last executing test programs:

12.784033496s ago: executing program 1 (id=1207):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x101, 0x51, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x17, 0xff, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @private=0xa010102, @local]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r0=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f000001b5c0)={&(0x7f000001b4c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000001b580)={&(0x7f000001b500)=@getsa={0x78, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {@in=@private=0xa010101, 0x4d4, 0x2, 0x3c}, [@lastused={0xc, 0xf, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb1aab3158b7eab5, 0x3, 0xfd}}, @offload={0xc, 0x1c, {r0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000001b680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f000001b7c0)={&(0x7f000001b600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000001b780)={&(0x7f000001b6c0)={0xb0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xfb}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xc2}]}, @NL80211_ATTR_HIDDEN_SSID={0x9, 0x7e, @random="2dfa4ab9b5"}, @NL80211_ATTR_IE={0x6f, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8, 0xe}}, @link_id={0x65, 0x12}, @supported_rates={0x1, 0x3, [{0xd}, {0x18, 0x1}, {0x24, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x4, 0x6, @broadcast, 0x2683290c, 0x54, 0xc9}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x5, 0x0, {0x5, 0x10, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x4, 0x6}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x5, 0x89, @broadcast, 0x3b, 0x0, 0x9}}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0)
vmsplice(r2, &(0x7f000001b440)=[{&(0x7f0000019300)="c7f74a77387744805b54129d3d1007fec30331b30a072142378b8c2ae76710a5bc4508e796bb85253b9edd24dafe686889dfcdc19d8fef935360aefa26d529c258db17358ffd8491d68ada98808865378bbf725817df94f8638e1d1977fa247421193fc3d1e0cbb6f1b52076729e595492f504e05530a8122f4e6e5fa90ceeb08e73d5f427cf2d3ab289547b7c3dc9d2e758f859ef1d71e16a8b661b9f68d5070cc10b8a45a75afaabab8ca18f892bc9e2f94f95adc49eb649eb5e7100e038b90389a6f881a330978b2a47e98b24672b61066a4fc61f3eb8a45898770174cec2437b58fbe72b1747d1da827316ee1642", 0xf0}, {&(0x7f0000000140)="06acf19c02ecd6ebb5096aa45e858c6386691db30071f8e924afb5f1be2b11cf220f0f6ffe275a48", 0x28}, {&(0x7f0000019400)="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", 0x1000}, {&(0x7f000001a400)="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", 0x1000}, {&(0x7f000001b400)="aa1166a5c67e35a9eb8bf5d6a8a5c70ffacdfe8c506c953d32bcf0b347543f2ecd027e9693330ece19437c0c475b21fd682781e2", 0x34}], 0x5, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)

10.053115706s ago: executing program 1 (id=1219):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x3fc, &(0x7f0000000c40)=ANY=[@ANYBLOB="120100010b1a0540101410907e95010203010902ea0302024010060904cf490b02060002390812b36443236d8fbb31d60617e3ed99ff2c3d5ef982d8906a65bdca6d420f08991ea40a4600675d79e9e029cfe02a28f3bd5bedfade64620a24010500080201020c2407040000f2df8b066a7c0c24020500020407faff040b0d2408040700053be5e4459401082405060a2f"], 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, 0xffffffffffffffff)
close_range(r7, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)

9.938581465s ago: executing program 3 (id=1220):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x30000, 0x112000})
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x39, &(0x7f0000000540)="67461384d937000949283cdec85c2de97e09400f79004fd11cfe0235bdba6a4211a9a01136b98a7ba37b456aa6b70d940700560ab901c618f3")
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000})
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)=@arm64_sve={0x6080000000150600, &(0x7f0000000000)=0x4})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)

8.584395842s ago: executing program 4 (id=1221):
r0 = socket$kcm(0x23, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e000071228da30ea7b2a400000027d9c67438813382c5a84e357be973e97524c6821bdafc101c84e28a4636d63fdb81467866664f2cc8a4420ee8ea1698c2cc98d891eac398e3fefbbb1ff9dd7cfa25e02d504220001e61ecba2a8f0efd1345d348b78dc1a4a4e30a171cbe106da2c08eb9f4d70f3a060000ef8c013fc8d89c830b5f177aac9172401ac17d"], 0x48)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x0, 0x5, 0x4, 0x1000, 0x2, <r2=>0x0})
ptrace$peekuser(0x3, r2, 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip_vti0\x00', <r3=>0x0, 0x8000, 0x40, 0x100, 0x9, {{0xc, 0x4, 0x1, 0x29, 0x30, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @multicast1, {[@ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x2, [0x8, 0x8db7, 0x7]}]}}}}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x3, 0x1, 0x4, 0x3}}, 0x80, 0x0}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000081)
bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0)
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x2280, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000240)={0x3, <r8=>r6, 0x2})
read$nci(r8, &(0x7f0000000140)=""/244, 0xf4)
r9 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r8, r1}, 0xc)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0)

7.501805743s ago: executing program 3 (id=1223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)

7.37952124s ago: executing program 3 (id=1224):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
close(r1)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40043d0d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x78}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x28f43000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)

6.699546373s ago: executing program 1 (id=1225):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7})
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$key(0xf, 0x3, 0x2)

6.418592383s ago: executing program 3 (id=1226):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x4, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9}, 0x5})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000090502"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r2, @ANYBLOB="000000006f8618000500500002000000080040"], 0x30}}, 0x0)

6.2731639s ago: executing program 2 (id=1227):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000000800"/20, @ANYRES32, @ANYBLOB="0000000000000000c18dd7352548f4c500000000", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000000000008000"/28], 0x48)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x929, 0x200000000005)
r2 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2c, 0x8, &(0x7f00000044c0))
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14)
fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400008b17b61c38067e342080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000a00000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000ebb602000014000000392d660a54b24715cc5618f5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYBLOB="9d"], 0x34}}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2f00, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2a)

5.446633326s ago: executing program 4 (id=1229):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x101, 0x51, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x17, 0xff, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @private=0xa010102, @local]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r0=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f000001b5c0)={&(0x7f000001b4c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000001b580)={&(0x7f000001b500)=@getsa={0x78, 0x12, 0x300, 0x70bd2b, 0x25dfdbfc, {@in=@private=0xa010101, 0x4d4, 0x2, 0x3c}, [@lastused={0xc, 0xf, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb1aab3158b7eab5, 0x3, 0xfd}}, @offload={0xc, 0x1c, {r0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000001b680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f000001b7c0)={&(0x7f000001b600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000001b780)={&(0x7f000001b6c0)={0xb0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xfb}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xc2}]}, @NL80211_ATTR_HIDDEN_SSID={0x9, 0x7e, @random="2dfa4ab9b5"}, @NL80211_ATTR_IE={0x6f, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8, 0xe}}, @link_id={0x65, 0x12}, @supported_rates={0x1, 0x3, [{0xd}, {0x18, 0x1}, {0x24, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x4, 0x6, @broadcast, 0x2683290c, 0x54, 0xc9}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x5, 0x0, {0x5, 0x10, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x4, 0x6}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x5, 0x89, @broadcast, 0x3b, 0x0, 0x9}}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0)
vmsplice(r2, &(0x7f000001b440)=[{&(0x7f0000019300)="c7f74a77387744805b54129d3d1007fec30331b30a072142378b8c2ae76710a5bc4508e796bb85253b9edd24dafe686889dfcdc19d8fef935360aefa26d529c258db17358ffd8491d68ada98808865378bbf725817df94f8638e1d1977fa247421193fc3d1e0cbb6f1b52076729e595492f504e05530a8122f4e6e5fa90ceeb08e73d5f427cf2d3ab289547b7c3dc9d2e758f859ef1d71e16a8b661b9f68d5070cc10b8a45a75afaabab8ca18f892bc9e2f94f95adc49eb649eb5e7100e038b90389a6f881a330978b2a47e98b24672b61066a4fc61f3eb8a45898770174cec2437b58fbe72b1747d1da827316ee1642", 0xf0}, {&(0x7f0000000140)="06acf19c02ecd6ebb5096aa45e858c6386691db30071f8e924afb5f1be2b11cf220f0f6ffe275a48", 0x28}, {&(0x7f0000019400)="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", 0x1000}, {&(0x7f000001a400)="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", 0x1000}, {&(0x7f000001b400)="aa1166a5c67e35a9eb8bf5d6a8a5c70ffacdfe8c506c953d32bcf0b347543f2ecd027e9693330ece19437c0c475b21fd682781e2", 0x34}], 0x5, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)

5.344531767s ago: executing program 2 (id=1230):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
close(r1)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40043d0d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x78}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x28f43000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)

3.71910862s ago: executing program 2 (id=1232):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000100), 0x68dc, 0x40000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000008e000490b7124000000000000000000000000000000000000000000000000000180000000000000000a00000087000000bd77e58317c7eba238ce3d2263227080d08f17b111800714477cacd9fc7479d46c579d4e83c4054a1e31e893d01b3006efb6c5cdef3cf645b3df169a771ba934d0b0784594dcb401c47abb093cd4893b719925ccb43ec2149717a30aae8f92838d720740050ff3e376416966ff070000580076d43cb86072919cdc47e6f1a1a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000040fbffffffffffffff0000000000000000010000000000000002000000000000000000000000000000000800"/112], 0xb8}}, 0x2c000010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000400000000000000000000000000a66dbdb500000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000100008000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0100"/112], 0xb8}}, 0x4004)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f00000002c0)={0xfffffffffffffd7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)
ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0)

3.6427106s ago: executing program 0 (id=1233):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x810)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)

3.414844784s ago: executing program 1 (id=1234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x2000, 0x49)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000"], 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x3}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.759019967s ago: executing program 3 (id=1235):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [0xfffffffc, 0x7, 0x3]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r4, 0x0, 0x0, 0x6, 0x0, [<r7=>0x0], [], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000440)={r7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r11, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}}, 0x4004000)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r13=>0x0, <r14=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x73ca9cdf, 0x7, 0x5, 0xf94, 0xffffffffffffffff, 0x5, 0x7}, &(0x7f00000000c0)={0x2, 0x4, 0x8536721, 0x9, 0x5, 0x7ff, 0xfe, 0x2}, &(0x7f0000000100)={0x60, 0x7, 0x8, 0x1, 0xb, 0x9, 0x6, 0x3}, &(0x7f0000000180)={r13, r14+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x4]}, 0x8})
pwritev2(r12, 0x0, 0x0, 0xfffff, 0x0, 0x0)

2.682111952s ago: executing program 2 (id=1236):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000440)={0x20, 0x31, 0x3, "f14b74"}, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_DEFRAG(r3, 0x8004b706, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

