last executing test programs:

15m24.510801018s ago: executing program 32 (id=1018):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a227536350102030109021200"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400c050000007d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3m6.007985102s ago: executing program 2 (id=4854):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
io_submit(0x0, 0x0, 0x0)
sendto(r5, 0x0, 0x0, 0x40, 0x0, 0x0)
getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r3, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3m0.67642794s ago: executing program 2 (id=4871):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x46d7, 0x9f, 0x2, 0x1}, {0x1, 0x4, 0x1, 0x1}, {0x5, 0xc, 0x2, 0x4}]})
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0xff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)

2m56.821068518s ago: executing program 2 (id=4886):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
io_submit(0x0, 0x0, 0x0)
sendto(r5, 0x0, 0x0, 0x40, 0x0, 0x0)
getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r3, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x25, 0xe4b, 0x81, 0x8, 0xfffa, 0x5, 0xfffffffe, 0x801, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0})

2m53.788521267s ago: executing program 1 (id=4896):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, r3, 0x0)

2m52.859597079s ago: executing program 2 (id=4898):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r10 = dup3(r9, r8, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
chdir(&(0x7f0000000140)='./file1\x00')
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r12, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f})
syz_open_dev$sndmidi(&(0x7f00000001c0), 0x100000000, 0x20080)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r10}, @fd={0x66642a85, 0x0, r9}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x200, 0x10fffff, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x145, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0xfffffffd, 0x34a}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0)
r13 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0)
r14 = fsmount(r13, 0x0, 0x0)
r15 = openat$cgroup_procs(r14, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r15, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m51.722993673s ago: executing program 5 (id=4902):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m51.57510576s ago: executing program 5 (id=4903):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
mount(0x0, 0x0, &(0x7f0000000300)='ufs\x00', 0x1251048, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r6, 0x80, 0x2, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)

2m51.226023806s ago: executing program 2 (id=4904):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, r3, 0x0)

2m50.758485512s ago: executing program 1 (id=4905):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r7=>0x0})
r8 = socket(0x2d, 0x2, 0x0)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x1, r7, 0xc}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001080)={0xffffffffffffffff, 0x1, 0x1, r7, 0x7}, 0xc)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r9, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10)

2m50.661035239s ago: executing program 5 (id=4906):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
io_submit(0x0, 0x0, 0x0)
sendto(r5, 0x0, 0x0, 0x40, 0x0, 0x0)
getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r3, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2m50.487459307s ago: executing program 2 (id=4908):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

2m50.210747665s ago: executing program 33 (id=4908):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

2m49.577869774s ago: executing program 1 (id=4910):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m49.223772446s ago: executing program 1 (id=4914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0xb3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0x1234', 0x6)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x8}, 0xb2a1})
write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x4, 0x0, 0xfd, @tick, {}, {}, @ext={0x5f, &(0x7f0000000540)="2c6febf3adbc0545c24342ed7b9510d5a941f7d78012a2ef82625f3bbd9a6060fb9a3a244c0cf8ab8e0676fe05cbdd075c8dfa4a911603d3035b3ae6a6831c1860e507216a078da743fbedda68b9cf4b78088fc8056020566801b4ca19cfe1"}}], 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0xa4801, 0x20)
write(r3, &(0x7f0000000240)='0x5678\n\x00', 0x7)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000480)={@any, 0x0, 0xa2ad, 0xfffd, 0x809, 0xa, "73ec8f7f4f994242a51098ceaf1e64bc8bbe1d85db5442305fc1d2f24c2148137bef5226bd87d017bb706c11d81e2d42de8dc71a0700000000000000159d96370900000000000000853ab4df2690870c77642d665327274ba7666b41ce809b0bd692748f3449c8bbf1a8359e7cb5d1aa6f9fca89e86def465e67fbd5633ac48b"})
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(r3, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1fb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(r3, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x2)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00')
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c67dcf20d813200031f700000001090212000180000000090400"], 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc)
chroot(&(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00')

2m47.362531034s ago: executing program 5 (id=4918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd8aa, 0x2, 0x7, 0x7, 0x81}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x218443041f677594}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

2m46.181362943s ago: executing program 1 (id=4920):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x800006, @loopback, 0x4}, 0x1c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ppoll(&(0x7f0000000140)=[{r2, 0x4002}], 0x1, 0x0, 0x0, 0x0)
close(0x3)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$can_bcm(0x1d, 0x2, 0x2)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r8 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r8, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r7])
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_emit_ethernet(0x0, 0x0, 0x0)

2m46.107178049s ago: executing program 5 (id=4921):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x46d7, 0x9f, 0x2, 0x1}, {0x1, 0x4, 0x1, 0x1}, {0x5, 0xc, 0x2, 0x4}]})
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0xff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2m44.084561493s ago: executing program 5 (id=4928):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m42.368709185s ago: executing program 1 (id=4933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m37.808954181s ago: executing program 6 (id=4909):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x800006, @loopback, 0x4}, 0x1c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000269e429405f0500a836c4010203030902120001270530050904"], 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_emit_ethernet(0x0, 0x0, 0x0)

