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  335.858858][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.974134][ T5817] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  335.983133][  T975] usb 4-1: new low-speed USB device number 53 using dummy_hcd
[  336.019915][ T5880] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  336.148203][  T975] usb 4-1: device descriptor read/64, error -71
[  336.209794][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short
[  336.217895][ T5817] usb 1-1: not running at top speed; connect to a high speed hub
[  336.226553][ T5817] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  336.235819][ T5817] usb 1-1: config 1 has no interface number 1
[  336.242229][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  336.255733][ T5817] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  336.258024][ T5880] usb 5-1: USB disconnect, device number 33
[  336.267446][  T975] usb usb4-port1: attempt power cycle
[  336.281443][ T5817] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  336.290801][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.299216][ T5817] usb 1-1: Product: syz
[  336.303385][ T5817] usb 1-1: Manufacturer: syz
[  336.307957][ T5817] usb 1-1: SerialNumber: syz
[  336.529080][ T5817] usb 1-1: 2:1 : unsupported format bits 0x80
[  336.544862][ T5817] usb 1-1: USB disconnect, device number 35
[  336.565635][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  336.648559][  T975] usb 4-1: new low-speed USB device number 54 using dummy_hcd
[  336.678924][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.681353][  T975] usb 4-1: device descriptor read/8, error -71
[  336.689447][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.868284][ T7965] net_ratelimit: 59 callbacks suppressed
[  336.868302][ T7965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  336.882509][ T7965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  336.938211][  T975] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[  336.958624][  T975] usb 4-1: device descriptor read/8, error -71
[  336.999016][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  337.006788][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  337.078497][  T975] usb usb4-port1: unable to enumerate USB device
[  337.119250][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  337.127363][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  337.238276][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  337.246566][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  337.249126][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1099'.
[  337.387040][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  337.395878][ T6212] lec:lec_start_xmit: lec0:No lecd attached
[  337.407576][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  337.623398][ T1213] usb 2-1: USB disconnect, device number 38
[  337.662795][ T9925] adutux: adu_open - error, can't find device for minor 0
[  339.004544][   T30] audit: type=1400 audit(1764079888.430:1010): avc:  denied  { map } for  pid=9972 comm="syz.1.1109" path="socket:[25916]" dev="sockfs" ino=25916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  339.416697][ T5817] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  339.431437][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.441350][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.895051][  T975] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  341.975448][   T60] net_ratelimit: 55 callbacks suppressed
[  341.975467][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  342.063793][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  342.254113][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'.
[  342.310448][  T975] usb 5-1: Using ep0 maxpacket: 16
[  342.491840][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  342.658422][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms
[  342.666464][    C0] lec:lec_tx_timeout: lec0
[  343.798531][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  343.864930][  T975] usb 5-1: device descriptor read/all, error -71
[  343.909837][ T9466] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  343.917681][ T9466] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  344.028173][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  344.035944][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  344.208152][ T5928] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[  344.335997][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  344.385446][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  344.404461][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1118'.
[  344.472976][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  344.487017][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  344.500482][T10004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1118'.
[  344.543206][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.601655][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  344.660889][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  344.699118][   T30] audit: type=1400 audit(1764079894.120:1011): avc:  denied  { write } for  pid=9985 comm="syz.1.1113" path="socket:[24974]" dev="sockfs" ino=24974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  344.755219][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  344.772467][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  344.820773][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'.
[  344.834527][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.906368][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  344.977089][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  345.165796][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  345.178142][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  345.228104][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.590231][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  345.638405][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  345.684533][ T5928] usb 4-1: string descriptor 0 read error: -22
[  345.691007][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  345.710815][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.781784][ T5928] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  345.871960][T10016] dlm: no local IP address has been set
[  345.877592][T10016] dlm: cannot start dlm midcomms -107
[  346.558989][T10024] FAT-fs (loop9): unable to read boot sector
[  346.576247][   T30] audit: type=1400 audit(1764079895.980:1012): avc:  denied  { create } for  pid=10021 comm="syz.4.1123" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  346.597079][    C0] vkms_vblank_simulate: vblank timer overrun
[  346.888560][   T30] audit: type=1400 audit(1764079895.990:1013): avc:  denied  { mounton } for  pid=10021 comm="syz.4.1123" path="/216/file0" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  347.057531][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'.
[  347.269177][ T1076] net_ratelimit: 30 callbacks suppressed
[  347.269196][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.318305][   T30] audit: type=1326 audit(1764079896.090:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  347.350241][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  347.439024][   T30] audit: type=1326 audit(1764079896.090:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  347.463069][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.478425][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.486183][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  347.507382][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.523143][   T30] audit: type=1326 audit(1764079896.090:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  347.546721][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.565783][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.585989][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  347.595506][T10035] bridge_slave_1: left allmulticast mode
[  347.603679][   T30] audit: type=1326 audit(1764079896.090:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  347.628431][T10035] bridge_slave_1: left promiscuous mode
[  347.630191][T10035] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.665406][   T30] audit: type=1326 audit(1764079896.090:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  347.689462][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.708444][ T5928] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  347.728564][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.810133][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.908646][ T5928] usb 1-1: Using ep0 maxpacket: 8
[  347.928298][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  347.956197][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.009159][   T30] audit: type=1326 audit(1764079896.090:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  348.032885][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  348.038649][ T5873] usb 4-1: USB disconnect, device number 56
[  348.048571][T10039] usb 4-1: Couldn't submit interrupt_out_urb -19
[  348.058263][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  348.063298][   T30] audit: type=1326 audit(1764079896.090:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb27f8f749 code=0x7ffc0000
[  348.067700][T10035] bridge_slave_0: left allmulticast mode
[  348.091102][ T5928] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  348.116881][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.127447][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  348.141711][T10035] bridge_slave_0: left promiscuous mode
[  348.147476][T10035] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.149663][ T5928] usb 1-1: Product: syz
[  348.158173][ T1213] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  348.160582][ T5928] usb 1-1: Manufacturer: syz
[  348.175553][ T5928] usb 1-1: SerialNumber: syz
[  348.196994][ T5928] usb 1-1: config 0 descriptor??
[  348.374696][T10049] dlm: no local IP address has been set
[  348.380337][ T1213] usb 5-1: Using ep0 maxpacket: 32
[  348.385563][T10049] dlm: cannot start dlm midcomms -107
[  348.389615][ T1213] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  348.423306][ T1213] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  348.437007][ T5928] usb 1-1: USB disconnect, device number 36
[  348.438117][ T1213] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  348.467190][T10048] sch_tbf: burst 1821 is lower than device lo mtu (65550) !
[  348.482633][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  348.482777][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'.
[  348.521799][ T1213] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  348.532645][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  348.546402][ T1213] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  348.556947][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.581138][ T1213] usb 5-1: config 0 descriptor??
[  348.812270][ T1213] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  349.352385][ T5928] usb 5-1: USB disconnect, device number 36
[  349.417922][ T5928] usblp0: removed
[  349.721704][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'.
[  349.731975][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'.
[  349.804480][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'.
[  351.158676][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  351.158692][   T30] audit: type=1400 audit(1764079900.600:1035): avc:  denied  { append } for  pid=10076 comm="syz.4.1138" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  352.058159][ T5817] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  352.065704][ T5928] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  352.217867][T10094] netlink: 5016 bytes leftover after parsing attributes in process `syz.3.1144'.