2.62267425s ago: executing program 0 (id=1237):
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc1ea35512)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x18c8, 0x2c, 0x927, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x1898, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_BASIC_POLICE={0x460, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd4}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x5, 0x4, 0x9, 0x9, 0x8, 0x9883, 0x9, 0x3, 0xf, 0x0, 0xff, 0x7, 0xfffffff7, 0x3, 0x9, 0x40, 0x6, 0xf, 0x8, 0x8, 0x78f, 0x4, 0x9, 0x9, 0x80000000, 0x2, 0x7f, 0x6, 0x3, 0x3, 0x7, 0x1d6, 0x8, 0x1, 0x3, 0x3, 0x9, 0x4c, 0x9, 0x5, 0x9, 0x8, 0xe96, 0xddd, 0x6, 0x3, 0x400, 0x4, 0x3, 0xb4b5, 0x2, 0x4, 0xa, 0x9, 0x101, 0x7, 0x1000, 0xa9c, 0xc4a3, 0x100, 0x4, 0x1, 0x8b2c, 0x4, 0x5, 0x8, 0x6, 0xf40a, 0x0, 0xa, 0x8000, 0x7, 0x6, 0x7, 0xcf01, 0x2, 0x9, 0x315, 0xfffffffd, 0x1, 0x1c00000, 0xb23000, 0x8e, 0x0, 0x4, 0x8, 0x5, 0x8000, 0x9, 0x1ff, 0x6, 0x3, 0xe0, 0x6065, 0x200, 0xfff, 0x3, 0x5, 0x0, 0x401, 0x3, 0x5, 0x1000, 0x6, 0x7fffffff, 0xdb5, 0x2, 0x4, 0x9, 0x8, 0x3, 0x9, 0x1, 0x6, 0x40, 0x6, 0x9, 0xffff4663, 0x7, 0x2800000, 0x3, 0x6, 0x1, 0x164, 0x7, 0x2, 0x3, 0x400, 0x9, 0x80, 0x3, 0x5, 0x10, 0x9, 0xcda, 0x1, 0x4a1ae8e6, 0xfffffffb, 0x0, 0xfffff346, 0x80000000, 0x9, 0x7, 0x7, 0x79b7a114, 0x5, 0xfb7, 0x943, 0x10000, 0x8000, 0x101, 0x4, 0x8, 0xd, 0x67, 0xe16, 0xffffff7f, 0x9, 0x401, 0x24c, 0x101, 0x7, 0x5e, 0x9, 0x2, 0x80, 0x0, 0x600000, 0x4, 0x0, 0x1, 0x70, 0x0, 0x101, 0x5, 0x9, 0x6, 0x5, 0x45ae, 0xde84, 0x8, 0x7f, 0x0, 0x3, 0xfffffffb, 0x7fffffff, 0x9, 0x9, 0x7, 0x8000, 0x6, 0x1ff, 0xc192, 0x10001, 0x3, 0x7f, 0x9, 0x1, 0x40000, 0x9, 0x6, 0x2, 0x1, 0x5, 0x3, 0xb40, 0x2, 0x1db, 0x3, 0x2, 0x480, 0x7, 0x9, 0xdd9f, 0x7, 0x5, 0x6037, 0x5, 0x8, 0x1, 0xfffffffe, 0x9, 0x84f, 0x4, 0xd4, 0x9, 0xfffff6e6, 0x5, 0x0, 0xa, 0x6d, 0x9, 0x3, 0x1, 0x0, 0x2, 0xfffffffb, 0x1, 0x3, 0x9, 0x20000, 0x4, 0x1, 0xffff0001, 0x5, 0xa, 0x5, 0x6, 0x8, 0x7f, 0x10, 0x3, 0xd, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0xffffffff, 0x8, 0x800, {0x8, 0x0, 0x88, 0x5, 0x5, 0x800}, {0x5, 0x0, 0x8, 0x5, 0x8001, 0x28}, 0x6, 0x40000000, 0xa}}]}, @TCA_BASIC_ACT={0x1404, 0x3, [@m_xt={0x1400, 0xb, 0x0, 0x0, {{0x7}, {0x1320, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x8, 'nat\x00', 0x8, 0x1, "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"}}, @TCA_IPT_TARG={0xa7, 0x6, {0xfffa, 'security\x00', 0x9, 0x7, "fa2d04285494d88be407444c60ffe80981f3a6a6caa701ef7b92423005ffd6dda41deb69ff1b600d6a7a2629aee7c97735608af75833a37765c938e85dccc45c1eb8fc8989458d5e0489ad2296f8af25e0f09c22703530abef7460624a101bc40d11072db8c340b89c20bbc4f093c99b783b8a4abe79ef3a7a878f4805"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xc0, 0x6, {0x5, 'security\x00', 0xb, 0x7, "3a48034352603e1eaa992b949958c45c334c5967f09a17ac9802ac28603c31c9150b55b0dc87a67f1594c0e7f71a8e27d69700edc7c2204934fd4c11240f0632721437b8bbeb672683f64a9bd395b7939ebaddaca74da24fdf332957b5020a99f578fbe4476f33dd0ab8323224bfd3298120b11766824d5ee1c502b57f91bde1d7d283fcb9cb2825319619f4f449cb6b525f19926382"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xb8, 0x6, {0x9, 'filter\x00', 0x29, 0x8, "fa6926721bce7108b2837ce70d53e098788107f55c0d5a34632d7f3736cc2538c87907aa523df4602eece0a1bb05235f46a56aeebc8c7cc9a04440d5a3822c70ba6970aeab2b026a65d90443d681cbf66f960563afbae36697063e2011981950b7f65392dbf32185f707f9de0a02545e59dfd3942f0420c99b15b8679c79e378d29d8783e06e9241206060e13e72"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_TARG={0xaf, 0x6, {0x11, 'nat\x00', 0x8, 0x5, "5a93a234bfa1ca57241146caa253ca52ee5c97286fc9a680f2c9280af66dfd345d8f46f04d421f940f7aae908f7eb1556f060204f1964b1746304778c393e3ec3d3523fd453595cfc9217040b5ae3b114eb65b39fc94c6efa06b77272c1f11f78603ba953eb6867104d8f3fc5929468f0e425b2bbab10cf532eaff524e977e5396d990b3ee"}}]}, {0xbc, 0x6, "e438d45f7d89287f8dc7bb80e99a829dceca1b30e131f9678c06a65a50e35b01fb7578062dbb6acff85074ca7ff0779f34f7e35251b57072ba4426a48e99c18251b758f93dcfe5e928d8fa74dbad03c3da5bcd53a8df512715b9721d3f94d7a8c0c1917fcd599ca8b486d3263a0faf9e69ec70ea2066c6053d76b40b4fe94f833abaec3183f4de6689b7d5add4eece7121695e13d654b1b696a03d80e091eb2a40a2fb806eb355f680b534cbc73599f8b502a89f0ada97bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xfff2}}]}}]}, 0x18c8}, 0x1, 0x0, 0x0, 0x2c804}, 0x20040054)

2.548679449s ago: executing program 0 (id=1238):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"})

2.493142786s ago: executing program 0 (id=1239):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001880)={0x1e, 0x0, [{0x4000, 0x62, &(0x7f0000003040)=""/98}, {0x3000, 0x11, &(0x7f00000004c0)=""/17}]})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r2, 0x0, 0x0, 0x0, 0xf})
r6 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_setup(0x186b, &(0x7f00000005c0)={0x0, 0x16f, 0x800, 0x0, 0x3c8}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r9 = socket(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x6d, 0x2}, 0x10)
connect$inet(r9, &(0x7f0000000440)={0x10, 0x2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0x40, &(0x7f00000003c0)='cubic', 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)

2.251810261s ago: executing program 4 (id=1240):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65986000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1a0d01120001ffffffffffff090481070506000500000000000000f65cf088e9a3ba921130b1e2ba4cacc4d82916a8a20b3470805f92c0f9fa399b2d69351f34d1cdec62e9207ecf8f60fd19d93710b908e28855191e5e330a398535d787cad509e942ae68958394b9"], 0x1d)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = socket$inet6(0x2d, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x102, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
syz_io_uring_setup(0xb31, &(0x7f0000000240)={0x0, 0x10086f3, 0x8000, 0x40, 0x2de}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.878703413s ago: executing program 0 (id=1241):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18)
getsockopt$inet6_buf(r5, 0x29, 0x2c, 0x0, &(0x7f0000000300))

1.688297917s ago: executing program 1 (id=1242):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14)

1.47329934s ago: executing program 1 (id=1243):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x30000, 0x112000})
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x39, &(0x7f0000000540)="67461384d937000949283cdec85c2de97e09400f79004fd11cfe0235bdba6a4211a9a01136b98a7ba37b456aa6b70d940700560ab901c618f3")
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000})
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)=@arm64_sve={0x6080000000150600, &(0x7f0000000000)=0x4})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})

1.290881123s ago: executing program 4 (id=1244):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

974.193536ms ago: executing program 0 (id=1245):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000440)={0x20, 0x31, 0x3, "f14b74"}, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_DEFRAG(r3, 0x8004b706, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

326.723202ms ago: executing program 3 (id=1246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000080)=0xffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb4, 0x1c080, 0x800a, 0x3cd})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000580)=ANY=[@ANYBLOB="49bf8e254cb0642c88a10b8e7a18654ec6b7c55606f5de61221da61deeab1e91cae122150045ccbe9b47d599474f4b5e35e6ffb65224afb584617f9d8936802033ed966bf1a6b7b34c805e5ad4bcefba4cbb80b1b615e1221fc38c47dcb73ed4f5c6dd4ed424dec92e307c8784bab4a4481383837cacd51476a495694a33190deb5db328de1eae82fbcc054c0f870611f328ddc3c474ee33"], 0x12, 0x2)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000011600082bbd7000ffdbdf25080001000200ef090077a1a1eea871e6b6cafd8ebd76774339000000000000000800010001000000080001000200000008000100000000000800010001000000080001f9ff000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x40014)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x8, 0x10000000, 0x0, 'queue0\x00'})
write$sndseq(r4, &(0x7f0000000080)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xff]}}], 0x1c)

287.267306ms ago: executing program 2 (id=1247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x121102, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f)

253.506153ms ago: executing program 4 (id=1248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x41006, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2})
close(0x4)

23.189274ms ago: executing program 2 (id=1249):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000001c0))

0s ago: executing program 4 (id=1250):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280b00, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x95d})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0xfffd, 0x1, 0x4002004c7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0x25000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x1, 0xa, 0x6, 0xa, 0x0, 0x7, 0x7}, {0x5, 0x2, 0xf9, 0x58, 0xdd, 0xff, 0xd, 0x3, 0x4, 0x9, 0x7, 0xa, 0x7}, {0x7, 0xa, 0x3, 0x3, 0xf8, 0x9, 0x8, 0x3, 0xa, 0x82, 0xc, 0xa7, 0x6}], 0xfffffffa})
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x2})

kernel console output (not intermixed with test programs):

lue: 3
[  426.592460][ T5876] usb 1-1: config 5 interface 246 has no altsetting 0
[  426.614530][ T5876] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  426.634517][  T980] usb 2-1: not running at top speed; connect to a high speed hub
[  426.649846][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.683252][ T5876] usb 1-1: Product: syz
[  426.687421][ T5876] usb 1-1: Manufacturer: syz
[  426.689823][  T980] usb 2-1: config 80 has an invalid interface number: 46 but max is 0
[  426.735911][ T5876] usb 1-1: SerialNumber: syz
[  426.747111][  T980] usb 2-1: config 80 has no interface number 0
[  426.790016][  T980] usb 2-1: config 80 interface 46 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  426.927301][  T980] usb 2-1: config 80 interface 46 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  427.349198][ T5932] usb 1-1: Failed to submit usb control message: -71
[  427.364506][ T5932] usb 1-1: unable to send the bmi data to the device: -71
[  427.377395][ T5876] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  427.392866][  T980] usb 2-1: config 80 interface 46 altsetting 4 has an endpoint descriptor with address 0x39, changing to 0x9
[  427.420642][  T980] usb 2-1: config 80 interface 46 altsetting 4 endpoint 0x9 has an invalid bInterval 187, changing to 4
[  427.449265][  T980] usb 2-1: config 80 interface 46 altsetting 4 endpoint 0x9 has invalid maxpacket 29761, setting to 1023
[  427.457275][ T5932] usb 1-1: unable to get target info from device
[  427.469842][  T980] usb 2-1: config 80 interface 46 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[  427.491494][  T980] usb 2-1: config 80 interface 46 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[  427.515026][ T5876] usb 1-1: USB disconnect, device number 28
[  427.515149][  T980] usb 2-1: config 80 interface 46 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  427.543292][ T5932] usb 1-1: could not get target info (-71)
[  427.588177][  T980] usb 2-1: config 80 interface 46 altsetting 4 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  427.597382][ T5932] usb 1-1: could not probe fw (-71)
[  427.642878][  T980] usb 2-1: config 80 interface 46 has no altsetting 0
[  427.670697][  T980] usb 2-1: New USB device found, idVendor=413c, idProduct=81a9, bcdDevice=19.01
[  427.700076][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.709234][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'.
[  427.729750][  T980] usb 2-1: Product: ꁿꏪ桉峖͒嵁ᨯ䓠굀烟㠖ꨴ齣㭒嗵᜝˻⅚뤾⒪揳၈븪뷮桡椳붆塽♋℩찏悔찎뤴娽띜硞蚝Ќ̹翝앖냏퀞僀⎰쫶뱤龣鑯ɳ
[  427.755455][T10215] l2tp_ppp: sess 2/0: no socket in recv
[  427.761099][   T30] audit: type=1400 audit(1769902643.664:752): avc:  denied  { name_bind } for  pid=10214 comm="syz.2.961" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  427.779700][  T980] usb 2-1: Manufacturer: 鸼嫑ˣ鄒㩗雳晉ꯋ︀ョ陀診఺浳鮸㧍綹폶ń쀧ᗢ䛧쐯蹢౪黻疳尝⻱饝噤껴໦뚘㍷ӈି呲번Ꮜՠᒘ㐷㱫啄虦ﵧ颾붶ᆁ쩘㦏娸奸㕟㓷담ऊ屮㢈塝眖䐂璦ૂꣅ謾⾁㐫
[  427.880191][  T980] usb 2-1: SerialNumber: ᕪ옡樗훉鍢줓侜挽轣脓땂䊁ꩰ熘貘㓰⦛毂扺ꈻ휃ᡝ鵎푈쩕偎∮㶟੸函߬Ꞗ꟧ࣺꪙ䩳⓹ꉸтꂽ⼖屠쒏㴥ﰛ켜㣼⑭蛥㕸괔䥭볤菅ЯG哬ⱁϮ䈖艟r뫝腁䱂涀ᖬ븚玐誕뒯尦鶈惵ﴂℯࡄ㱤쇰혉焏ꠅ定ꢸ刺㒊黧阡擓쎖楞淠롎旕䗋縤揆孠컾楁
[  427.951653][ T5890] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  427.971448][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  428.122007][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  428.195630][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'.
[  428.290018][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.337265][ T5819] Bluetooth: min 7 > max 1
[  428.366710][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.385724][  T980] usb 2-1: USB disconnect, device number 32
[  428.483220][ T5890] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  428.560763][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.722629][ T5890] usb 4-1: config 0 descriptor??
[  429.266592][ T5890] aquacomputer_d5next 0003:0C70:F014.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0
[  430.353893][   T30] audit: type=1400 audit(1769902646.264:753): avc:  denied  { create } for  pid=10213 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  430.395599][ T5819] Bluetooth: hci2: command 0x0406 tx timeout
[  430.401737][   T30] audit: type=1400 audit(1769902646.284:754): avc:  denied  { ioctl } for  pid=10213 comm="syz.3.960" path="socket:[26476]" dev="sockfs" ino=26476 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  430.499742][ T5890] usb 4-1: reset high-speed USB device number 24 using dummy_hcd
[  430.711395][   T48] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  431.025296][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'.
[  431.387701][   T48] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[  431.399842][   T48] usb 1-1: config 0 has no interface number 0
[  431.406339][   T48] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  431.418124][   T48] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  431.428272][   T48] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  431.444251][   T48] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  431.460383][   T48] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  431.484174][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.508576][   T48] usb 1-1: Product: syz
[  431.523376][   T48] usb 1-1: Manufacturer: syz
[  431.529708][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  431.537715][    C0] lec:lec_tx_timeout: lec0
[  431.542440][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  431.543174][   T48] usb 1-1: SerialNumber: syz
[  431.573205][   T48] usb 1-1: config 0 descriptor??
[  431.596821][   T48] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  431.629236][   T48] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input22
[  431.809769][ T5971] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  431.969522][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.996224][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.015322][   T48] usb 1-1: USB disconnect, device number 29
[  432.022136][ T5971] usb 3-1: Using ep0 maxpacket: 16
[  432.063947][ T5971] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.089738][ T5971] usb 3-1: config 0 interface 0 has no altsetting 0
[  432.096365][ T5971] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  432.117762][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.140599][ T5971] usb 3-1: config 0 descriptor??
[  432.381256][T10284] input: syz0 as /devices/virtual/input/input23
[  432.396028][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'.
[  432.450270][ T5890] usb 4-1: device descriptor read/64, error -71
[  432.589614][ T5971] nzxt-smart2 0003:1E71:2009.000D: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  432.709744][ T5890] usb 4-1: reset high-speed USB device number 24 using dummy_hcd
[  432.742879][ T5890] usb 4-1: device reset changed ep0 maxpacket size!
[  432.779168][    T9] usb 4-1: USB disconnect, device number 24
[  432.919891][   T30] audit: type=1400 audit(1769902648.824:755): avc:  denied  { name_connect } for  pid=10290 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  432.959962][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  433.159755][    T9] usb 4-1: Using ep0 maxpacket: 16
[  433.165197][T10293] futex_wake_op: syz.0.976 tries to shift op by 144; fix this program
[  433.174734][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.184977][    T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.213610][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  433.225996][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.239927][ T5890] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  433.257683][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  433.285549][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.314674][    T9] usb 4-1: config 0 descriptor??
[  433.429971][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  433.438682][ T5890] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  433.474323][ T5890] usb 2-1: config 0 has no interface number 0
[  433.504198][ T5890] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  433.550360][ T5971] usb 3-1: USB disconnect, device number 27
[  433.560863][ T5890] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  433.597893][ T5890] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  433.620192][ T5890] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  433.644024][ T5890] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  433.669753][ T5890] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  433.689210][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.715841][ T5890] usb 2-1: config 0 descriptor??
[  433.739248][ T5890] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  433.767864][    T9] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  433.940613][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  434.314557][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.918568][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.034181][T10305] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  435.612110][T10310] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  436.010017][ T5890] usb 4-1: USB disconnect, device number 25
[  436.051967][ T5971] usb 2-1: USB disconnect, device number 33
[  436.071574][ T5971] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  436.439595][T10319] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  436.472856][T10326] netlink: zone id is out of range
[  436.478095][T10326] netlink: zone id is out of range
[  436.483699][T10326] netlink: zone id is out of range
[  436.488844][T10326] netlink: zone id is out of range
[  436.519739][T10326] netlink: zone id is out of range
[  436.559771][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  436.567755][    C0] lec:lec_tx_timeout: lec0
[  436.572299][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  436.587954][T10326] netlink: zone id is out of range
[  436.609691][T10326] netlink: zone id is out of range
[  436.645402][T10326] netlink: zone id is out of range
[  436.665148][T10326] netlink: zone id is out of range
[  436.670579][T10326] netlink: zone id is out of range
[  436.751204][T10319] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  436.793044][T10319] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  438.545449][T10348] FAULT_INJECTION: forcing a failure.
[  438.545449][T10348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.608825][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.1.988 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.608853][T10348] Tainted: [L]=SOFTLOCKUP
[  438.608859][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  438.608870][T10348] Call Trace:
[  438.608876][T10348]  <TASK>
[  438.608882][T10348]  dump_stack_lvl+0x100/0x190
[  438.608909][T10348]  should_fail_ex.cold+0x5/0xa
[  438.608927][T10348]  _copy_from_user+0x2e/0xd0
[  438.608950][T10348]  kstrtouint_from_user+0xd6/0x1d0
[  438.608965][T10348]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  438.608979][T10348]  ? __lock_acquire+0x4a5/0x2630
[  438.608998][T10348]  ? lock_acquire+0x17c/0x330
[  438.609018][T10348]  proc_fail_nth_write+0x83/0x220
[  438.609042][T10348]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  438.609072][T10348]  vfs_write+0x2aa/0x1070
[  438.609091][T10348]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  438.609115][T10348]  ? __pfx_vfs_write+0x10/0x10
[  438.609131][T10348]  ? find_held_lock+0x2b/0x80
[  438.609153][T10348]  ? __fget_files+0x215/0x3d0
[  438.609178][T10348]  ? __fget_files+0x21f/0x3d0
[  438.609204][T10348]  ksys_write+0x12a/0x250
[  438.609223][T10348]  ? __pfx_ksys_write+0x10/0x10
[  438.609248][T10348]  do_syscall_64+0xc9/0xf80
[  438.609269][T10348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.609287][T10348] RIP: 0033:0x7fc1c735b78e
[  438.609300][T10348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  438.609317][T10348] RSP: 002b:00007fc1c8270fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  438.609335][T10348] RAX: ffffffffffffffda RBX: 00007fc1c82716c0 RCX: 00007fc1c735b78e
[  438.609347][T10348] RDX: 0000000000000001 RSI: 00007fc1c82710a0 RDI: 0000000000000004
[  438.609357][T10348] RBP: 00007fc1c8271090 R08: 0000000000000000 R09: 0000000000000000
[  438.609368][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.609378][T10348] R13: 00007fc1c7616038 R14: 00007fc1c7615fa0 R15: 00007fffafc5b178
[  438.609403][T10348]  </TASK>
[  439.070656][   T30] audit: type=1400 audit(1769902654.964:756): avc:  denied  { map } for  pid=10362 comm="syz.4.991" path="socket:[27323]" dev="sockfs" ino=27323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  439.183184][T10370] bridge0: port 3(gretap0) entered blocking state
[  439.193592][T10370] bridge0: port 3(gretap0) entered disabled state
[  439.204810][T10370] gretap0: entered allmulticast mode
[  439.224255][T10370] gretap0: entered promiscuous mode
[  439.248097][T10370] bridge0: port 3(gretap0) entered blocking state
[  439.254945][T10370] bridge0: port 3(gretap0) entered forwarding state
[  439.472930][   T30] audit: type=1400 audit(1769902654.984:757): avc:  denied  { bind } for  pid=10357 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  439.523005][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  439.529293][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  439.536152][   T30] audit: type=1400 audit(1769902654.984:758): avc:  denied  { listen } for  pid=10357 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  439.592911][T10369] netlink: 'syz.1.990': attribute type 13 has an invalid length.
[  439.799865][   T48] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  439.873865][   T30] audit: type=1400 audit(1769902654.984:759): avc:  denied  { accept } for  pid=10357 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  439.873909][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  439.917395][   T30] audit: type=1400 audit(1769902655.054:760): avc:  denied  { write } for  pid=10357 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1
[  439.944510][   T30] audit: type=1400 audit(1769902655.664:761): avc:  denied  { ioctl } for  pid=10373 comm="syz.0.993" path="socket:[27338]" dev="sockfs" ino=27338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  439.999461][   T30] audit: type=1400 audit(1769902655.664:762): avc:  denied  { bind } for  pid=10373 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  440.030023][   T48] usb 4-1: device descriptor read/64, error -32
[  440.702313][T10393] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  440.990064][ T5971] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  441.109890][   T48] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  441.220538][ T5971] usb 3-1: Using ep0 maxpacket: 8
[  441.360597][ T5971] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  441.368730][ T5971] usb 3-1: config 0 has no interface number 0
[  441.389907][   T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.407858][   T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  441.416748][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  441.438169][   T48] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  441.447440][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  441.474059][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.484020][ T5971] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  441.514535][   T48] usb 4-1: config 0 descriptor??
[  441.524608][ T5971] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  441.543129][   T48] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  441.565369][   T48] dvb-usb: bulk message failed: -22 (3/0)
[  441.579739][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  441.600753][   T48] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  441.619756][ T5971] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  441.636441][   T48] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  441.646152][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.656286][   T48] usb 4-1: media controller created
[  441.677512][   T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  441.686492][ T5971] usb 3-1: config 0 descriptor??
[  441.714282][ T5971] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  441.747455][   T48] dvb-usb: bulk message failed: -22 (6/0)
[  441.783260][   T48] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  441.815284][T10404] netlink: 76 bytes leftover after parsing attributes in process `syz.0.997'.
[  441.819987][   T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24
[  441.878337][T10405] dvb-usb: bulk message failed: -22 (2/0)
[  441.897240][   T48] dvb-usb: schedule remote query interval to 150 msecs.
[  441.914492][T10405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=10405 comm=syz.3.992
[  441.937935][   T48] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  441.942184][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'.
[  441.979472][    T9] usb 3-1: USB disconnect, device number 28
[  442.026738][    T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  442.092367][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  442.098947][ T5971] dvb-usb: error while querying for an remote control event.
[  442.129274][T10411] FAULT_INJECTION: forcing a failure.
[  442.129274][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.142722][T10411] CPU: 1 UID: 0 PID: 10411 Comm: syz.4.996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  442.142749][T10411] Tainted: [L]=SOFTLOCKUP
[  442.142755][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  442.142766][T10411] Call Trace:
[  442.142771][T10411]  <TASK>
[  442.142778][T10411]  dump_stack_lvl+0x100/0x190
[  442.142806][T10411]  should_fail_ex.cold+0x5/0xa
[  442.142826][T10411]  _copy_from_iter+0x1f4/0x1690
[  442.142853][T10411]  ? __alloc_skb+0x220/0x410
[  442.142873][T10411]  ? __alloc_skb+0x35d/0x410
[  442.142892][T10411]  ? __pfx__copy_from_iter+0x10/0x10
[  442.142915][T10411]  ? netlink_autobind.isra.0+0xc0/0x370
[  442.142950][T10411]  netlink_sendmsg+0x808/0xda0
[  442.142980][T10411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  442.143004][T10411]  ? PageHuge+0x180/0x180
[  442.143031][T10411]  ____sys_sendmsg+0xa54/0xc30
[  442.143051][T10411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  442.143080][T10411]  ___sys_sendmsg+0x190/0x1e0
[  442.143099][T10411]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.143130][T10411]  ? find_held_lock+0x2b/0x80
[  442.143169][T10411]  __sys_sendmsg+0x170/0x220
[  442.143194][T10411]  ? __pfx___sys_sendmsg+0x10/0x10
[  442.143232][T10411]  do_syscall_64+0xc9/0xf80
[  442.143255][T10411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.143272][T10411] RIP: 0033:0x7f413799aeb9