[  352.239010][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  352.246418][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  352.261722][ T5928] usb 5-1: Using ep0 maxpacket: 16
[  352.267638][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  352.280300][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  352.292967][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  352.308677][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  352.338779][ T5928] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  352.347939][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  352.358343][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.366316][ T5928] usb 5-1: Product: syz
[  352.372119][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  352.383930][ T6091] net_ratelimit: 60 callbacks suppressed
[  352.383944][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  352.397498][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.408329][ T5928] usb 5-1: Manufacturer: syz
[  352.412931][ T5928] usb 5-1: SerialNumber: syz
[  352.420147][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  352.434490][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  352.470732][   T30] audit: type=1400 audit(1764079901.890:1036): avc:  denied  { read } for  pid=10093 comm="syz.3.1144" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  352.472147][ T5928] usb 5-1: config 0 descriptor??
[  352.496374][   T30] audit: type=1400 audit(1764079901.900:1037): avc:  denied  { open } for  pid=10093 comm="syz.3.1144" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  352.525661][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  352.544449][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  352.552547][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.558349][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.582509][ T5928] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  352.592123][ T5928] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  352.600384][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  352.607935][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  352.665804][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  352.680410][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  352.692570][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  352.700823][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.708951][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  352.723394][ T5817] usb 2-1: string descriptor 0 read error: -22
[  352.730401][ T5817] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  352.743661][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.745597][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.768998][ T5817] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  352.818485][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  352.840824][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.974379][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  352.985800][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  353.019751][T10100] pimreg: entered allmulticast mode
[  353.091414][T10107] binder: 10104:10107 ioctl c0306201 200000000540 returned -22
[  353.473742][ T5928] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  353.508561][ T1213] usb 2-1: USB disconnect, device number 40
[  353.533794][T10109] pimreg: left allmulticast mode
[  353.641867][T10100] EXT4-fs (loop2): unable to read superblock
[  354.073434][ T5928] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  354.109830][ T5928] em28xx 5-1:0.0: board has no eeprom
[  354.228783][ T5817] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  354.860537][ T5928] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  354.868495][ T5928] em28xx 5-1:0.0: dvb set to bulk mode.
[  354.874498][  T975] em28xx 5-1:0.0: Binding DVB extension
[  354.883806][ T5817] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  354.913328][ T5928] usb 5-1: USB disconnect, device number 37
[  354.924915][ T5817] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  354.956346][ T5817] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  354.970838][ T5928] em28xx 5-1:0.0: Disconnecting em28xx
[  354.989866][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.002673][  T975] em28xx 5-1:0.0: Registering input extension
[  355.009900][ T5928] em28xx 5-1:0.0: Closing input extension
[  355.054992][T10113] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  355.071106][ T5817] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  355.087792][ T5928] em28xx 5-1:0.0: Freeing device
[  355.368192][ T5866] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  355.658295][ T5866] usb 4-1: Using ep0 maxpacket: 8
[  355.713240][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short
[  355.733503][ T5866] usb 4-1: config 4 interface 0 has no altsetting 0
[  355.749211][ T5866] usb 4-1: language id specifier not provided by device, defaulting to English
[  355.775844][ T5866] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  355.805697][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.901791][ T5866] usb 4-1: Product:  
[  355.908675][ T5866] usb 4-1: Manufacturer: щ
[  355.918929][ T5866] usb 4-1: SerialNumber: ꎓ矁ꎝ鋺Ýꁈ缇ꚭ緧⬹ంꈹڋ锄绩劭译ꑙ狄ﴋ性Ḵఈ༛焘纐䳌Ꟁ
[  356.421071][ T5866] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  356.504401][T10130] FAULT_INJECTION: forcing a failure.
[  356.504401][T10130] name failslab, interval 1, probability 0, space 0, times 0
[  356.526945][ T5866] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  356.557918][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) 
[  356.557945][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  356.557955][T10130] Call Trace:
[  356.557960][T10130]  <TASK>
[  356.557967][T10130]  dump_stack_lvl+0x16c/0x1f0
[  356.557992][T10130]  should_fail_ex+0x512/0x640
[  356.558011][T10130]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  356.558032][T10130]  should_failslab+0xc2/0x120
[  356.558051][T10130]  __kvmalloc_node_noprof+0x141/0x9c0
[  356.558069][T10130]  ? bucket_table_alloc.isra.0+0x88/0x460
[  356.558092][T10130]  ? bucket_table_alloc.isra.0+0x88/0x460
[  356.558108][T10130]  bucket_table_alloc.isra.0+0x88/0x460
[  356.558127][T10130]  rhashtable_init_noprof+0x41a/0x7e0
[  356.558149][T10130]  rhltable_init_noprof+0x20/0x60
[  356.558168][T10130]  nf_tables_newtable+0xfa7/0x1b50
[  356.558191][T10130]  ? __pfx___nla_validate_parse+0x10/0x10
[  356.558217][T10130]  ? __pfx_nf_tables_newtable+0x10/0x10
[  356.558242][T10130]  ? __nla_parse+0x40/0x60
[  356.558270][T10130]  nfnetlink_rcv_batch+0x190d/0x2350
[  356.558304][T10130]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  356.558340][T10130]  ? avc_has_perm_noaudit+0x149/0x3b0
[  356.558390][T10130]  ? __nla_parse+0x40/0x60
[  356.558417][T10130]  nfnetlink_rcv+0x3c1/0x430
[  356.558434][T10130]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  356.558460][T10130]  netlink_unicast+0x5aa/0x870
[  356.558489][T10130]  ? __pfx_netlink_unicast+0x10/0x10
[  356.558523][T10130]  netlink_sendmsg+0x8c8/0xdd0
[  356.558551][T10130]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.558586][T10130]  ____sys_sendmsg+0xa98/0xc70
[  356.558605][T10130]  ? copy_msghdr_from_user+0x10a/0x160
[  356.558628][T10130]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.558658][T10130]  ___sys_sendmsg+0x134/0x1d0
[  356.558682][T10130]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.558703][T10130]  ? __lock_acquire+0x622/0x1c90
[  356.558751][T10130]  __sys_sendmsg+0x16d/0x220
[  356.558774][T10130]  ? __pfx___sys_sendmsg+0x10/0x10
[  356.558813][T10130]  do_syscall_64+0xcd/0xfa0
[  356.558832][T10130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.558858][T10130] RIP: 0033:0x7f2ad838f749
[  356.558873][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.558888][T10130] RSP: 002b:00007f2ad92f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.558905][T10130] RAX: ffffffffffffffda RBX: 00007f2ad85e5fa0 RCX: 00007f2ad838f749
[  356.558921][T10130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  356.558931][T10130] RBP: 00007f2ad92f0090 R08: 0000000000000000 R09: 0000000000000000
[  356.558951][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.558962][T10130] R13: 00007f2ad85e6038 R14: 00007f2ad85e5fa0 R15: 00007ffee966b118
[  356.558987][T10130]  </TASK>
[  356.576716][ T1213] usb 1-1: USB disconnect, device number 37
[  356.854052][ T5866] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  356.867054][ T5866] usb 4-1: media controller created
[  356.888930][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  357.033111][ T5866] zl10353_read_register: readreg error (reg=127, ret==0)
[  357.144720][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.154572][ T5866] usb 4-1: USB disconnect, device number 57
[  357.169810][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.199447][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.208269][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.359334][T10143] FAULT_INJECTION: forcing a failure.