[  442.143287][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.143304][T10411] RSP: 002b:00007f4138943028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.143322][T10411] RAX: ffffffffffffffda RBX: 00007f4137c15fa0 RCX: 00007f413799aeb9
[  442.143333][T10411] RDX: 0000000024000844 RSI: 0000200000000140 RDI: 0000000000000003
[  442.143343][T10411] RBP: 00007f4138943090 R08: 0000000000000000 R09: 0000000000000000
[  442.143354][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.143363][T10411] R13: 00007f4137c16038 R14: 00007f4137c15fa0 R15: 00007ffcf8922188
[  442.143387][T10411]  </TASK>
[  442.709729][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6140 ms
[  442.717744][    C0] lec:lec_tx_timeout: lec0
[  442.722339][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  442.824971][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  442.830757][ T5971] dvb-usb: error while querying for an remote control event.
[  442.993509][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  443.006117][   T30] audit: type=1400 audit(1769902658.914:763): avc:  denied  { read write } for  pid=10419 comm="syz.1.1001" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  443.021070][    T9] usb 4-1: USB disconnect, device number 27
[  443.051637][   T30] audit: type=1400 audit(1769902658.914:764): avc:  denied  { open } for  pid=10419 comm="syz.1.1001" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  443.135763][ T5971] dvb-usb: error while querying for an remote control event.
[  443.166089][   T30] audit: type=1400 audit(1769902659.044:765): avc:  denied  { create } for  pid=10419 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  443.761183][T10431] 9p: Bad value for 'rfdno'
[  444.205992][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  444.696636][T10441] 9p: Bad value for 'rfdno'
[  444.738988][   T30] audit: type=1400 audit(1769902660.644:766): avc:  denied  { ioctl } for  pid=10419 comm="syz.1.1001" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  444.895775][T10433] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1001'.
[  445.570303][ T5971] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  445.800437][ T5971] usb 4-1: Using ep0 maxpacket: 16
[  445.818706][ T5971] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.861875][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0
[  445.868499][ T5971] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  445.908392][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.918998][   T30] audit: type=1400 audit(1769902661.814:767): avc:  denied  { bind } for  pid=10452 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  445.958852][   T30] audit: type=1400 audit(1769902661.814:768): avc:  denied  { name_bind } for  pid=10452 comm="syz.2.1008" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  445.999728][   T30] audit: type=1400 audit(1769902661.814:769): avc:  denied  { node_bind } for  pid=10452 comm="syz.2.1008" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  446.041820][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  446.066668][ T5971] usb 4-1: config 0 descriptor??
[  446.202730][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  446.276742][T10456] sp0: Synchronizing with TNC
[  446.571608][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  446.594979][ T5971] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  446.606800][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  446.626206][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  446.637421][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  446.645787][    T9] usb 1-1: Product: syz
[  446.653763][    T9] usb 1-1: Manufacturer: syz
[  446.658477][    T9] usb 1-1: SerialNumber: syz
[  446.697927][T10459] binder: 10458:10459 ioctl c0306201 0 returned -14
[  447.173133][T10447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10447 comm=syz.0.1006
[  447.202971][    T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  447.700646][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.743192][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.756964][    T9] usb 1-1: USB disconnect, device number 30
[  447.769745][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  447.820978][    T9] usblp0: removed
[  447.962592][  T980] usb 4-1: USB disconnect, device number 28
[  448.001252][ T5890] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  448.034718][ T5890] usb 3-1: config 0 has no interface number 0
[  448.063024][ T5890] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  448.134490][ T5890] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  448.159478][ T5890] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  448.178251][ T5890] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  448.191023][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  448.201179][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.209187][ T5890] usb 3-1: Product: syz
[  448.214007][ T5890] usb 3-1: Manufacturer: syz
[  448.218622][ T5890] usb 3-1: SerialNumber: syz
[  448.224757][ T5890] usb 3-1: config 0 descriptor??
[  448.237954][ T5890] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.252474][ T5890] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input25
[  448.454646][T10477] tipc: Trying to set illegal importance in message
[  448.469798][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  448.475013][   T30] audit: type=1400 audit(1769902664.364:770): avc:  denied  { setopt } for  pid=10472 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  448.477927][    C0] lec:lec_tx_timeout: lec0
[  448.502015][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  448.629497][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.644307][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.729618][ T5890] usb 3-1: USB disconnect, device number 29
[  448.969717][ T5971] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  449.141088][ T5971] usb 4-1: Using ep0 maxpacket: 8
[  449.144170][T10488] syzkaller0: entered promiscuous mode
[  449.152311][T10488] syzkaller0: entered allmulticast mode
[  449.153580][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.177051][ T5971] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08
[  449.192834][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.203803][ T5971] usb 4-1: Product: syz
[  449.209373][ T5971] usb 4-1: Manufacturer: syz
[  449.214340][ T5971] usb 4-1: SerialNumber: syz
[  449.230409][ T5971] usb 4-1: config 0 descriptor??
[  449.251612][T10490] FAULT_INJECTION: forcing a failure.
[  449.251612][T10490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.254846][ T5971] comedi comedi5: Wrong number of endpoints
[  449.265010][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.4.1017 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.265033][T10490] Tainted: [L]=SOFTLOCKUP
[  449.265039][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  449.265047][T10490] Call Trace:
[  449.265052][T10490]  <TASK>
[  449.265058][T10490]  dump_stack_lvl+0x100/0x190
[  449.265082][T10490]  should_fail_ex.cold+0x5/0xa
[  449.265099][T10490]  _copy_from_user+0x2e/0xd0
[  449.265120][T10490]  bpf_test_init.isra.0+0xaf/0x100
[  449.265142][T10490]  bpf_prog_test_run_flow_dissector+0x236/0x980
[  449.265170][T10490]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  449.265193][T10490]  ? find_held_lock+0x2b/0x80
[  449.265213][T10490]  ? __fget_files+0x215/0x3d0
[  449.265235][T10490]  ? __fget_files+0x21f/0x3d0
[  449.265256][T10490]  ? fput+0x79/0x100
[  449.265276][T10490]  ? __bpf_prog_get+0x97/0x2a0
[  449.265297][T10490]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  449.265318][T10490]  __sys_bpf+0x1e56/0x5050
[  449.265338][T10490]  ? __pfx___sys_bpf+0x10/0x10
[  449.265352][T10490]  ? proc_fail_nth_write+0x9f/0x220
[  449.265373][T10490]  ? find_held_lock+0x2b/0x80
[  449.265396][T10490]  ? find_held_lock+0x2b/0x80
[  449.265414][T10490]  ? ksys_write+0x190/0x250
[  449.265435][T10490]  ? __mutex_unlock_slowpath+0x15c/0x790
[  449.265465][T10490]  ? fput+0x79/0x100
[  449.265484][T10490]  ? ksys_write+0x1ac/0x250
[  449.265499][T10490]  ? __pfx_ksys_write+0x10/0x10
[  449.265519][T10490]  __x64_sys_bpf+0x7b/0xc0
[  449.265535][T10490]  ? lockdep_hardirqs_on+0x78/0x100
[  449.265551][T10490]  do_syscall_64+0xc9/0xf80
[  449.265569][T10490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.265583][T10490] RIP: 0033:0x7f413799aeb9
[  449.265595][T10490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.265609][T10490] RSP: 002b:00007f4138943028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  449.265625][T10490] RAX: ffffffffffffffda RBX: 00007f4137c15fa0 RCX: 00007f413799aeb9
[  449.265634][T10490] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  449.265643][T10490] RBP: 00007f4138943090 R08: 0000000000000000 R09: 0000000000000000
[  449.265652][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.265660][T10490] R13: 00007f4137c16038 R14: 00007f4137c15fa0 R15: 00007ffcf8922188
[  449.265682][T10490]  </TASK>
[  449.526447][   T30] audit: type=1400 audit(1769902665.434:771): avc:  denied  { ioctl } for  pid=10482 comm="syz.3.1014" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  449.557830][   T30] audit: type=1400 audit(1769902665.434:772): avc:  denied  { write } for  pid=10482 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  449.579723][ T5971] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device.
[  449.606079][ T5971] usb 4-1: USB disconnect, device number 29
[  449.998670][T10505] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  450.190346][T10504] net_ratelimit: 12 callbacks suppressed
[  450.190357][T10504] openvswitch: netlink: IP tunnel dst address not specified
[  450.470234][T10502] netlink: 'syz.2.1019': attribute type 13 has an invalid length.
[  450.542850][   T30] audit: type=1400 audit(1769902666.444:773): avc:  denied  { read } for  pid=10511 comm="syz.0.1023" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  450.659765][   T30] audit: type=1400 audit(1769902666.444:774): avc:  denied  { open } for  pid=10511 comm="syz.0.1023" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  450.727353][T10521] syzkaller0: entered promiscuous mode
[  450.763203][T10521] syzkaller0: entered allmulticast mode
[  450.997285][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'.
[  451.386045][T10538] FAULT_INJECTION: forcing a failure.
[  451.386045][T10538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.443014][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.3.1026 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  451.443034][T10538] Tainted: [L]=SOFTLOCKUP
[  451.443037][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  451.443043][T10538] Call Trace:
[  451.443047][T10538]  <TASK>
[  451.443052][T10538]  dump_stack_lvl+0x100/0x190
[  451.443070][T10538]  should_fail_ex.cold+0x5/0xa
[  451.443082][T10538]  _copy_from_iter+0x1f4/0x1690
[  451.443098][T10538]  ? __asan_memset+0x23/0x50
[  451.443110][T10538]  ? __build_skb_around+0x278/0x390
[  451.443124][T10538]  ? __pfx__copy_from_iter+0x10/0x10
[  451.443138][T10538]  ? __alloc_skb+0x220/0x410
[  451.443151][T10538]  ? __pfx___alloc_skb+0x10/0x10
[  451.443165][T10538]  ? __pfx__copy_from_iter+0x10/0x10
[  451.443186][T10538]  skb_copy_datagram_from_iter+0x11f/0x720
[  451.443213][T10538]  tun_get_user+0x1884/0x3e10
[  451.443235][T10538]  ? __pfx_tun_get_user+0x10/0x10
[  451.443251][T10538]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  451.443271][T10538]  ? find_held_lock+0x2b/0x80
[  451.443286][T10538]  ? tun_get+0x191/0x370
[  451.443299][T10538]  ? tun_get+0x191/0x370
[  451.443315][T10538]  tun_chr_write_iter+0xdc/0x200
[  451.443332][T10538]  vfs_write+0x6ac/0x1070
[  451.443344][T10538]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  451.443360][T10538]  ? __pfx_vfs_write+0x10/0x10
[  451.443370][T10538]  ? find_held_lock+0x2b/0x80
[  451.443393][T10538]  ksys_write+0x12a/0x250
[  451.443404][T10538]  ? __pfx_ksys_write+0x10/0x10
[  451.443419][T10538]  do_syscall_64+0xc9/0xf80
[  451.443433][T10538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.443444][T10538] RIP: 0033:0x7f212d59aeb9
[  451.443453][T10538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.443464][T10538] RSP: 002b:00007f212e4bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  451.443475][T10538] RAX: ffffffffffffffda RBX: 00007f212d815fa0 RCX: 00007f212d59aeb9
[  451.443481][T10538] RDX: 000000000000003a RSI: 0000200000000100 RDI: 0000000000000003
[  451.443487][T10538] RBP: 00007f212e4bd090 R08: 0000000000000000 R09: 0000000000000000
[  451.443494][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.443500][T10538] R13: 00007f212d816038 R14: 00007f212d815fa0 R15: 00007ffe194a11d8
[  451.443513][T10538]  </TASK>
[  452.310386][T10541] binder: 10540:10541 ioctl c0306201 0 returned -14
[  452.755102][T10559] Illegal XDP return value 4294967274 on prog  (id 94) dev N/A, expect packet loss!
[  452.930032][  T793] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  453.101538][  T793] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  453.101555][  T793] usb 4-1: config 0 has no interface number 0
[  453.101574][  T793] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  453.101589][  T793] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  453.101602][  T793] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  453.101616][  T793] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  453.118020][  T793] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  453.118037][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.118049][  T793] usb 4-1: Product: syz
[  453.118057][  T793] usb 4-1: Manufacturer: syz
[  453.118066][  T793] usb 4-1: SerialNumber: syz
[  453.122077][  T793] usb 4-1: config 0 descriptor??
[  453.125762][  T793] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  453.185830][  T793] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input26
[  453.214365][   T30] audit: type=1400 audit(1769902669.124:775): avc:  denied  { create } for  pid=10542 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  453.214407][   T30] audit: type=1400 audit(1769902669.124:776): avc:  denied  { ioctl } for  pid=10542 comm="syz.1.1029" path="socket:[28056]" dev="sockfs" ino=28056 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  453.258761][T10543] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  453.258774][T10543] audit: out of memory in audit_log_start
[  453.259364][T10542] lec:lec_atm_close: lec0: Shut down!
[  453.456970][    T9] usb 4-1: USB disconnect, device number 30
[  454.095216][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'.
[  454.358825][T10607] openvswitch: netlink: IP tunnel dst address not specified
[  454.499795][  T793] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  454.660005][  T793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  454.678541][  T793] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  454.695867][  T793] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  454.714559][  T793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  454.723783][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  454.733860][  T793] usb 1-1: Product: syz
[  454.738381][  T793] usb 1-1: Manufacturer: syz
[  454.743507][  T793] usb 1-1: SerialNumber: syz
[  455.073387][   T30] audit: type=1400 audit(1769902670.984:777): avc:  denied  { accept } for  pid=10615 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  455.531536][T10604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10604 comm=syz.0.1041
[  455.762284][  T793] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  455.840018][ T5890] usb 1-1: USB disconnect, device number 31
[  455.860250][ T5890] usblp0: removed
[  456.306968][T10631] 9p: Bad value for 'rfdno'
[  458.164312][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'.
[  458.301599][   T30] audit: type=1400 audit(1769902674.214:778): avc:  denied  { map } for  pid=10658 comm="syz.4.1054" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  458.325721][   T30] audit: type=1400 audit(1769902674.214:779): avc:  denied  { execute } for  pid=10658 comm="syz.4.1054" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  458.361505][T10659] block device autoloading is deprecated and will be removed.
[  458.390074][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms
[  458.398068][    C0] lec:lec_tx_timeout: lec0
[  458.402636][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  458.555354][T10666] netlink: 'syz.4.1056': attribute type 1 has an invalid length.
[  458.653760][T10669] bond2: (slave geneve2): making interface the new active one
[  458.679797][  T793] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  458.695058][T10669] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  458.753141][ T5932] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  458.763340][ T5932] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  458.806366][ T5932] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  458.836203][ T5932] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  458.900202][T10674] binder: 10652:10674 ioctl 0 200000000040 returned -22
[  458.985506][  T793] usb 2-1: Using ep0 maxpacket: 8
[  459.474688][  T793] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  459.494776][  T793] usb 2-1: config 0 has no interface number 0
[  459.514981][  T793] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  459.543096][  T793] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  459.567052][  T793] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  459.588346][  T793] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  459.598458][  T793] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  459.611522][  T793] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  459.620635][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.655195][  T793] usb 2-1: config 0 descriptor??
[  459.692278][  T793] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  459.749741][ T5890] usb 5-1: new low-speed USB device number 35 using dummy_hcd
[  459.880776][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'.
[  459.911036][ T5890] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  459.919301][ T5890] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  459.920600][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'.
[  459.950438][ T5890] usb 5-1: config 0 has no interface number 0
[  459.959772][ T5890] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  460.063063][  T793] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  460.077178][ T5890] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  460.105130][ T5890] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  460.143598][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.165287][   T30] audit: type=1400 audit(1769902676.074:780): avc:  denied  { set_context_mgr } for  pid=10689 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  460.245380][T10691] binder: BINDER_SET_CONTEXT_MGR already set
[  460.271305][T10691] binder: 10689:10691 ioctl 4018620d 200000000040 returned -16
[  460.273688][   T30] audit: type=1400 audit(1769902676.114:781): avc:  denied  { write } for  pid=10689 comm="syz.0.1061" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  460.310457][   T30] audit: type=1400 audit(1769902676.124:782): avc:  denied  { map } for  pid=10689 comm="syz.0.1061" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  460.311084][ T5890] usb 5-1: config 0 descriptor??
[  460.440954][T10691] binder: 10689:10691 ioctl c0306201 2000000003c0 returned -14
[  460.450690][  T793] usb 4-1: Using ep0 maxpacket: 16
[  460.547148][  T793] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  460.559865][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.570029][  T793] usb 4-1: Product: syz
[  460.574242][  T793] usb 4-1: Manufacturer: syz
[  460.631131][  T793] usb 4-1: SerialNumber: syz
[  460.650065][  T793] usb 4-1: config 0 descriptor??
[  460.663784][  T793] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  460.678131][T10695] syzkaller0: entered promiscuous mode
[  460.683801][T10695] syzkaller0: entered allmulticast mode
[  460.735052][T10682] netlink: 'syz.4.1058': attribute type 7 has an invalid length.
[  460.777778][  T980] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  460.816548][   T30] audit: type=1400 audit(1769902676.724:783): avc:  denied  { bind } for  pid=10681 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  460.881905][  T793] gspca_sn9c2028: read1 error -32
[  460.886963][   T30] audit: type=1400 audit(1769902676.794:784): avc:  denied  { create } for  pid=10681 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  460.908970][  T793] gspca_sn9c2028: read1 error -32
[  460.914724][   T30] audit: type=1400 audit(1769902676.794:785): avc:  denied  { write } for  pid=10681 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  460.941874][ T5890] usb 5-1: USB disconnect, device number 35
[  460.951240][  T980] usb 3-1: Using ep0 maxpacket: 16
[  460.956474][   T30] audit: type=1400 audit(1769902676.794:786): avc:  denied  { ioctl } for  pid=10681 comm="syz.4.1058" path="socket:[29151]" dev="sockfs" ino=29151 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  460.962375][  T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  461.026405][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.034458][  T980] usb 3-1: Product: syz
[  461.038614][  T980] usb 3-1: Manufacturer: syz
[  461.044850][  T980] usb 3-1: SerialNumber: syz
[  461.051556][  T980] usb 3-1: config 0 descriptor??
[  461.059362][  T980] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  461.447834][T10706] 9p: Bad value for 'rfdno'
[  461.485955][  T980] gspca_sn9c2028: read1 error -32
[  461.493817][    T9] usb 4-1: USB disconnect, device number 31
[  461.516875][  T980] gspca_sn9c2028: read1 error -32
[  461.548994][  T793] usb 2-1: USB disconnect, device number 34
[  461.572779][  T793] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  462.158949][   T30] audit: type=1400 audit(1769902678.064:787): avc:  denied  { read write } for  pid=10716 comm="syz.4.1068" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  462.228273][  T793] usb 3-1: USB disconnect, device number 30
[  462.343090][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'.
[  462.629873][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  463.282622][    T9] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  463.304635][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.369570][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.382644][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.392600][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.404786][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.415680][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  463.415701][    C0] lec:lec_tx_timeout: lec0
[  463.423954][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  463.437687][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.446979][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.479574][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.491257][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.504954][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.508324][T10743] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1076'.
[  463.513971][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.513998][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.514927][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.553464][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.565976][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.573691][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.583164][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.594564][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.604514][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.613559][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.624582][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  463.632649][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.669848][  T793] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  463.833334][  T793] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  463.843703][  T793] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  463.853890][  T793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  463.878955][  T793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  463.896028][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  463.904402][  T793] usb 2-1: Product: syz
[  463.908632][  T793] usb 2-1: Manufacturer: syz
[  463.913638][  T793] usb 2-1: SerialNumber: syz
[  464.255977][T10739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10739 comm=syz.1.1074
[  464.270752][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  464.278289][  T793] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  464.285446][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  464.317327][  T980] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  464.328168][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  464.337246][    T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  464.345593][    T9] usb 4-1: Product: syz
[  464.352057][    T9] usb 4-1: Manufacturer: syz
[  464.356651][    T9] usb 4-1: SerialNumber: syz
[  464.373675][    T9] usb 4-1: config 0 descriptor??
[  464.385011][    T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1
[  464.474543][  T980] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  464.487123][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.495789][  T980] usb 5-1: Product: syz
[  464.509698][  T980] usb 5-1: Manufacturer: syz
[  464.514520][  T980] usb 5-1: SerialNumber: syz
[  464.532826][  T980] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  464.545524][  T793] usb 2-1: USB disconnect, device number 35
[  464.564386][  T793] usblp0: removed
[  464.587646][T10755] openvswitch: netlink: IP tunnel dst address not specified
[  464.651081][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  464.651095][   T30] audit: type=1400 audit(1769902680.564:792): avc:  denied  { firmware_load } for  pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  464.696725][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'.
[  464.706666][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  464.739729][   T30] audit: type=1400 audit(1769902680.624:793): avc:  denied  { create } for  pid=10727 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  464.868893][  T980] usb 4-1: USB disconnect, device number 32
[  464.909219][  T980] yurex 4-1:0.0: USB YUREX #1 now disconnected
[  465.420080][T10767] 9p: Bad value for 'rfdno'
[  465.453241][T10770] binder: 10769:10770 ioctl c0306201 0 returned -14
[  465.615323][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.631085][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.069785][    T9] usb 5-1: Service connection timeout for: 256
[  466.075957][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  466.161672][ T5921] usb 5-1: USB disconnect, device number 36
[  466.168287][    T9] ath9k_htc: Failed to initialize the device
[  466.195304][ T5921] usb 5-1: ath9k_htc: USB layer deinitialized
[  466.242888][  T793] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  466.460563][  T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  466.490314][  T793] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  466.905581][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  466.922505][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  466.934353][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  466.943357][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  466.952587][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  466.967798][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  466.981023][  T980] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  466.987597][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  466.998383][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.016112][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.024226][  T980] usb 4-1: config 0 has no interface number 0
[  467.025078][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  467.041248][  T980] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  467.045189][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.064709][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.071517][  T980] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  467.076447][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  467.085201][  T980] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  467.090821][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.102848][  T980] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  467.221518][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.690593][  T980] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  467.700327][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.708414][  T980] usb 4-1: Product: syz
[  467.712688][  T980] usb 4-1: Manufacturer: syz
[  467.717511][  T980] usb 4-1: SerialNumber: syz
[  467.732845][  T980] usb 4-1: config 0 descriptor??
[  467.751203][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  467.761141][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.763370][  T980] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  467.782127][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.795796][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  467.809277][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.821064][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.828359][  T980] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input28
[  467.828961][  T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  467.848832][  T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  467.863420][  T793] usb 1-1: config 0 interface 0 has no altsetting 0
[  467.878714][  T793] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  467.896066][  T793] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  467.970932][  T793] usb 1-1: Product: syz
[  467.975145][  T793] usb 1-1: Manufacturer: syz
[  467.980021][  T793] usb 1-1: SerialNumber: syz
[  468.033020][  T793] usb 1-1: config 0 descriptor??
[  468.067205][  T793] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  468.205182][  T980] usb 4-1: USB disconnect, device number 33
[  468.322092][T10795] 9p: Bad value for 'rfdno'
[  468.429683][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  468.437703][    C0] lec:lec_tx_timeout: lec0
[  468.442514][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  468.925352][  T980] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  469.198507][  T980] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  469.248294][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.271248][   T30] audit: type=1400 audit(1769902685.184:794): avc:  denied  { relabelfrom } for  pid=10802 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  469.284841][  T980] usb 5-1: config 0 descriptor??
[  469.303553][   T30] audit: type=1400 audit(1769902685.204:795): avc:  denied  { relabelto } for  pid=10802 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  469.899516][  T980] usb 5-1: unsupported MDLM descriptors
[  469.941620][  T980] usb 5-1: USB disconnect, device number 37
[  470.139742][ T5971] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  470.153203][T10822] binder: 10821:10822 ioctl c0306201 0 returned -14
[  470.319938][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  470.356774][ T5971] usb 4-1: config 7 has an invalid interface number: 102 but max is 2
[  470.404071][ T5971] usb 4-1: config 7 has an invalid interface number: 255 but max is 2
[  470.447569][ T5971] usb 4-1: config 7 has an invalid interface number: 13 but max is 2
[  470.458043][ T5971] usb 4-1: config 7 has no interface number 0
[  470.470930][ T5971] usb 4-1: config 7 has no interface number 1
[  470.477109][ T5971] usb 4-1: config 7 has no interface number 2
[  470.511758][ T5971] usb 4-1: config 7 interface 102 has no altsetting 0
[  470.521163][ T5971] usb 4-1: config 7 interface 255 has no altsetting 0
[  470.529147][ T5971] usb 4-1: config 7 interface 13 has no altsetting 0
[  470.559194][    C1] usb 1-1: yurex_control_callback - control failed: -71
[  470.567289][  T793] usb 1-1: USB disconnect, device number 32
[  470.576724][T10801] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19
[  470.586249][  T793] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  470.631016][ T5971] usb 4-1: New USB device found, idVendor=0763, idProduct=2008, bcdDevice=18.29
[  470.641008][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.649054][ T5971] usb 4-1: Product: చ
[  470.650200][T10830] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1096'.
[  470.653720][ T5971] usb 4-1: Manufacturer: 销笁⿐轆쀷煩᯾ྗ撤㥠ႜ὇ⴖᷢﳱ곤퇒᰺ی䴔腩ম캮뻂칁⽶ꔫ㍷큻ⱆ묚鑪빑田ｆ␡럚㾲貅鐩漤ᅹ剼姃࡛㿎ⷑꛇ뚕혁峊役ⴭ춊奵쀳霾않郌껭㯅
[  470.771559][ T5971] usb 4-1: SerialNumber: 㴕툌熭綒ĩ圀깄쌍漑谂湦⨏䆜번뮸ᩉ擿죍ꖯ껽ੋⷬ鱳￾ꬊ獯ꕙ犢汗䶋뗄
[  472.322581][   T30] audit: type=1400 audit(1769902688.224:796): avc:  denied  { mounton } for  pid=10839 comm="syz.1.1098" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  472.406766][ T5971] usb 4-1: USB disconnect, device number 34
[  472.664799][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'.
[  473.231445][T10856] 9p: Bad value for 'rfdno'
[  473.449674][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  473.458151][    C0] lec:lec_tx_timeout: lec0
[  473.462828][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  474.180364][T10860] 9p: Bad value for 'rfdno'
[  474.479768][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  474.612174][   T30] audit: type=1400 audit(1769902690.524:797): avc:  denied  { accept } for  pid=10876 comm="syz.4.1101" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  474.641821][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  474.672132][    T9] usb 2-1: config 0 has an invalid interface number: 237 but max is 0
[  474.693379][    T9] usb 2-1: config 0 has no interface number 0
[  474.706958][    T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  474.728114][    T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  474.740516][    T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  474.754875][    T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  474.775282][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  474.795522][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.814135][    T9] usb 2-1: Product: syz
[  474.818877][    T9] usb 2-1: Manufacturer: syz
[  474.834832][    T9] usb 2-1: SerialNumber: syz
[  474.854208][    T9] usb 2-1: config 0 descriptor??
[  474.868228][    T9] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  474.895328][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input29
[  475.096048][  T793] usb 2-1: USB disconnect, device number 36
[  475.216248][T10900] warning: `syz.3.1109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  475.778787][T10920] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1112'.
[  476.153552][T10934] 9p: Bad value for 'rfdno'
[  476.709879][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  477.285229][T10954] veth1_macvtap: left promiscuous mode
[  477.309703][T10954] macsec0: entered allmulticast mode
[  477.332856][T10954] FAULT_INJECTION: forcing a failure.
[  477.332856][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.377455][T10954] CPU: 1 UID: 0 PID: 10954 Comm: syz.0.1125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.377473][T10954] Tainted: [L]=SOFTLOCKUP
[  477.377477][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  477.377483][T10954] Call Trace:
[  477.377487][T10954]  <TASK>
[  477.377491][T10954]  dump_stack_lvl+0x100/0x190
[  477.377509][T10954]  should_fail_ex.cold+0x5/0xa
[  477.377521][T10954]  _copy_from_user+0x2e/0xd0
[  477.377537][T10954]  get_user_ifreq+0xe7/0x250
[  477.377553][T10954]  sock_do_ioctl+0x16e/0x280
[  477.377570][T10954]  ? __pfx_sock_do_ioctl+0x10/0x10
[  477.377587][T10954]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  477.377606][T10954]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  477.377615][T10954]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  477.377629][T10954]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  477.377643][T10954]  sock_ioctl+0x599/0x6b0
[  477.377654][T10954]  ? __pfx_sock_ioctl+0x10/0x10
[  477.377667][T10954]  ? selinux_file_ioctl+0x139/0x290
[  477.377677][T10954]  ? selinux_file_ioctl+0xb4/0x290
[  477.377689][T10954]  ? __pfx_sock_ioctl+0x10/0x10
[  477.377700][T10954]  __x64_sys_ioctl+0x18e/0x210
[  477.377711][T10954]  do_syscall_64+0xc9/0xf80
[  477.377726][T10954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.377743][T10954] RIP: 0033:0x7f2c2ef9aeb9
[  477.377756][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.377770][T10954] RSP: 002b:00007f2c2ff44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  477.377787][T10954] RAX: ffffffffffffffda RBX: 00007f2c2f215fa0 RCX: 00007f2c2ef9aeb9
[  477.377794][T10954] RDX: 0000200000000240 RSI: 0000000000008914 RDI: 0000000000000003
[  477.377799][T10954] RBP: 00007f2c2ff44090 R08: 0000000000000000 R09: 0000000000000000
[  477.377805][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.377811][T10954] R13: 00007f2c2f216038 R14: 00007f2c2f215fa0 R15: 00007fffb0f3f248