[  357.359334][T10143] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  357.373658][T10143] CPU: 1 UID: 0 PID: 10143 Comm: syz.3.1157 Not tainted syzkaller #0 PREEMPT(full) 
[  357.373683][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  357.373694][T10143] Call Trace:
[  357.373700][T10143]  <TASK>
[  357.373707][T10143]  dump_stack_lvl+0x16c/0x1f0
[  357.373730][T10143]  should_fail_ex+0x512/0x640
[  357.373756][T10143]  should_fail_alloc_page+0xe7/0x130
[  357.373780][T10143]  prepare_alloc_pages+0x3c2/0x610
[  357.373805][T10143]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  357.373835][T10143]  ? find_held_lock+0x2b/0x80
[  357.373859][T10143]  ? is_bpf_text_address+0x8a/0x1a0
[  357.373881][T10143]  ? bpf_ksym_find+0x127/0x1c0
[  357.373913][T10143]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  357.373939][T10143]  ? is_bpf_text_address+0x94/0x1a0
[  357.373961][T10143]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  357.373988][T10143]  ? __kernel_text_address+0xd/0x40
[  357.374008][T10143]  ? unwind_get_return_address+0x59/0xa0
[  357.374030][T10143]  ? arch_stack_walk+0xa6/0x100
[  357.374059][T10143]  ? _parse_integer_limit+0x17f/0x1d0
[  357.374087][T10143]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  357.374113][T10143]  ? policy_nodemask+0xea/0x4e0
[  357.374136][T10143]  alloc_pages_mpol+0x1fb/0x550
[  357.374157][T10143]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  357.374176][T10143]  ? find_held_lock+0x2b/0x80
[  357.374203][T10143]  ? __pfx_filemap_map_pages+0x10/0x10
[  357.374228][T10143]  alloc_pages_noprof+0x131/0x390
[  357.374250][T10143]  pte_alloc_one+0x1e/0x350
[  357.374272][T10143]  __do_fault+0x320/0x490
[  357.374302][T10143]  ? __pfx_filemap_map_pages+0x10/0x10
[  357.374327][T10143]  do_pte_missing+0x1a6/0x3ba0
[  357.374351][T10143]  ? __thp_vma_allowable_orders+0x1c8/0xcd0
[  357.374377][T10143]  ? __lock_acquire+0x622/0x1c90
[  357.374396][T10143]  __handle_mm_fault+0x1556/0x2aa0
[  357.374427][T10143]  ? __pfx___handle_mm_fault+0x10/0x10
[  357.374456][T10143]  ? lock_vma_under_rcu+0x176/0x530
[  357.374488][T10143]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  357.374519][T10143]  handle_mm_fault+0x589/0xd10
[  357.374545][T10143]  ? __pkru_allows_pkey+0x21/0xb0
[  357.374564][T10143]  do_user_addr_fault+0x60c/0x1370
[  357.374585][T10143]  ? rcu_is_watching+0x12/0xc0
[  357.374611][T10143]  exc_page_fault+0x64/0xc0
[  357.374629][T10143]  asm_exc_page_fault+0x26/0x30
[  357.374645][T10143] RIP: 0033:0x7f184ff58b21
[  357.374661][T10143] Code: 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f 5c 16 fe <62> e1 fe 28 7f 07 62 e1 fe 28 7f 4f 01 62 e1 fe 28 7f 54 17 ff 62
[  357.374678][T10143] RSP: 002b:00007f1850d72028 EFLAGS: 00010283
[  357.374694][T10143] RAX: 0000200000ffc020 RBX: 00007f18501e6180 RCX: 0000000000000048
[  357.374705][T10143] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000200000ffc020
[  357.374716][T10143] RBP: 00007f1850d72090 R08: 0000000000000048 R09: 0000000000000000
[  357.374726][T10143] R10: 0000200000ffc000 R11: 0000200000000000 R12: 0000000000000001
[  357.374736][T10143] R13: 00007f18501e6218 R14: 00007f18501e6180 R15: 00007ffe5daa2588
[  357.374761][T10143]  </TASK>
[  357.375008][T10143] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  357.696471][ T9473] net_ratelimit: 57 callbacks suppressed
[  357.696487][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  357.718862][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.025846][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  358.122486][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.178120][ T5866] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  358.238226][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  358.256909][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.378848][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  358.386656][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.658204][ T5928] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  359.324515][ T5866] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  359.348730][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  359.363221][ T5866] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  359.376168][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  359.388184][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  359.478115][ T5928] usb 2-1: device descriptor read/64, error -71
[  360.311966][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  360.394614][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  360.406158][ T5866] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  360.413709][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  360.432516][ T5866] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.447053][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.460703][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  360.473633][ T5866] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  360.485863][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  360.528887][ T5866] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.549054][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.563906][ T5866] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  360.584819][ T5866] usb 1-1: string descriptor 0 read error: -22
[  360.598541][ T5866] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  360.636546][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.639835][T10165] No buffer was provided with the request
[  360.686697][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'.
[  360.723275][ T5866] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  360.782724][   T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.783168][T10166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10166 comm=syz.4.1161
[  360.838158][ T5928] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  360.853416][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'.
[  360.868231][   T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.892182][   T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.898687][ T1213] usb 1-1: USB disconnect, device number 38
[  360.919794][   T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.933521][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10165 comm=syz.4.1161
[  361.009031][ T5928] usb 2-1: Using ep0 maxpacket: 32
[  361.044334][ T5928] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  361.107347][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.254750][ T5928] usb 2-1: Product: syz
[  361.259444][ T5928] usb 2-1: Manufacturer: syz
[  361.265235][ T5928] usb 2-1: SerialNumber: syz
[  361.273421][ T5928] usb 2-1: config 0 descriptor??
[  361.283280][ T5928] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  361.296562][ T5928] dvb-usb: bulk message failed: -22 (2/0)
[  362.051697][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  362.188713][ T5928] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  362.258751][ T5928] usb 2-1: media controller created
[  362.380958][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  362.426526][ T5928] usb 2-1: selecting invalid altsetting 7
[  362.450307][ T5928] cxusb: set interface failed
[  362.461237][ T5928] dvb-usb: bulk message failed: -22 (1/0)
[  362.710488][ T6091] net_ratelimit: 52 callbacks suppressed
[  362.710505][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  362.728523][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  362.736737][ T5928] DVB: Unable to find symbol lgdt330x_attach()
[  362.786144][ T5928] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  363.025990][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  363.500045][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  363.685519][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  363.706675][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  363.867668][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.036140][ T5928] rc_core: IR keymap rc-dvico-portable not found
[  364.046122][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  364.053820][ T5928] Registered IR keymap rc-empty
[  364.330410][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.350003][ T5928] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  364.367556][ T5928] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28
[  364.378448][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.398135][ T5889] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  364.410708][ T5928] dvb-usb: schedule remote query interval to 100 msecs.
[  364.417757][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  364.455624][ T5928] usb 2-1: USB disconnect, device number 42
[  364.458184][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.519369][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  364.565591][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  364.867413][ T5889] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  364.878457][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  364.904797][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  364.919426][T10206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1170'.
[  364.931082][T10206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1170'.
[  364.983725][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'.
[  365.000558][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.019259][T10203] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  365.040133][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  365.279994][T10198] zonefs (nullb0) ERROR: Not a zoned block device
[  365.299543][ T5928] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  365.632978][ T5889] usb 4-1: USB disconnect, device number 58
[  365.729710][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  365.741200][ T5928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  365.752265][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  365.761654][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.804279][ T5928] usb 2-1: can't set config #27, error -71
[  365.817358][ T5928] usb 2-1: USB disconnect, device number 43
[  365.917937][T10214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.926814][T10214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.158940][ T5928] usb 2-1: new low-speed USB device number 44 using dummy_hcd
[  366.464597][T10221] FAULT_INJECTION: forcing a failure.