[  477.377833][T10954]  </TASK>
[  477.649637][T10959] netlink: 'syz.1.1126': attribute type 13 has an invalid length.
[  477.942367][T10969] FAULT_INJECTION: forcing a failure.
[  477.942367][T10969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.963497][T10969] CPU: 1 UID: 0 PID: 10969 Comm: syz.2.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.963524][T10969] Tainted: [L]=SOFTLOCKUP
[  477.963530][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  477.963537][T10969] Call Trace:
[  477.963541][T10969]  <TASK>
[  477.963545][T10969]  dump_stack_lvl+0x100/0x190
[  477.963563][T10969]  should_fail_ex.cold+0x5/0xa
[  477.963575][T10969]  _copy_from_iter+0x1f4/0x1690
[  477.963591][T10969]  ? __alloc_skb+0x220/0x410
[  477.963603][T10969]  ? __alloc_skb+0x35d/0x410
[  477.963616][T10969]  ? __pfx__copy_from_iter+0x10/0x10
[  477.963630][T10969]  ? netlink_autobind.isra.0+0xc0/0x370
[  477.963651][T10969]  netlink_sendmsg+0x808/0xda0
[  477.963669][T10969]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.963684][T10969]  ? PageHuge+0x180/0x180
[  477.963700][T10969]  ____sys_sendmsg+0xa54/0xc30
[  477.963711][T10969]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.963727][T10969]  ___sys_sendmsg+0x190/0x1e0
[  477.963739][T10969]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.963755][T10969]  ? find_held_lock+0x2b/0x80
[  477.963778][T10969]  __sys_sendmsg+0x170/0x220
[  477.963793][T10969]  ? __pfx___sys_sendmsg+0x10/0x10
[  477.963815][T10969]  do_syscall_64+0xc9/0xf80
[  477.963829][T10969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.963840][T10969] RIP: 0033:0x7fbff8f9aeb9
[  477.963848][T10969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.963858][T10969] RSP: 002b:00007fbff9ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.963869][T10969] RAX: ffffffffffffffda RBX: 00007fbff9215fa0 RCX: 00007fbff8f9aeb9
[  477.963875][T10969] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005
[  477.963881][T10969] RBP: 00007fbff9ea5090 R08: 0000000000000000 R09: 0000000000000000
[  477.963887][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.963893][T10969] R13: 00007fbff9216038 R14: 00007fbff9215fa0 R15: 00007ffe4ade0468
[  477.963914][T10969]  </TASK>
[  478.233554][T10972] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1128'.
[  478.469727][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  478.477762][    C0] lec:lec_tx_timeout: lec0
[  478.482263][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  478.877468][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  479.209883][ T5876] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  479.383661][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  479.392895][ T5876] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.405579][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0
[  479.412457][ T5876] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  479.422325][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.435321][ T5876] usb 5-1: config 0 descriptor??
[  479.579712][  T980] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  479.750764][  T980] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  479.775445][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  479.804118][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  479.836880][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  479.891875][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  479.918543][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  479.949781][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  479.966844][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  479.988350][ T5876] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  479.999708][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.024168][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.050429][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.072238][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.097177][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.106340][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.122418][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.133639][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.143930][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.155199][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.166604][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.174370][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.183631][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.209444][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.217321][  T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.227504][  T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.239801][  T980] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.248455][  T980] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  480.279258][  T980] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  480.288354][  T980] usb 1-1: Product: syz
[  480.317714][  T980] usb 1-1: Manufacturer: syz
[  480.329702][  T980] usb 1-1: SerialNumber: syz
[  480.349240][  T980] usb 1-1: config 0 descriptor??
[  480.373124][ T5890] usb 5-1: USB disconnect, device number 38
[  480.396896][  T980] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  480.602124][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.610789][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.686736][   T30] audit: type=1400 audit(1769902696.594:798): avc:  denied  { watch watch_reads } for  pid=11002 comm="syz.2.1140" path="/230/file1" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  480.719755][  T980] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  480.721984][ T5876] usb 1-1: USB disconnect, device number 33
[  480.727384][    C0] usb 1-1: yurex_control_callback - control failed: -71
[  480.740440][T11009] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19
[  480.748746][ T5876] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  480.890398][  T980] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  480.899268][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.908696][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.920005][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  480.927841][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  480.937089][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  480.949722][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  480.956090][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  480.963934][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.024168][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.035084][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.050074][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.058956][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.074433][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.082679][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.091575][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.102480][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.110179][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.119092][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.130708][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.138554][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.147628][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.158595][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.168346][  T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  481.196305][  T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  481.232263][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  481.261593][  T980] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  481.298940][  T980] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  481.367053][  T980] usb 2-1: Product: syz
[  481.376732][  T980] usb 2-1: Manufacturer: syz
[  481.389684][  T980] usb 2-1: SerialNumber: syz
[  481.406312][  T980] usb 2-1: config 0 descriptor??
[  481.434418][  T980] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  481.627762][T11024] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1145'.
[  481.676889][    C0] usb 2-1: yurex_control_callback - control failed: -71
[  481.677200][   T24] usb 2-1: USB disconnect, device number 37
[  481.689919][  T793] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  481.703052][   T24] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  481.759798][ T5876] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  481.839737][  T793] usb 3-1: Using ep0 maxpacket: 16
[  481.848140][  T793] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  481.858851][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.868640][  T793] usb 3-1: Product: syz
[  481.877729][  T793] usb 3-1: Manufacturer: syz
[  481.887802][  T793] usb 3-1: SerialNumber: syz
[  481.902003][  T793] usb 3-1: config 0 descriptor??
[  481.909717][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  481.922329][  T793] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  481.935756][ T5876] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  481.952816][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.980537][ T5876] usb 5-1: Product: syz
[  481.997605][ T5876] usb 5-1: Manufacturer: syz
[  482.004482][ T5876] usb 5-1: SerialNumber: syz
[  482.016437][ T5876] usb 5-1: config 0 descriptor??
[  482.037070][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  482.067357][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'.
[  482.124438][  T793] gspca_sn9c2028: read1 error -32
[  482.131155][  T793] gspca_sn9c2028: read1 error -32
[  482.145732][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'.
[  482.235462][ T5876] gspca_sn9c2028: read1 error -32
[  482.243656][ T5876] gspca_sn9c2028: read1 error -32
[  482.251575][ T5876] videodev: could not get a free minor
[  482.257156][ T5876] gspca_main: video_register_device err -23
[  482.263626][ T5876] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -23
[  482.683001][ T5876] usb 5-1: USB disconnect, device number 39
[  482.739317][ T5890] usb 3-1: USB disconnect, device number 31
[  483.029870][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  483.076445][T11044] netlink: zone id is out of range
[  483.088313][T11044] netlink: zone id is out of range
[  483.099124][T11044] netlink: zone id is out of range
[  483.109722][T11044] netlink: zone id is out of range
[  483.120969][T11044] netlink: zone id is out of range
[  483.136620][T11044] netlink: zone id is out of range
[  483.159613][T11044] netlink: zone id is out of range
[  483.166715][T11044] netlink: zone id is out of range
[  483.176257][T11044] netlink: zone id is out of range
[  483.183375][T11044] netlink: zone id is out of range
[  483.455063][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1150'.
[  483.489666][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  483.497711][    C0] lec:lec_tx_timeout: lec0
[  483.502229][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  483.599723][  T793] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  484.315546][T11062] 9p: Bad value for 'rfdno'
[  484.333526][  T793] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  484.383219][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.436314][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  484.565758][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  484.669212][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.707390][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  484.765167][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  484.780976][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.847390][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  484.873348][ T5819] Bluetooth: min 7 > max 1
[  484.888820][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  484.917106][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.929303][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  484.940420][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  484.951754][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.960693][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  484.980375][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  484.988036][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  484.997045][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  485.008333][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  485.017218][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.026327][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  485.037290][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  485.044784][  T793] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.053859][  T793] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  485.065645][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  485.075590][  T793] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  485.084926][  T793] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  485.093982][  T793] usb 3-1: Product: syz
[  485.098267][  T793] usb 3-1: Manufacturer: syz
[  485.103085][  T793] usb 3-1: SerialNumber: syz
[  485.111901][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  485.139139][  T793] usb 3-1: config 0 descriptor??
[  485.151691][  T793] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  485.808180][ T5890] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  485.927227][   T30] audit: type=1400 audit(1769902701.834:799): avc:  denied  { getopt } for  pid=11080 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  485.977568][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  486.014570][   T30] audit: type=1400 audit(1769902701.924:800): avc:  denied  { connect } for  pid=11084 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  486.043593][ T5890] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  486.046153][T11083] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1158'.
[  486.087909][ T5890] usb 2-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  486.145141][ T5890] usb 2-1: config 0 has no interface number 0
[  486.263554][ T5890] usb 2-1: too many endpoints for config 0 interface 191 altsetting 0: 69, using maximum allowed: 30
[  486.392573][ T5890] usb 2-1: config 0 interface 191 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  486.426344][ T5890] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  486.435743][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.445600][ T5890] usb 2-1: Product: syz
[  486.453595][ T5890] usb 2-1: Manufacturer: syz
[  486.458448][ T5890] usb 2-1: SerialNumber: syz
[  486.468607][ T5890] usb 2-1: config 0 descriptor??
[  486.496550][    C1] usb 3-1: yurex_control_callback - control failed: -71
[  486.497582][    T9] usb 3-1: USB disconnect, device number 32
[  486.510647][T11089] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19
[  486.527529][    T9] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  486.949924][ T5823] Bluetooth: hci4: command 0x2016 tx timeout
[  486.965700][T11105] netlink: 'syz.1.1156': attribute type 1 has an invalid length.
[  487.189714][ T5823] Bluetooth: hci0: command 0x2016 tx timeout
[  487.829713][ T5876] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  487.859709][  T793] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  488.011560][ T5876] usb 4-1: Using ep0 maxpacket: 16
[  488.036342][ T5876] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  488.045787][  T793] usb 5-1: Using ep0 maxpacket: 16
[  488.066752][  T793] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.088140][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.113755][  T793] usb 5-1: config 0 interface 0 has no altsetting 0
[  488.120499][ T5876] usb 4-1: Product: syz
[  488.124659][ T5876] usb 4-1: Manufacturer: syz
[  488.129262][ T5876] usb 4-1: SerialNumber: syz
[  488.141881][  T793] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  488.173713][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.184209][ T5876] usb 4-1: config 0 descriptor??
[  488.217285][  T793] usb 5-1: config 0 descriptor??
[  488.225474][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  488.398898][T11164] net_ratelimit: 13 callbacks suppressed
[  488.398929][T11164] netlink: zone id is out of range
[  488.413940][T11164] netlink: zone id is out of range
[  488.429415][T11164] netlink: zone id is out of range
[  488.444757][T11164] netlink: zone id is out of range
[  488.459249][T11164] netlink: zone id is out of range
[  488.465513][T11164] netlink: zone id is out of range
[  488.476264][ T5876] gspca_sn9c2028: read1 error -32
[  488.486157][T11164] netlink: zone id is out of range
[  488.486749][ T5876] gspca_sn9c2028: read1 error -32
[  488.496398][T11164] netlink: zone id is out of range
[  488.501629][T11164] netlink: zone id is out of range
[  488.506859][T11164] netlink: zone id is out of range
[  488.512049][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  488.512071][    C0] lec:lec_tx_timeout: lec0
[  488.675952][  T793] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  489.039742][ T5819] Bluetooth: hci4: command 0x2016 tx timeout
[  489.121907][ T5921] usb 4-1: USB disconnect, device number 35
[  489.256845][ T5890] asix 2-1:0.191: probe with driver asix failed with error -22
[  489.270037][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  489.287371][ T5890] usb 2-1: USB disconnect, device number 38
[  489.433643][T11167] comedi comedi0: pcl816: I/O port conflict (0x8001,16)
[  489.480513][ T5876] usb 5-1: USB disconnect, device number 40
[  489.792845][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'.
[  489.920109][T11182] 9p: Bad value for 'rfdno'
[  490.735136][T11191] binder: 11190:11191 ioctl c0306201 0 returned -14
[  490.847122][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'.
[  491.039724][ T5876] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  491.253717][ T5876] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  491.287890][ T5876] usb 3-1: config 0 has no interface number 0
[  491.314770][ T5876] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  491.353644][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  491.362097][ T5876] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  491.390753][ T5876] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  491.433138][ T5876] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  491.483200][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  491.554723][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.580044][ T5876] usb 3-1: Product: syz
[  491.591533][ T5876] usb 3-1: Manufacturer: syz
[  491.616353][ T5876] usb 3-1: SerialNumber: syz
[  491.650717][ T5876] usb 3-1: config 0 descriptor??
[  491.688210][ T5876] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  491.723274][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input30
[  492.379660][T11207] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  492.845458][ T5876] usb 3-1: USB disconnect, device number 33
[  493.162882][T11211] netlink: 'syz.0.1176': attribute type 9 has an invalid length.
[  493.171594][T11211] netlink: 'syz.0.1176': attribute type 11 has an invalid length.
[  493.180142][T11211] netlink: 'syz.0.1176': attribute type 12 has an invalid length.
[  493.188134][T11211] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1176'.
[  493.209742][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  493.448827][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  493.542566][T11219] net_ratelimit: 13 callbacks suppressed
[  493.542577][T11219] netlink: zone id is out of range
[  493.559689][T11219] netlink: zone id is out of range
[  493.567140][T11219] netlink: zone id is out of range
[  493.573364][T11219] netlink: zone id is out of range
[  493.578493][T11219] netlink: zone id is out of range
[  493.585922][T11219] netlink: zone id is out of range
[  493.591892][T11219] netlink: zone id is out of range
[  493.697519][T11219] netlink: zone id is out of range
[  493.707062][T11219] netlink: zone id is out of range
[  493.858129][T11223] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  494.039992][T11219] netlink: zone id is out of range
[  494.089723][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  494.109710][  T793] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  494.259963][    T9] usb 4-1: Using ep0 maxpacket: 8
[  494.287939][  T793] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  494.291346][    T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  494.302501][  T793] usb 3-1: config 0 has no interface number 0
[  494.320600][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.337488][    T9] usb 4-1: Product: syz
[  494.371095][    T9] usb 4-1: Manufacturer: syz
[  494.371112][    T9] usb 4-1: SerialNumber: syz
[  494.375664][    T9] usb 4-1: config 0 descriptor??
[  494.381906][    T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  494.381928][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  494.394155][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  494.394737][  T793] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  494.394756][  T793] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  494.394769][  T793] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  494.394784][  T793] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  494.400110][    T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  494.400135][    T9] usb 4-1: media controller created
[  494.416127][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  494.425935][  T793] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  494.425962][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.425983][  T793] usb 3-1: Product: syz
[  494.425999][  T793] usb 3-1: Manufacturer: syz
[  494.426015][  T793] usb 3-1: SerialNumber: syz
[  494.428102][  T793] usb 3-1: config 0 descriptor??
[  494.432199][  T793] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  494.433802][  T793] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input31
[  494.613386][T11218] cxusb: i2c rd: len=110 is too big!
[  494.613386][T11218] 
[  494.620157][   T30] audit: type=1400 audit(1769902710.524:801): avc:  denied  { write } for  pid=11230 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  494.651961][  T793] usb 3-1: USB disconnect, device number 34
[  494.809905][   T30] audit: type=1400 audit(1769902710.714:802): avc:  denied  { read } for  pid=11230 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  495.524041][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  495.650989][T11255] 9p: Bad value for 'rfdno'
[  496.029800][ T5890] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  496.220117][ T5890] usb 3-1: Using ep0 maxpacket: 8
[  496.269339][ T5890] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  496.317192][ T5890] usb 3-1: config 0 has no interface number 0
[  496.357534][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  496.429715][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  496.491900][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  496.517047][T11262] binder: 11260:11262 ioctl c0306201 0 returned -14
[  496.549384][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  496.584073][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  496.660354][   T30] audit: type=1400 audit(1769902712.574:803): avc:  denied  { create } for  pid=11265 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  497.526866][    T9] cxusb: set interface failed
[  497.531603][ T5890] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  497.548848][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  497.558948][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.600375][ T5890] usb 3-1: config 0 descriptor??
[  497.610690][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  497.631765][ T5890] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  497.702005][    T9] DVB: Unable to find symbol mt352_attach()
[  497.707897][    T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  497.901084][    T9] rc_core: IR keymap rc-dvico-portable not found
[  497.963232][    T9] Registered IR keymap rc-empty
[  498.033366][    T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  498.059742][ T5890] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  498.073661][    T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input32
[  498.116736][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  498.136632][    T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  498.155890][ T5819] Bluetooth: min 7 > max 1
[  498.199708][    T9] usb 4-1: USB disconnect, device number 36
[  498.250060][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  498.288520][ T5890] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.321649][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[  498.352041][ T5890] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  498.363867][    T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  498.384155][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.418823][ T5890] usb 5-1: config 0 descriptor??
[  498.912008][ T5876] usb 3-1: USB disconnect, device number 35
[  498.938687][ T5876] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  498.995909][ T5890] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  499.023007][ T5819] Bluetooth: hci3: ACL packet too small
[  499.036376][T11293] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  499.043044][T11293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  499.052375][T11293] vhci_hcd vhci_hcd.0: Device attached
[  499.063852][T11294] vhci_hcd: connection closed
[  499.065889][ T6531] vhci_hcd vhci_hcd.2: stop threads
[  499.082760][ T6531] vhci_hcd vhci_hcd.2: release socket
[  499.091767][ T6531] vhci_hcd vhci_hcd.2: disconnect device
[  499.227238][T11290] infiniband syz0: set active
[  499.233834][T11290] infiniband syz0: added bond_slave_1
[  499.271865][T11290] RDS/IB: syz0: added
[  499.277314][T11290] smc: adding ib device syz0 with port count 1
[  499.283885][T11290] smc:    ib device syz0 port 1 has pnetid SYZ1 (user defined)
[  499.597097][ T5876] usb 5-1: USB disconnect, device number 41
[  499.670498][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  499.869782][  T793] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  499.890547][   T30] audit: type=1400 audit(1769902715.804:804): avc:  denied  { create } for  pid=11308 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  500.030329][  T793] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  500.060629][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  500.099704][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  500.144366][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  500.179755][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  500.224735][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  500.240540][ T5819] Bluetooth: hci4: command 0x2016 tx timeout
[  500.364256][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  500.823686][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  500.861687][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  500.896427][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  500.922598][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  500.943913][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  500.953264][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  500.961064][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  500.968198][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  501.007829][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.050089][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  501.129872][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  501.216676][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.236546][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  501.256999][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  501.288195][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.354828][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  501.383547][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  501.429943][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.475356][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  501.499909][  T793] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  501.557011][  T793] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.600006][  T793] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  501.633046][  T793] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  501.647397][  T793] usb 2-1: Product: syz
[  501.659721][  T793] usb 2-1: Manufacturer: syz
[  501.664419][  T793] usb 2-1: SerialNumber: syz
[  501.687989][  T793] usb 2-1: config 0 descriptor??
[  501.749738][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  501.930851][   T30] audit: type=1400 audit(1769902717.774:805): avc:  denied  { setopt } for  pid=11325 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  502.025066][  T793] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  502.152371][T11331] FAULT_INJECTION: forcing a failure.
[  502.152371][T11331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.208534][T11331] CPU: 1 UID: 0 PID: 11331 Comm: syz.3.1200 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.208562][T11331] Tainted: [L]=SOFTLOCKUP
[  502.208568][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  502.208578][T11331] Call Trace:
[  502.208583][T11331]  <TASK>
[  502.208591][T11331]  dump_stack_lvl+0x100/0x190
[  502.208617][T11331]  should_fail_ex.cold+0x5/0xa
[  502.208636][T11331]  _copy_to_user+0x32/0xd0
[  502.208671][T11331]  simple_read_from_buffer+0xcb/0x170
[  502.208693][T11331]  proc_fail_nth_read+0x1af/0x230
[  502.208716][T11331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.208740][T11331]  ? rw_verify_area+0xce/0x6d0
[  502.208755][T11331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.208776][T11331]  vfs_read+0x1e4/0xb30
[  502.208797][T11331]  ? __pfx_vfs_read+0x10/0x10
[  502.208814][T11331]  ? find_held_lock+0x2b/0x80
[  502.208836][T11331]  ? __fget_files+0x215/0x3d0
[  502.208859][T11331]  ? __fget_files+0x21f/0x3d0
[  502.208886][T11331]  ksys_read+0x12a/0x250
[  502.208903][T11331]  ? __pfx_ksys_read+0x10/0x10
[  502.208927][T11331]  do_syscall_64+0xc9/0xf80
[  502.208949][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.208965][T11331] RIP: 0033:0x7f212d55b78e
[  502.208980][T11331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  502.208996][T11331] RSP: 002b:00007f212e4bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  502.209013][T11331] RAX: ffffffffffffffda RBX: 00007f212e4bd6c0 RCX: 00007f212d55b78e
[  502.209025][T11331] RDX: 000000000000000f RSI: 00007f212e4bd0a0 RDI: 0000000000000005
[  502.209035][T11331] RBP: 00007f212e4bd090 R08: 0000000000000000 R09: 0000000000000000
[  502.209045][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.209054][T11331] R13: 00007f212d816038 R14: 00007f212d815fa0 R15: 00007ffe194a11d8
[  502.209078][T11331]  </TASK>
[  502.431206][   T30] audit: type=1400 audit(1769902718.344:806): avc:  denied  { ioctl } for  pid=11332 comm="syz.2.1201" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  502.468882][   T30] audit: type=1326 audit(1769902718.374:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff8f9aeb9 code=0x7ffc0000
[  502.609819][   T30] audit: type=1326 audit(1769902718.374:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff8f9aeb9 code=0x7ffc0000
[  502.699740][   T30] audit: type=1326 audit(1769902718.374:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff8f9aeb9 code=0x7ffc0000
[  502.757961][   T30] audit: type=1326 audit(1769902718.434:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff8f9aeb9 code=0x7ffc0000
[  502.809700][   T30] audit: type=1326 audit(1769902718.434:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbff8f9ac22 code=0x7ffc0000
[  502.844426][T11343] net_ratelimit: 12 callbacks suppressed
[  502.844452][T11343] openvswitch: netlink: IP tunnel dst address not specified
[  502.873482][   T30] audit: type=1326 audit(1769902718.434:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbff8f9acb7 code=0x7ffc0000
[  502.898831][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1203'.
[  502.948217][   T30] audit: type=1326 audit(1769902718.434:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbff8f57c51 code=0x7ffc0000
[  503.026378][T11333] syz.2.1201 (11333) used greatest stack depth: 19544 bytes left
[  503.088034][    C1] usb 2-1: yurex_control_callback - control failed: -71
[  503.092025][ T5890] usb 2-1: USB disconnect, device number 39
[  503.122246][T11344] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19
[  503.165237][ T5890] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  503.293650][T11357] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1205'.
[  503.315184][T11358] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1206'.
[  503.420622][  T980] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  503.581348][  T980] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  503.605665][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.647669][  T980] usb 1-1: config 0 descriptor??
[  503.672495][  T980] gspca_main: cpia1-2.14.0 probing 0813:0001
[  503.829799][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  504.083609][T11351] syz.0.1204 (11351): /proc/11350/oom_adj is deprecated, please use /proc/11350/oom_score_adj instead.
[  504.169941][  T980] cpia1 1-1:0.0: unexpected state after lo power cmd: aa
[  504.245666][T11364] binder: 11361:11364 ioctl c0306201 0 returned -14
[  504.594063][  T980] gspca_cpia1: usb_control_msg 02, error -71
[  504.624755][  T980] gspca_cpia1: usb_control_msg 05, error -71
[  504.677005][  T980] cpia1 1-1:0.0: unexpected systemstate: aa
[  504.710233][  T980] usb 1-1: USB disconnect, device number 34
[  505.166992][T11372] netlink: 444 bytes leftover after parsing attributes in process `syz.3.1209'.
[  505.176644][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'.
[  505.279226][T11373] /dev/nullb0: Can't open blockdev
[  505.909949][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  505.932024][T11381] binder: 11380:11381 ioctl c0306201 0 returned -14
[  506.254776][T11388] netlink: 'syz.3.1215': attribute type 10 has an invalid length.
[  506.263382][T11388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'.
[  506.283138][T11388] batman_adv: batadv0: Adding interface: virt_wifi0
[  506.289817][T11388] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.320343][T11388] batman_adv: batadv0: Interface activated: virt_wifi0
[  506.341575][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  506.369828][   T30] kauditd_printk_skb: 68 callbacks suppressed
[  506.369862][   T30] audit: type=1400 audit(1769902722.164:882): avc:  denied  { shutdown } for  pid=11385 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  506.395787][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms
[  506.395810][    C0] lec:lec_tx_timeout: lec0
[  506.405224][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  506.543343][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  506.552807][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.564377][    T9] usb 1-1: Product: syz
[  506.577579][    T9] usb 1-1: Manufacturer: syz
[  506.588907][    T9] usb 1-1: SerialNumber: syz
[  506.606718][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  506.623405][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  507.002693][T11405] openvswitch: netlink: IP tunnel dst address not specified
[  507.016867][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1218'.
[  507.040495][T11406] FAULT_INJECTION: forcing a failure.
[  507.040495][T11406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.063324][    T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  507.071066][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.1.1219 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  507.071084][T11406] Tainted: [L]=SOFTLOCKUP
[  507.071088][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  507.071094][T11406] Call Trace:
[  507.071098][T11406]  <TASK>
[  507.071103][T11406]  dump_stack_lvl+0x100/0x190
[  507.071121][T11406]  should_fail_ex.cold+0x5/0xa
[  507.071136][T11406]  _copy_from_user+0x2e/0xd0
[  507.071152][T11406]  copy_msghdr_from_user+0x9f/0x4f0
[  507.071164][T11406]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  507.071182][T11406]  ___sys_sendmsg+0x106/0x1e0
[  507.071193][T11406]  ? __pfx____sys_sendmsg+0x10/0x10
[  507.071211][T11406]  ? find_held_lock+0x2b/0x80
[  507.071234][T11406]  __sys_sendmsg+0x170/0x220
[  507.071249][T11406]  ? __pfx___sys_sendmsg+0x10/0x10
[  507.071272][T11406]  do_syscall_64+0xc9/0xf80
[  507.071286][T11406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.071297][T11406] RIP: 0033:0x7fc1c739aeb9
[  507.071306][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.071317][T11406] RSP: 002b:00007fc1c822f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.071328][T11406] RAX: ffffffffffffffda RBX: 00007fc1c7616180 RCX: 00007fc1c739aeb9
[  507.071335][T11406] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007
[  507.071341][T11406] RBP: 00007fc1c822f090 R08: 0000000000000000 R09: 0000000000000000
[  507.071347][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.071354][T11406] R13: 00007fc1c7616218 R14: 00007fc1c7616180 R15: 00007fffafc5b178