[  366.464597][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.496248][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.0.1176 Not tainted syzkaller #0 PREEMPT(full) 
[  366.496264][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  366.496271][T10221] Call Trace:
[  366.496274][T10221]  <TASK>
[  366.496278][T10221]  dump_stack_lvl+0x16c/0x1f0
[  366.496294][T10221]  should_fail_ex+0x512/0x640
[  366.496309][T10221]  _copy_to_user+0x32/0xd0
[  366.496324][T10221]  drm_ioctl+0x5eb/0xc30
[  366.496337][T10221]  ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10
[  366.496352][T10221]  ? __pfx_drm_ioctl+0x10/0x10
[  366.496367][T10221]  ? selinux_file_ioctl+0x180/0x270
[  366.496379][T10221]  ? selinux_file_ioctl+0xb4/0x270
[  366.496391][T10221]  ? __pfx_drm_ioctl+0x10/0x10
[  366.496401][T10221]  __x64_sys_ioctl+0x18e/0x210
[  366.496418][T10221]  do_syscall_64+0xcd/0xfa0
[  366.496429][T10221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.496439][T10221] RIP: 0033:0x7f71ac58f749
[  366.496448][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.496458][T10221] RSP: 002b:00007f71ad45d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  366.496469][T10221] RAX: ffffffffffffffda RBX: 00007f71ac7e5fa0 RCX: 00007f71ac58f749
[  366.496475][T10221] RDX: 0000200000000380 RSI: 00000000c01864ba RDI: 0000000000000003
[  366.496481][T10221] RBP: 00007f71ad45d090 R08: 0000000000000000 R09: 0000000000000000
[  366.496487][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.496492][T10221] R13: 00007f71ac7e6038 R14: 00007f71ac7e5fa0 R15: 00007ffd145b6768
[  366.496505][T10221]  </TASK>
[  366.703411][ T5928] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  366.710978][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  366.722433][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  366.734439][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  366.745956][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  366.758568][ T5928] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  366.766007][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  366.777010][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  366.789210][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  366.801044][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  366.828406][ T5928] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  366.840375][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  366.853754][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  366.867297][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  366.879589][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  366.901229][ T5928] usb 2-1: string descriptor 0 read error: -22
[  366.909317][ T5928] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  366.918771][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.991838][ T5928] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  367.098412][ T5880] usb 4-1: new low-speed USB device number 59 using dummy_hcd
[  367.380439][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  367.391408][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  367.479136][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  367.519131][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  367.538824][ T5928] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  367.538811][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  367.564156][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  367.580168][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  367.603505][ T5873] usb 2-1: USB disconnect, device number 44
[  367.638990][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  367.663779][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  367.676263][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  367.688397][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  367.695831][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  367.707487][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  367.720226][ T1076] net_ratelimit: 45 callbacks suppressed
[  367.720246][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  367.735565][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  367.746882][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  367.755224][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  367.769754][ T5880] usb 4-1: string descriptor 0 read error: -22
[  367.777775][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  367.789921][ T5928] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  367.929961][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  367.939819][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.942202][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  367.967544][ T5880] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  368.006779][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  368.022644][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.034308][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.047126][T10233] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  368.058823][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  368.148646][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  368.156713][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.280777][T10241] xt_nfacct: accounting object `syz1' does not exist
[  368.290443][ T5880] usb 4-1: USB disconnect, device number 59
[  368.297252][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  368.306441][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.431818][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  368.447810][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.767848][ T5880] usb 5-1: USB disconnect, device number 38
[  369.293725][   T30] audit: type=1400 audit(1764079918.580:1038): avc:  denied  { create } for  pid=10249 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  369.368367][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1183'.
[  369.379323][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1183'.
[  369.437851][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'.
[  369.505452][T10256] FAULT_INJECTION: forcing a failure.
[  369.505452][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.520252][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT(full) 
[  369.520277][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  369.520288][T10256] Call Trace:
[  369.520294][T10256]  <TASK>
[  369.520301][T10256]  dump_stack_lvl+0x16c/0x1f0
[  369.520323][T10256]  should_fail_ex+0x512/0x640
[  369.520349][T10256]  _copy_from_user+0x2e/0xd0
[  369.520372][T10256]  core_sys_select+0x2c8/0xc20
[  369.520396][T10256]  ? __pfx_core_sys_select+0x10/0x10
[  369.520438][T10256]  ? set_user_sigmask+0x21b/0x2b0
[  369.520459][T10256]  ? __pfx_set_user_sigmask+0x10/0x10
[  369.520484][T10256]  do_pselect.constprop.0+0x19f/0x1e0
[  369.520503][T10256]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  369.520529][T10256]  __x64_sys_pselect6+0x182/0x240
[  369.520548][T10256]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  369.520572][T10256]  do_syscall_64+0xcd/0xfa0
[  369.520591][T10256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.520608][T10256] RIP: 0033:0x7f2ad838f749
[  369.520623][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.520639][T10256] RSP: 002b:00007f2ad92f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  369.520656][T10256] RAX: ffffffffffffffda RBX: 00007f2ad85e5fa0 RCX: 00007f2ad838f749
[  369.520667][T10256] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  369.520677][T10256] RBP: 00007f2ad92f0090 R08: 0000000000000000 R09: 0000000000000000
[  369.520687][T10256] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  369.520697][T10256] R13: 00007f2ad85e6038 R14: 00007f2ad85e5fa0 R15: 00007ffee966b118
[  369.520721][T10256]  </TASK>
[  370.113399][T10268] bridge0: entered promiscuous mode
[  370.119846][T10268] macvlan2: entered promiscuous mode
[  371.064937][   T30] audit: type=1400 audit(1764079920.280:1039): avc:  denied  { create } for  pid=10271 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  371.102454][T10261] fuse: Unknown parameter '0x0000000000000000'
[  371.185817][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'.
[  372.214090][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.223854][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.022100][   T13] net_ratelimit: 43 callbacks suppressed
[  373.022119][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  373.040923][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.168534][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  373.191774][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.408439][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  373.513110][T10300] dlm: no local IP address has been set
[  373.519533][T10300] dlm: cannot start dlm midcomms -107
[  373.754489][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.869130][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  373.877016][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  374.086279][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  374.195685][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  374.328158][ T5889] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  374.493263][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  374.505204][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  374.520490][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  374.530014][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.553102][T10305] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  374.570199][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  375.058084][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.102191][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.053229][ T5889] usb 1-1: USB disconnect, device number 39
[  376.212527][T10323] dlm: no local IP address has been set
[  376.218285][T10323] dlm: cannot start dlm midcomms -107
[  376.505009][   T30] audit: type=1326 audit(1764079925.940:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.530402][   T30] audit: type=1326 audit(1764079925.940:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.554794][   T30] audit: type=1326 audit(1764079925.970:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.598099][   T30] audit: type=1326 audit(1764079925.970:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.624427][   T30] audit: type=1326 audit(1764079925.970:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.687709][   T30] audit: type=1326 audit(1764079925.990:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.767272][   T30] audit: type=1326 audit(1764079925.990:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  376.914747][   T30] audit: type=1326 audit(1764079925.990:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184ff8f749 code=0x7ffc0000
[  377.034291][   T30] audit: type=1400 audit(1764079926.250:1048): avc:  denied  { read } for  pid=10327 comm="syz.4.1206" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  377.067995][   T30] audit: type=1400 audit(1764079926.250:1049): avc:  denied  { open } for  pid=10327 comm="syz.4.1206" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  377.434038][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.453320][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.111194][ T9470] net_ratelimit: 50 callbacks suppressed
[  378.111213][ T9470] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.138128][ T5889] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  378.395114][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  378.404212][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  378.411025][ T9470] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.519292][ T5928] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  378.538185][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.545931][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.555357][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  378.567499][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  378.580277][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  378.595353][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.606639][T10339] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  378.622175][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  378.659698][ T1076] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.661530][ T5817] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  378.675131][ T1076] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.699928][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  378.710947][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.721107][ T5928] usb 4-1: New USB device found, idVendor=041d, idProduct=0001, bcdDevice= 0.00
[  378.730596][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.740962][ T5928] usb 4-1: config 0 descriptor??
[  378.778221][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.786167][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.828631][   T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  378.838363][ T5817] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  378.851840][ T5817] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  378.862565][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  378.880955][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'.
[  378.890726][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.900691][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.922376][T10342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  378.938734][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  378.953281][ T5817] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  379.018236][   T24] usb 5-1: Using ep0 maxpacket: 8
[  379.047101][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  379.312378][ T5928] hid-generic 0003:041D:0001.000A: unbalanced collection at end of report description
[  379.340044][ T5928] hid-generic 0003:041D:0001.000A: probe with driver hid-generic failed with error -22
[  379.365000][T10351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.367463][   T24] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  379.406272][ T5928] usb 1-1: USB disconnect, device number 40
[  379.457978][   T24] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  379.535111][   T24] usb 5-1: Product: syz
[  379.550768][   T24] usb 5-1: Manufacturer: syz
[  379.568165][   T24] usb 5-1: SerialNumber: syz
[  379.637005][T10351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.890307][ T5880] usb 4-1: USB disconnect, device number 60
[  380.006939][T10352] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  380.083192][   T24] usb 5-1: palm_os_3_probe - error -110 getting connection information
[  380.106576][   T24] visor 5-1:1.0: probe with driver visor failed with error -110
[  381.194504][   T24] usb 2-1: USB disconnect, device number 45
[  381.349130][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.360566][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.656258][   T24] usb 5-1: USB disconnect, device number 39
[  381.749687][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1219'.
[  382.258140][ T5928] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  382.453857][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  382.573638][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  382.605839][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  382.651259][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  382.954429][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  383.278487][ T6091] net_ratelimit: 73 callbacks suppressed
[  383.278499][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  383.304955][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  383.310772][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  383.346485][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  383.380403][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  383.418705][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  383.468467][ T9470] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  383.476547][ T9470] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  383.495899][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  383.536446][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  383.549934][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  383.578101][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  383.607820][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  383.619034][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms
[  383.619063][    C0] lec:lec_tx_timeout: lec0
[  383.632358][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  383.643333][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  383.661285][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  383.752944][ T5928] usb 4-1: string descriptor 0 read error: -22
[  383.759995][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  384.047155][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  384.055354][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  384.062863][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.104696][ T5928] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  384.168162][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  384.176176][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  384.565126][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  384.565137][   T30] audit: type=1326 audit(1764079934.000:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.600772][   T30] audit: type=1326 audit(1764079934.040:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.624241][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.631774][   T30] audit: type=1326 audit(1764079934.040:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.657529][   T30] audit: type=1326 audit(1764079934.040:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.687879][   T30] audit: type=1326 audit(1764079934.040:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.718159][   T30] audit: type=1326 audit(1764079934.040:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.750641][   T30] audit: type=1326 audit(1764079934.040:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.808246][ T5817] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[  384.822066][   T30] audit: type=1326 audit(1764079934.040:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.853072][   T30] audit: type=1326 audit(1764079934.040:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.894426][   T30] audit: type=1326 audit(1764079934.040:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f71ac58f749 code=0x7ffc0000
[  384.970228][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  384.981947][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  384.993404][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  385.009381][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  385.022597][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  385.083781][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  385.091329][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  385.102942][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  385.116448][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  385.130535][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  385.146636][ T5817] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  385.170880][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  385.190953][ T5817] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  385.215897][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  385.233372][ T5817] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  385.253549][ T5817] usb 2-1: string descriptor 0 read error: -22
[  385.262792][ T5817] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  385.272434][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.302242][ T5817] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  385.997590][ T5817] usb 2-1: USB disconnect, device number 46
[  386.358236][ T5928] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  386.388293][ T5889] IPVS: starting estimator thread 0...
[  386.468531][ T5889] usb 4-1: USB disconnect, device number 61
[  386.633942][T10439] IPVS: using max 39 ests per chain, 93600 per kthread
[  386.812952][ T5928] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  386.858384][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.909103][ T5928] usb 5-1: Product: syz
[  386.931736][ T5928] usb 5-1: Manufacturer: syz
[  386.996459][ T5928] usb 5-1: SerialNumber: syz
[  387.348488][T10443] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1239'.
[  388.218206][ T5928] usb 5-1: config 0 descriptor??
[  388.274460][T10442] tty tty3: ldisc open failed (-12), clearing slot 2
[  388.441240][ T9473] net_ratelimit: 56 callbacks suppressed
[  388.441261][ T9473] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  388.506054][ T9473] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  388.570933][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'.
[  388.628136][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  388.661479][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  388.738170][ T5880] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  388.798214][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  388.808279][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  388.829896][T10466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'.
[  388.855147][T10466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'.
[  388.869051][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.878822][ T5880] usb 4-1: device descriptor read/64, error -71
[  388.888549][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.978350][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  388.995990][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  389.031458][ T5928] mos7840 5-1:0.0: required endpoints missing
[  389.040828][ T5928] usb 5-1: USB disconnect, device number 40
[  389.073358][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'.
[  389.118559][ T5880] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  389.160489][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  389.179604][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  389.258166][ T5880] usb 4-1: device descriptor read/64, error -71
[  389.377387][ T5880] usb usb4-port1: attempt power cycle
[  390.042041][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  390.042055][   T30] audit: type=1400 audit(1764079939.480:1072): avc:  denied  { read append } for  pid=10471 comm="syz.4.1247" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  390.072914][    C0] vkms_vblank_simulate: vblank timer overrun
[  390.119475][ T5880] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  390.173496][   T30] audit: type=1400 audit(1764079939.480:1073): avc:  denied  { open } for  pid=10471 comm="syz.4.1247" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  390.200545][ T5880] usb 4-1: device descriptor read/8, error -71
[  390.458117][ T5880] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  390.498476][ T5880] usb 4-1: device descriptor read/8, error -71
[  390.589750][ T5928] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  390.610091][ T5880] usb usb4-port1: unable to enumerate USB device
[  390.819623][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  390.831150][ T5928] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  390.921681][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  390.961548][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.007428][T10479] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  391.044354][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  391.782722][ T5873] usb 5-1: USB disconnect, device number 41
[  392.078124][ T5928] IPVS: starting estimator thread 0...