[  507.071368][T11406]  </TASK>
[  507.639829][  T980] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  507.661718][    T9] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  507.670632][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.684897][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.702727][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  507.714480][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.725149][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.726348][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.754296][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.765283][ T5921] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  507.780699][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  507.842235][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.851827][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.868263][  T980] usb 4-1: Using ep0 maxpacket: 16
[  507.878390][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  507.890985][  T980] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.903061][  T980] usb 4-1: config 0 interface 0 has no altsetting 0
[  507.919944][  T980] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  507.929743][ T5890] usb 1-1: Service connection timeout for: 256
[  507.936199][ T5890] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  507.944384][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.954726][ T5921] usb 2-1: config 2 has an invalid interface number: 207 but max is 1
[  507.962981][ T5921] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  507.979767][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.990129][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  508.006006][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.019044][  T980] usb 4-1: config 0 descriptor??
[  508.024104][ T5921] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2
[  508.034144][ T5921] usb 2-1: config 2 has no interface number 0
[  508.043716][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  508.050512][ T5921] usb 2-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  508.065379][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.075710][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.086756][ T5921] usb 2-1: config 2 interface 207 has no altsetting 0
[  508.094370][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  508.102403][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.112650][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.123794][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  508.124044][ T5921] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e
[  508.140821][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.149743][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.159861][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.170997][ T5890] ath9k_htc: Failed to initialize the device
[  508.180716][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized
[  508.187288][ T5921] usb 2-1: Product: syz
[  508.191908][ T5921] usb 2-1: Manufacturer: syz
[  508.203293][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  508.211823][ T5921] usb 2-1: SerialNumber: syz
[  508.217902][  T793] usb 1-1: USB disconnect, device number 35
[  508.219727][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.234767][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.246857][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  508.269144][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  508.278241][    T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  508.286612][    T9] usb 3-1: Product: syz
[  508.290909][    T9] usb 3-1: Manufacturer: syz
[  508.296687][    T9] usb 3-1: SerialNumber: syz
[  508.328606][    T9] usb 3-1: config 0 descriptor??
[  508.343564][    T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  508.452624][  T980] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  508.649904][  T793] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  508.809722][  T793] usb 5-1: Using ep0 maxpacket: 8
[  508.825818][  T793] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  508.852119][  T793] usb 5-1: config 0 has no interface number 0
[  508.879455][  T793] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  508.890642][   T24] usb 4-1: USB disconnect, device number 37
[  508.913965][  T793] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  508.927692][  T793] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  508.938721][  T793] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  508.951676][  T793] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  508.965663][  T793] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  508.974827][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.984906][  T793] usb 5-1: config 0 descriptor??
[  508.994355][  T793] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  509.089715][ T5876] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  509.164016][    C0] usb 3-1: yurex_control_callback - control failed: -71
[  509.164316][   T24] usb 3-1: USB disconnect, device number 36
[  509.184496][T11416] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19
[  509.185387][   T24] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  509.261069][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.275964][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.285765][ T5876] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  509.294888][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.304886][ T5876] usb 1-1: config 0 descriptor??
[  509.432168][T11423] syzkaller0: entered promiscuous mode
[  509.438835][T11423] syzkaller0: entered allmulticast mode
[  509.523986][T11418] netlink: 'syz.0.1222': attribute type 21 has an invalid length.
[  509.541842][T11418] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1222'.
[  509.556913][T11418] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  509.683239][T11427] 9p: Bad value for 'rfdno'
[  510.072213][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  510.129022][ T5921] qmi_wwan 2-1:2.207: skipping garbage
[  510.173279][ T5921] qmi_wwan 2-1:2.207: skipping garbage
[  510.226126][ T5921] qmi_wwan 2-1:2.207: probe with driver qmi_wwan failed with error -22
[  510.334547][ T5921] usb 2-1: USB disconnect, device number 40
[  510.412328][ T5876] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  510.423842][ T5876] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  510.494754][ T5876] cp2112 0003:10C4:EA90.0014: error requesting version
[  510.526390][ T5876] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71
[  510.558407][ T5876] usb 1-1: USB disconnect, device number 36
[  510.740013][   T30] audit: type=1400 audit(1769902726.644:883): avc:  denied  { shutdown } for  pid=11436 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  510.888564][   T30] audit: type=1400 audit(1769902726.794:884): avc:  denied  { create } for  pid=11436 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  510.979697][ T5921] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  511.132962][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  511.146371][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  511.164693][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  511.188084][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  511.217798][ T5921] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  511.229348][ T5921] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  511.263471][ T5921] usb 4-1: Product: syz
[  511.275215][ T5921] usb 4-1: Manufacturer: syz
[  511.287680][ T5921] usb 4-1: SerialNumber: syz
[  511.309452][ T5921] usb 4-1: config 0 descriptor??
[  511.356413][ T5921] smsusb:smsusb_probe: board id=2, interface number 0
[  511.375831][ T5921] smsusb:smsusb_probe: Device initialized with return code -19
[  511.398694][ T5876] usb 5-1: USB disconnect, device number 42
[  511.409684][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  511.417687][    C0] lec:lec_tx_timeout: lec0
[  511.424642][ T5876] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  511.512839][T11447] binder: 11446:11447 ioctl c0306201 0 returned -14
[  511.832404][ T5876] usb 4-1: USB disconnect, device number 38
[  511.840029][T11455] 9p: Bad value for 'rfdno'
[  512.149765][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  514.229796][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  514.459509][   T30] audit: type=1400 audit(1769902730.364:885): avc:  denied  { connect } for  pid=11481 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  514.510783][ T5876] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  514.569742][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  514.675369][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  514.835884][ T5876] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  514.849714][   T24] usb 3-1: Using ep0 maxpacket: 16
[  514.871741][ T5876] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.904371][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  514.916123][   T30] audit: type=1400 audit(1769902730.794:886): avc:  denied  { setopt } for  pid=11487 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  514.918986][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  514.957555][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  514.989150][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.030324][   T24] usb 3-1: Product: syz
[  515.042033][ T5876] usb 4-1: Product: syz
[  515.046198][   T24] usb 3-1: Manufacturer: syz
[  515.055378][ T5876] usb 4-1: Manufacturer: syz
[  515.062235][   T24] usb 3-1: SerialNumber: syz
[  515.070937][ T5876] usb 4-1: SerialNumber: syz
[  515.079490][   T24] usb 3-1: config 0 descriptor??
[  515.102866][   T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  515.244487][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  515.309882][   T24] gspca_sn9c2028: read1 error -32
[  515.330155][   T24] gspca_sn9c2028: read1 error -32
[  515.348774][T11474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11474 comm=syz.3.1235
[  515.380183][ T5876] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  515.710118][ T5876] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  515.869970][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  515.941530][ T5876] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.952624][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  515.959232][ T5876] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  515.976572][  T980] usb 3-1: USB disconnect, device number 37
[  515.993206][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.010074][ T5876] usb 2-1: config 0 descriptor??
[  516.042380][ T5921] usb 4-1: USB disconnect, device number 39
[  516.064769][ T5921] usblp0: removed
[  516.239781][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  516.310353][ T5819] Bluetooth: hci0: command 0x2016 tx timeout
[  516.399694][    T9] usb 1-1: Using ep0 maxpacket: 16
[  516.408215][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  516.417473][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.425651][    T9] usb 1-1: Product: syz
[  516.429973][    T9] usb 1-1: Manufacturer: syz
[  516.434570][    T9] usb 1-1: SerialNumber: syz
[  516.438145][ T5876] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  516.459428][    T9] usb 1-1: config 0 descriptor??
[  516.469242][    T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  516.785886][    T9] gspca_sn9c2028: read1 error -32
[  516.796340][    T9] gspca_sn9c2028: read1 error -32
[  516.854206][ T5876] usb 2-1: USB disconnect, device number 41
[  516.956429][T11521] ------------[ cut here ]------------
[  516.961952][T11521] vcpu->arch.mp_state == KVM_MP_STATE_INIT_RECEIVED
[  516.961964][T11521] WARNING: arch/x86/kvm/lapic.c:3501 at kvm_apic_accept_events+0x44e/0x4c0, CPU#0: syz.2.1249/11521
[  516.979333][T11521] Modules linked in:
[  516.983468][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.2.1249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  516.995196][T11521] Tainted: [L]=SOFTLOCKUP
[  516.999611][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  517.009732][T11521] RIP: 0010:kvm_apic_accept_events+0x44e/0x4c0
[  517.016365][T11521] Code: fd ff ff e8 04 6a df 00 e9 8f fc ff ff 4c 89 ef e8 27 6a df 00 e9 29 fc ff ff e8 ed 69 df 00 e9 7c fe ff ff e8 93 18 75 00 90 <0f> 0b 90 e9 89 fe ff ff e8 05 6a df 00 e9 d4 fb ff ff 4c 89 e7 e8
[  517.036634][T11521] RSP: 0018:ffffc9001b43fc38 EFLAGS: 00010287
[  517.042746][T11521] RAX: 0000000000000705 RBX: 0000000000000002 RCX: ffffc9000b719000
[  517.050733][T11521] RDX: 0000000000080000 RSI: ffffffff8191e2cd RDI: ffff888026798000
[  517.058698][T11521] RBP: ffff88807501dc00 R08: 0000000000000005 R09: 0000000000000002
[  517.066692][T11521] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001
[  517.074667][T11521] R13: ffff88807501dce0 R14: ffff88804664a970 R15: 0000000000000001
[  517.082644][T11521] FS:  00007fbff9ea56c0(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000
[  517.091589][T11521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  517.098149][T11521] CR2: 00007f503f53c668 CR3: 00000000371a0000 CR4: 00000000003526f0
[  517.106116][T11521] Call Trace:
[  517.109383][T11521]  <TASK>
[  517.112363][T11521]  kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x400
[  517.118883][T11521]  kvm_vcpu_ioctl+0x578/0x16d0
[  517.123947][T11521]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  517.129131][T11521]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  517.135057][T11521]  ? do_vfs_ioctl+0x226/0x13e0
[  517.139836][T11521]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  517.144852][T11521]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  517.151402][T11521]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  517.158254][T11521]  ? selinux_file_ioctl+0x139/0x290
[  517.163453][T11521]  ? selinux_file_ioctl+0xb4/0x290
[  517.168559][T11521]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  517.173759][T11521]  __x64_sys_ioctl+0x18e/0x210
[  517.178503][T11521]  do_syscall_64+0xc9/0xf80
[  517.182992][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.188855][T11521] RIP: 0033:0x7fbff8f9aeb9
[  517.193269][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.213165][T11521] RSP: 002b:00007fbff9ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  517.222318][T11521] RAX: ffffffffffffffda RBX: 00007fbff9215fa0 RCX: 00007fbff8f9aeb9
[  517.230860][T11521] RDX: 00002000000001c0 RSI: 000000008004ae98 RDI: 0000000000000005
[  517.238833][T11521] RBP: 00007fbff9008c1f R08: 0000000000000000 R09: 0000000000000000
[  517.246812][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.254768][T11521] R13: 00007fbff9216038 R14: 00007fbff9215fa0 R15: 00007ffe4ade0468
[  517.262731][T11521]  </TASK>
[  517.265727][T11521] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  517.272978][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.2.1249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  517.283880][T11521] Tainted: [L]=SOFTLOCKUP
[  517.288173][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  517.298199][T11521] Call Trace:
[  517.301458][T11521]  <TASK>
[  517.304380][T11521]  dump_stack_lvl+0x100/0x190
[  517.309033][T11521]  vpanic+0x20d/0x630
[  517.312998][T11521]  panic+0xd1/0xd1
[  517.316688][T11521]  ? __pfx_panic+0x10/0x10
[  517.321084][T11521]  check_panic_on_warn.cold+0x19/0x34
[  517.326431][T11521]  ? kvm_apic_accept_events+0x44e/0x4c0
[  517.331948][T11521]  __warn.cold+0x191/0x2f8
[  517.336334][T11521]  __report_bug+0x296/0x3d0
[  517.340809][T11521]  ? kvm_apic_accept_events+0x44e/0x4c0
[  517.346327][T11521]  ? __pfx___report_bug+0x10/0x10
[  517.351324][T11521]  ? __pfx___might_resched+0x10/0x10
[  517.356587][T11521]  ? kvm_apic_accept_events+0x44e/0x4c0
[  517.362112][T11521]  report_bug+0xb2/0x220
[  517.366329][T11521]  ? kvm_apic_accept_events+0x44e/0x4c0
[  517.371843][T11521]  handle_bug+0x166/0x2a0
[  517.376147][T11521]  exc_invalid_op+0x17/0x50
[  517.380620][T11521]  asm_exc_invalid_op+0x1a/0x20
[  517.385441][T11521] RIP: 0010:kvm_apic_accept_events+0x44e/0x4c0
[  517.391564][T11521] Code: fd ff ff e8 04 6a df 00 e9 8f fc ff ff 4c 89 ef e8 27 6a df 00 e9 29 fc ff ff e8 ed 69 df 00 e9 7c fe ff ff e8 93 18 75 00 90 <0f> 0b 90 e9 89 fe ff ff e8 05 6a df 00 e9 d4 fb ff ff 4c 89 e7 e8
[  517.411139][T11521] RSP: 0018:ffffc9001b43fc38 EFLAGS: 00010287
[  517.417174][T11521] RAX: 0000000000000705 RBX: 0000000000000002 RCX: ffffc9000b719000
[  517.425117][T11521] RDX: 0000000000080000 RSI: ffffffff8191e2cd RDI: ffff888026798000
[  517.433058][T11521] RBP: ffff88807501dc00 R08: 0000000000000005 R09: 0000000000000002
[  517.441000][T11521] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001
[  517.448939][T11521] R13: ffff88807501dce0 R14: ffff88804664a970 R15: 0000000000000001
[  517.456895][T11521]  ? kvm_apic_accept_events+0x44d/0x4c0
[  517.462417][T11521]  ? kvm_apic_accept_events+0x44d/0x4c0
[  517.467936][T11521]  kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x400
[  517.474062][T11521]  kvm_vcpu_ioctl+0x578/0x16d0
[  517.478798][T11521]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  517.483965][T11521]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  517.489836][T11521]  ? do_vfs_ioctl+0x226/0x13e0
[  517.494570][T11521]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  517.499561][T11521]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  517.506033][T11521]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  517.512858][T11521]  ? selinux_file_ioctl+0x139/0x290
[  517.518024][T11521]  ? selinux_file_ioctl+0xb4/0x290
[  517.523112][T11521]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  517.528281][T11521]  __x64_sys_ioctl+0x18e/0x210
[  517.533031][T11521]  do_syscall_64+0xc9/0xf80
[  517.537509][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.543370][T11521] RIP: 0033:0x7fbff8f9aeb9
[  517.547760][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.567339][T11521] RSP: 002b:00007fbff9ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  517.575722][T11521] RAX: ffffffffffffffda RBX: 00007fbff9215fa0 RCX: 00007fbff8f9aeb9
[  517.583664][T11521] RDX: 00002000000001c0 RSI: 000000008004ae98 RDI: 0000000000000005
[  517.591605][T11521] RBP: 00007fbff9008c1f R08: 0000000000000000 R09: 0000000000000000
[  517.599545][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.607487][T11521] R13: 00007fbff9216038 R14: 00007fbff9215fa0 R15: 00007ffe4ade0468
[  517.615440][T11521]  </TASK>
[  517.618718][T11521] Kernel Offset: disabled
[  517.623014][T11521] Rebooting in 86400 seconds..