[  392.099981][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.116464][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.138276][ T5880] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  392.198213][T10497] IPVS: using max 74 ests per chain, 177600 per kthread
[  392.292186][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  392.330473][ T5880] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  392.341114][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.564106][ T5880] gspca_main: nw80x-2.14.0 probing 055f:d001
[  392.669223][ T5889] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  392.988249][   T30] audit: type=1400 audit(1764079942.410:1074): avc:  denied  { getopt } for  pid=10492 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  393.087788][T10508] input: syz1 as /devices/virtual/input/input29
[  393.088378][ T5880] gspca_nw80x: reg_w err -110
[  393.361536][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  393.367154][ T5880] nw80x 2-1:3.0: probe with driver nw80x failed with error -110
[  393.381544][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  393.392250][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  393.401422][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.458733][   T13] net_ratelimit: 67 callbacks suppressed
[  393.458749][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  393.476974][T10502] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  393.625327][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.225799][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  394.239247][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  394.261270][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.577419][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.615529][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  394.654061][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.769266][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  394.778300][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.798761][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.854568][ T5889] usb 1-1: USB disconnect, device number 41
[  394.945335][T10493] dlm: no local IP address has been set
[  394.951624][T10493] dlm: cannot start dlm midcomms -107
[  394.958791][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  394.966532][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.996643][   T24] usb 2-1: USB disconnect, device number 47
[  395.050402][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1263'.
[  395.062183][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1263'.
[  395.127637][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1263'.
[  395.228144][ T5928] usb 4-1: new low-speed USB device number 66 using dummy_hcd
[  395.381788][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  395.389567][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  395.409591][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.481350][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  395.519226][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  395.552129][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  395.560208][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  395.585870][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.596756][   T30] audit: type=1400 audit(1764079945.020:1075): avc:  denied  { cmd } for  pid=10535 comm="syz.2.1267" path="socket:[28179]" dev="sockfs" ino=28179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  395.605421][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  395.620583][    C1] vkms_vblank_simulate: vblank timer overrun
[  395.649817][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  395.711247][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1266'.
[  395.731830][ T5928] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  395.750993][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  395.762998][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.779448][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  395.791130][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  395.805719][ T5928] usb 4-1: string descriptor 0 read error: -22
[  395.812363][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  395.821842][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.853644][ T5928] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  396.171487][   T24] usb 4-1: USB disconnect, device number 66
[  396.181735][T10547] usb 4-1: Couldn't submit interrupt_out_urb -19
[  396.806590][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'.
[  397.758767][ T5928] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  398.108136][ T5866] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  398.171143][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  398.194919][ T5928] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  398.290479][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  398.299815][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.313856][T10564] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  398.831591][ T9466] net_ratelimit: 58 callbacks suppressed
[  398.831604][ T9466] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  398.846780][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  398.859192][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  398.869106][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  398.878657][ T9466] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  398.889155][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  398.989118][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  398.997654][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  399.127155][ T9470] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  399.345020][ T9470] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  399.371694][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.421433][   T30] audit: type=1400 audit(1764079948.850:1076): avc:  denied  { shutdown } for  pid=10577 comm="syz.2.1279" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  399.466115][T10569] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  399.494560][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  399.508494][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  399.521859][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  399.601708][ T5928] usb 4-1: USB disconnect, device number 67
[  399.680301][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  399.752142][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  400.417196][ T5928] usb 1-1: USB disconnect, device number 42
[  400.938221][   T24] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[  400.947534][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.963754][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.298624][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  401.309108][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  401.320005][   T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.332812][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  401.344412][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  401.364807][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  401.378390][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  401.400831][   T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.425071][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  401.439161][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  401.457443][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  401.465145][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  401.478182][   T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.490740][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  401.502169][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  401.518852][ T5866] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  401.522065][   T24] usb 2-1: string descriptor 0 read error: -22
[  401.533134][   T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  401.566019][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.684351][   T24] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  402.078947][   T24] usb 2-1: USB disconnect, device number 48
[  402.154479][ T6212] lec:lec_start_xmit: lec0:No lecd attached
[  402.165065][ T5866] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  402.178769][ T5866] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  402.193372][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  402.203690][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.214559][T10603] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  402.225824][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  402.427666][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.436603][ T5880] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  402.463712][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.472935][T10602] zonefs (nullb0) ERROR: Not a zoned block device
[  402.618227][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  402.632186][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  402.731852][ T5880] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  402.786180][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  402.849262][ T5880] usb 1-1: Product: syz
[  402.849544][ T5866] usb 4-1: USB disconnect, device number 68
[  402.856461][ T5880] usb 1-1: Manufacturer: syz
[  402.867860][ T5880] usb 1-1: SerialNumber: syz
[  402.881167][ T5880] usb 1-1: config 0 descriptor??
[  402.887605][T10615] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  403.161405][   T30] audit: type=1400 audit(1764079952.600:1077): avc:  denied  { setopt } for  pid=10613 comm="syz.0.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  403.350432][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.359999][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.960187][ T6091] net_ratelimit: 56 callbacks suppressed
[  403.960205][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  403.981761][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  404.128628][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  404.136849][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  404.248218][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  404.256326][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  404.368269][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  404.376773][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  404.656330][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  404.665325][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  404.758278][   T30] audit: type=1400 audit(1764079954.180:1078): avc:  denied  { ioctl } for  pid=10641 comm="syz.4.1299" path="socket:[27623]" dev="sockfs" ino=27623 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  405.307819][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'.
[  406.258540][   T30] audit: type=1400 audit(1764079955.310:1079): avc:  denied  { mount } for  pid=10659 comm="syz.4.1305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  406.754731][ T5866] usb 1-1: USB disconnect, device number 43
[  406.803161][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1307'.
[  407.446491][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.462293][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.618295][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms
[  407.626356][    C0] lec:lec_tx_timeout: lec0
[  407.899693][ T5866] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  408.214482][T10697] 9pnet_fd: p9_fd_create_unix (10697): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  408.223121][   T30] audit: type=1400 audit(1764079957.660:1080): avc:  denied  { map } for  pid=10695 comm="syz.1.1314" path="socket:[28485]" dev="sockfs" ino=28485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  408.316652][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  408.429472][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  408.466791][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  408.481971][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  408.494285][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  408.522545][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  408.613003][   T30] audit: type=1400 audit(1764079957.960:1081): avc:  denied  { getopt } for  pid=10699 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  408.969459][ T6091] net_ratelimit: 52 callbacks suppressed
[  408.969627][ T6091] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  409.108279][ T6091] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  409.128405][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  409.179731][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  409.200422][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  409.212154][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  409.228575][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  409.229673][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  409.244530][ T5928] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  409.252372][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  409.258107][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  409.271645][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  409.449523][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  409.542948][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  409.557392][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  409.586360][ T5928] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  409.616704][ T5866] usb 5-1: string descriptor 0 read error: -22
[  409.623447][ T5866] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  409.632711][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  409.647111][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.648214][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  409.656979][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.680609][ T5866] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  409.691348][T10708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  409.707390][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  409.782986][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'.
[  410.054541][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  410.178364][ T9466] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  410.267748][ T9466] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  410.287984][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.306235][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.385997][ T5866] usb 5-1: USB disconnect, device number 42
[  410.453662][T10707] zonefs (nullb0) ERROR: Not a zoned block device
[  410.668728][ T9466] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  410.798760][ T9466] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  411.133676][ T5866] usb 4-1: USB disconnect, device number 69
[  412.175078][ T5866] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  412.364273][ T5866] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  412.375705][ T5866] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  412.385939][ T5866] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  412.395585][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.448772][T10740] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  412.566401][ T5866] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  413.041057][ T5866] usb 2-1: USB disconnect, device number 49
[  413.984138][ T9463] net_ratelimit: 42 callbacks suppressed
[  413.984155][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.520926][ T5889] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  414.577441][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  414.710027][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.738848][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.746608][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  414.823851][ T5889] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  414.979141][ T5889] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  414.990881][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.006731][T10765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  415.052660][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  415.068117][ T9463] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  415.095712][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.259068][ T9466] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  415.292123][ T9466] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.448385][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  415.589906][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.649434][ T5889] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  415.885664][ T5866] usb 2-1: USB disconnect, device number 50
[  415.893217][ T5889] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  415.967977][ T5889] usb 1-1: config 0 has no interface number 0
[  415.985255][ T5889] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  416.010759][ T5889] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  416.042815][ T5889] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  416.055943][ T5889] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  416.065882][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  416.075533][ T5889] usb 1-1: Product: syz
[  416.094902][ T5889] usb 1-1: SerialNumber: syz
[  416.102572][ T5889] usb 1-1: config 0 descriptor??
[  416.135516][ T5889] cm109 1-1:0.8: invalid payload size 0, expected 4
[  416.160372][ T5889] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30
[  416.298209][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.504268][ T5889] ------------[ cut here ]------------
[  416.505105][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.510195][ T5889] URB ffff888031d91f00 submitted while active
[  416.525358][ T5889] WARNING: CPU: 0 PID: 5889 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990
[  416.535250][ T5889] Modules linked in:
[  416.539657][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  416.550638][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  416.560957][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.570472][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.577491][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.584872][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.591868][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.598968][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.605980][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.613315][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.620400][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.627383][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  416.634418][ T5889] Workqueue: usb_hub_wq hub_event
[  416.640149][ T5889] RIP: 0010:usb_submit_urb+0x16f5/0x1990
[  416.645776][ T5889] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 0b b5 fa c6 05 7a c7 62 09 01 90 48 c7 c7 40 16 50 8c 48 89 de e8 6c 3e 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24
[  416.666973][ T5889] RSP: 0018:ffffc90004f6ee90 EFLAGS: 00010282
[  416.674701][ T5889] RAX: 0000000000000000 RBX: ffff888031d91f00 RCX: ffffc9001888f000
[  416.683259][ T5889] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001
[  416.692006][ T5889] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  416.700744][ T5889] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807b0358a0
[  416.709139][ T5889] R13: ffff88807b035810 R14: ffff88807b03589f R15: ffff88807b035850
[  416.717406][ T5889] FS:  0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000
[  416.726642][ T5889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  416.733898][ T5889] CR2: 0000001b2fbeeff8 CR3: 000000005a953000 CR4: 00000000003526f0
[  416.742861][ T5889] Call Trace:
[  416.746266][ T5889]  <TASK>
[  416.749652][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  416.755792][ T5889]  ? __pm_runtime_resume+0xc3/0x170
[  416.761937][ T5889]  cm109_input_open+0x27a/0x490
[  416.767680][ T5889]  ? __pfx_cm109_input_open+0x10/0x10
[  416.774272][ T5889]  input_open_device+0x24c/0x3d0
[  416.779580][ T5889]  kbd_connect+0x103/0x160
[  416.784304][ T5889]  input_attach_handler.isra.0+0x176/0x250
[  416.790750][ T5889]  input_register_device+0xab9/0x1180
[  416.796122][ T5889]  cm109_usb_probe+0x122f/0x17c0
[  416.801394][ T5889]  usb_probe_interface+0x303/0xa40
[  416.806502][ T5889]  ? __pfx_usb_probe_interface+0x10/0x10
[  416.812508][ T5889]  really_probe+0x241/0xa90
[  416.817304][ T5889]  __driver_probe_device+0x1de/0x440
[  416.823310][ T5889]  driver_probe_device+0x4c/0x1b0
[  416.828612][ T5889]  __device_attach_driver+0x1df/0x310
[  416.834300][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  416.840517][ T5889]  bus_for_each_drv+0x159/0x1e0
[  416.845364][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  416.851486][ T5889]  ? lockdep_hardirqs_on+0x7c/0x110
[  416.857489][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  416.863735][ T5889]  __device_attach+0x1e4/0x4b0
[  416.869282][ T5889]  ? __pfx___device_attach+0x10/0x10
[  416.874669][ T5889]  ? do_raw_spin_unlock+0x172/0x230
[  416.880918][ T5889]  bus_probe_device+0x17f/0x1c0
[  416.885980][ T5889]  device_add+0x1148/0x1aa0
[  416.890519][ T5889]  ? __pfx_device_add+0x10/0x10
[  416.895389][ T5889]  ? mark_held_locks+0x49/0x80
[  416.900203][ T5889]  usb_set_configuration+0x1187/0x1e20
[  416.905687][ T5889]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  416.912121][ T5889]  usb_generic_driver_probe+0xb1/0x110
[  416.917605][ T5889]  usb_probe_device+0xef/0x3e0
[  416.922394][ T5889]  ? __pfx_usb_probe_device+0x10/0x10
[  416.927797][ T5889]  really_probe+0x241/0xa90
[  416.932386][ T5889]  __driver_probe_device+0x1de/0x440
[  416.937694][ T5889]  ? usb_driver_applicable+0x1c7/0x220
[  416.943527][ T5889]  driver_probe_device+0x4c/0x1b0
[  416.948591][ T5889]  __device_attach_driver+0x1df/0x310
[  416.953987][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  416.959915][ T5889]  bus_for_each_drv+0x159/0x1e0
[  416.964790][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  416.970999][ T5889]  ? lockdep_hardirqs_on+0x7c/0x110
[  416.976180][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  416.982373][ T5889]  __device_attach+0x1e4/0x4b0
[  416.987220][ T5889]  ? __pfx___device_attach+0x10/0x10
[  416.992592][ T5889]  ? do_raw_spin_unlock+0x172/0x230
[  416.997823][ T5889]  bus_probe_device+0x17f/0x1c0
[  417.003062][ T5889]  device_add+0x1148/0x1aa0
[  417.007616][ T5889]  ? __pfx_device_add+0x10/0x10
[  417.012499][ T5889]  ? add_device_randomness+0xb7/0xf0
[  417.017813][ T5889]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  417.023756][ T5889]  usb_new_device+0xd07/0x1a60
[  417.028884][ T5889]  ? do_raw_spin_lock+0x12c/0x2b0
[  417.033946][ T5889]  ? __pfx_usb_new_device+0x10/0x10
[  417.039200][ T5889]  ? mark_held_locks+0x49/0x80
[  417.044014][ T5889]  hub_event+0x2f34/0x4fe0
[  417.048487][ T5889]  ? __pfx_hub_event+0x10/0x10
[  417.053295][ T5889]  ? interval_tree_remove+0xae0/0xee0
[  417.059067][ T5889]  ? rcu_is_watching+0x12/0xc0
[  417.063850][ T5889]  process_one_work+0x9cf/0x1b70
[  417.069542][ T5889]  ? __pfx_hcd_resume_work+0x10/0x10
[  417.074820][ T5889]  ? __pfx_process_one_work+0x10/0x10
[  417.080606][ T5889]  ? assign_work+0x1a0/0x250
[  417.085233][ T5889]  worker_thread+0x6c8/0xf10
[  417.090188][ T5889]  ? __kthread_parkme+0x19e/0x250
[  417.095231][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  417.100382][ T5889]  kthread+0x3c5/0x780
[  417.104479][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.109096][ T5889]  ? rcu_is_watching+0x12/0xc0
[  417.113874][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.118852][ T5889]  ret_from_fork+0x675/0x7d0
[  417.123456][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.128160][ T5889]  ret_from_fork_asm+0x1a/0x30
[  417.132943][ T5889]  </TASK>
[  417.135984][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  417.143248][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  417.152590][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.162634][ T5889] Workqueue: usb_hub_wq hub_event
[  417.167641][ T5889] Call Trace:
[  417.170914][ T5889]  <TASK>
[  417.173825][ T5889]  dump_stack_lvl+0x3d/0x1f0
[  417.178409][ T5889]  vpanic+0x640/0x6f0
[  417.182394][ T5889]  ? usb_submit_urb+0x16f5/0x1990
[  417.187397][ T5889]  panic+0xca/0xd0
[  417.191100][ T5889]  ? __pfx_panic+0x10/0x10
[  417.195513][ T5889]  check_panic_on_warn+0xab/0xb0
[  417.200451][ T5889]  __warn+0xf6/0x3c0
[  417.204369][ T5889]  ? preempt_schedule_notrace+0x62/0xe0
[  417.209945][ T5889]  ? usb_submit_urb+0x16f5/0x1990
[  417.214973][ T5889]  report_bug+0x3c3/0x580
[  417.219309][ T5889]  ? usb_submit_urb+0x16f5/0x1990
[  417.224324][ T5889]  handle_bug+0x184/0x210
[  417.228639][ T5889]  exc_invalid_op+0x17/0x50
[  417.233118][ T5889]  asm_exc_invalid_op+0x1a/0x20
[  417.237943][ T5889] RIP: 0010:usb_submit_urb+0x16f5/0x1990
[  417.243564][ T5889] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 0b b5 fa c6 05 7a c7 62 09 01 90 48 c7 c7 40 16 50 8c 48 89 de e8 6c 3e 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24
[  417.263157][ T5889] RSP: 0018:ffffc90004f6ee90 EFLAGS: 00010282
[  417.269245][ T5889] RAX: 0000000000000000 RBX: ffff888031d91f00 RCX: ffffc9001888f000
[  417.277218][ T5889] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001
[  417.285181][ T5889] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  417.293135][ T5889] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807b0358a0
[  417.301090][ T5889] R13: ffff88807b035810 R14: ffff88807b03589f R15: ffff88807b035850
[  417.309042][ T5889]  ? __warn_printk+0x1a5/0x350
[  417.313815][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  417.319608][ T5889]  ? __pm_runtime_resume+0xc3/0x170
[  417.324782][ T5889]  cm109_input_open+0x27a/0x490
[  417.329616][ T5889]  ? __pfx_cm109_input_open+0x10/0x10
[  417.334981][ T5889]  input_open_device+0x24c/0x3d0
[  417.339908][ T5889]  kbd_connect+0x103/0x160
[  417.344304][ T5889]  input_attach_handler.isra.0+0x176/0x250
[  417.350090][ T5889]  input_register_device+0xab9/0x1180
[  417.355442][ T5889]  cm109_usb_probe+0x122f/0x17c0
[  417.360553][ T5889]  usb_probe_interface+0x303/0xa40
[  417.365648][ T5889]  ? __pfx_usb_probe_interface+0x10/0x10
[  417.371258][ T5889]  really_probe+0x241/0xa90
[  417.375748][ T5889]  __driver_probe_device+0x1de/0x440
[  417.381013][ T5889]  driver_probe_device+0x4c/0x1b0
[  417.386019][ T5889]  __device_attach_driver+0x1df/0x310
[  417.391365][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  417.397239][ T5889]  bus_for_each_drv+0x159/0x1e0
[  417.402155][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  417.407503][ T5889]  ? lockdep_hardirqs_on+0x7c/0x110
[  417.412678][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  417.418462][ T5889]  __device_attach+0x1e4/0x4b0
[  417.423198][ T5889]  ? __pfx___device_attach+0x10/0x10
[  417.428468][ T5889]  ? do_raw_spin_unlock+0x172/0x230
[  417.433644][ T5889]  bus_probe_device+0x17f/0x1c0
[  417.438475][ T5889]  device_add+0x1148/0x1aa0
[  417.442963][ T5889]  ? __pfx_device_add+0x10/0x10
[  417.447785][ T5889]  ? mark_held_locks+0x49/0x80
[  417.452536][ T5889]  usb_set_configuration+0x1187/0x1e20
[  417.457995][ T5889]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  417.464051][ T5889]  usb_generic_driver_probe+0xb1/0x110
[  417.469491][ T5889]  usb_probe_device+0xef/0x3e0
[  417.474230][ T5889]  ? __pfx_usb_probe_device+0x10/0x10
[  417.479579][ T5889]  really_probe+0x241/0xa90
[  417.484067][ T5889]  __driver_probe_device+0x1de/0x440
[  417.489329][ T5889]  ? usb_driver_applicable+0x1c7/0x220
[  417.494765][ T5889]  driver_probe_device+0x4c/0x1b0
[  417.499763][ T5889]  __device_attach_driver+0x1df/0x310
[  417.505120][ T5889]  ? __pfx___device_attach_driver+0x10/0x10
[  417.510989][ T5889]  bus_for_each_drv+0x159/0x1e0
[  417.515820][ T5889]  ? __pfx_bus_for_each_drv+0x10/0x10
[  417.521444][ T5889]  ? lockdep_hardirqs_on+0x7c/0x110
[  417.526625][ T5889]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  417.532422][ T5889]  __device_attach+0x1e4/0x4b0
[  417.537165][ T5889]  ? __pfx___device_attach+0x10/0x10
[  417.542927][ T5889]  ? do_raw_spin_unlock+0x172/0x230
[  417.548130][ T5889]  bus_probe_device+0x17f/0x1c0
[  417.553013][ T5889]  device_add+0x1148/0x1aa0
[  417.557518][ T5889]  ? __pfx_device_add+0x10/0x10
[  417.562373][ T5889]  ? add_device_randomness+0xb7/0xf0
[  417.567646][ T5889]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  417.573553][ T5889]  usb_new_device+0xd07/0x1a60
[  417.578404][ T5889]  ? do_raw_spin_lock+0x12c/0x2b0
[  417.583423][ T5889]  ? __pfx_usb_new_device+0x10/0x10
[  417.588630][ T5889]  ? mark_held_locks+0x49/0x80
[  417.593382][ T5889]  hub_event+0x2f34/0x4fe0
[  417.597792][ T5889]  ? __pfx_hub_event+0x10/0x10
[  417.602542][ T5889]  ? interval_tree_remove+0xae0/0xee0
[  417.607899][ T5889]  ? rcu_is_watching+0x12/0xc0
[  417.612641][ T5889]  process_one_work+0x9cf/0x1b70
[  417.617560][ T5889]  ? __pfx_hcd_resume_work+0x10/0x10
[  417.622821][ T5889]  ? __pfx_process_one_work+0x10/0x10
[  417.628187][ T5889]  ? assign_work+0x1a0/0x250
[  417.632769][ T5889]  worker_thread+0x6c8/0xf10
[  417.637378][ T5889]  ? __kthread_parkme+0x19e/0x250
[  417.642391][ T5889]  ? __pfx_worker_thread+0x10/0x10
[  417.647492][ T5889]  kthread+0x3c5/0x780
[  417.651575][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.656148][ T5889]  ? rcu_is_watching+0x12/0xc0
[  417.660910][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.665479][ T5889]  ret_from_fork+0x675/0x7d0
[  417.670038][ T5889]  ? __pfx_kthread+0x10/0x10
[  417.674599][ T5889]  ret_from_fork_asm+0x1a/0x30
[  417.679346][ T5889]  </TASK>
[  417.682670][ T5889] Kernel Offset: disabled
[  417.686977][ T5889] Rebooting in 86400 seconds..