2m34.248295915s ago: executing program 6 (id=4953):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd8aa, 0x2, 0x7, 0x7, 0x81}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x218443041f677594}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x100000, 0x0)
fsopen(&(0x7f00000001c0)='bdev\x00', 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000f4d000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000c3f000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8c1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x2000, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0), 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x83, 0x6], 0x2)
close(r6)

2m33.142674705s ago: executing program 6 (id=4957):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400))
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, r3, 0x0)

2m30.168019841s ago: executing program 6 (id=4965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='tcp 2', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m28.454003501s ago: executing program 34 (id=4928):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m27.294826253s ago: executing program 35 (id=4933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m16.903531506s ago: executing program 0 (id=4997):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14002ef41a940000030100"/20], 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4, 0x0, 0x300}, 0x38)

2m16.541914271s ago: executing program 0 (id=4998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000)
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{{<r3=>0x80000000}}, {{}, {0x80000000, <r4=>0x0}}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000100)={0x200})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, 0x0, 0x0)
listen(r9, 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{r3, 0x0, 0x5, [0xb, 0x23b232f2]}, {0x80000000, r4, 0x6, [0x2, 0x6]}, 0x10000000, [0x101, 0x200]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})

2m14.902524884s ago: executing program 36 (id=4965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='tcp 2', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

2m14.881672821s ago: executing program 0 (id=5004):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00", @ANYRES64, @ANYRES32, @ANYRESHEX], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m14.759543616s ago: executing program 0 (id=5005):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000841)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$TCSETSW2(r6, 0x5453, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

2m13.225987864s ago: executing program 0 (id=5006):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m13.073580222s ago: executing program 0 (id=5008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='tcp 2', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

1m57.913375247s ago: executing program 37 (id=5008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='tcp 2', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='2\n\x00', 0x2)

10.738819803s ago: executing program 8 (id=5336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000)
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{{<r3=>0x80000000}}, {{}, {0x80000000, <r4=>0x0}}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000100)={0x200})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, 0x0, 0x0)
listen(r9, 0x0)
pipe2(&(0x7f00000002c0)={<r10=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
tee(r10, r11, 0x53, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{r3, 0x0, 0x5, [0xb, 0x23b232f2]}, {0x80000000, r4, 0x6, [0x2, 0x6]}, 0x10000000, [0x101, 0x200]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})

9.902167011s ago: executing program 3 (id=5338):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x60000000000000, 0x20000)
close(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$peekuser(0x3, r3, 0x1)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r8, 0x9)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r9, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
readv(r7, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2)
sendfile(r0, r1, 0x0, 0x20000023896)
close(0x3)

9.152467261s ago: executing program 8 (id=5339):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x9)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14)
mlockall(0x2)
r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[], 0x0)
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(r4, &(0x7f00000a5000/0x2000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00')
fchdir(r5)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a300000000009"], 0xa0}}, 0x40880)
syz_emit_ethernet(0x1196, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0)
sendto$inet(r3, &(0x7f0000000040)="ab", 0x1, 0x8c5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)

8.377792078s ago: executing program 9 (id=5341):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f00000002c0)})
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

7.102369854s ago: executing program 7 (id=5343):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b8064", 0x4a}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.923847712s ago: executing program 7 (id=5344):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b8064", 0x4a}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376f", 0x20}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b7", 0x47}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x6, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.848608769s ago: executing program 7 (id=5345):
r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

6.569350065s ago: executing program 3 (id=5347):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000080)=[{r0, 0xc511}], 0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

5.655353231s ago: executing program 3 (id=5349):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
write$sndseq(r1, &(0x7f0000000100)=[{0x8, 0x9, 0x1, 0x0, @time={0x5, 0x3}, {0x89, 0xb8}, {0x4, 0x6}, @connect={{0x6, 0xff}, {0x1, 0x6}}}], 0xfe5d)

5.33905646s ago: executing program 8 (id=5350):
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)

5.080323196s ago: executing program 9 (id=5351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

4.55055925s ago: executing program 9 (id=5352):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.545588295s ago: executing program 8 (id=5353):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
syz_pidfd_open(0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r7, &(0x7f0000005680), 0x8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
shutdown(r7, 0x1)
mmap(&(0x7f0000994000/0x1000)=nil, 0x1000, 0x2000008, 0x4082172, r4, 0xa94b6000)
mremap(&(0x7f00000b7000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000650000/0x1000)=nil)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'macvtap0\x00', @random="010003201000"})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delchain={0x2c, 0x65, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x3, 0x9}, {0xfff2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

4.29158849s ago: executing program 3 (id=5354):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b8064", 0x4a}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.834563528s ago: executing program 9 (id=5355):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8)

3.755478254s ago: executing program 7 (id=5356):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$sndseq(r1, &(0x7f0000000100)=[{0x8, 0x9, 0x1, 0x0, @time={0x5, 0x3}, {0x89, 0xb8}, {0x4, 0x6}, @connect={{0x6, 0xff}, {0x1, 0x6}}}], 0xfe5d)

3.675165417s ago: executing program 3 (id=5357):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x60000000000000, 0x20000)
close(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$peekuser(0x3, r3, 0x1)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r8, 0x9)
readv(r7, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendfile(r0, r1, 0x0, 0x20000023896)

3.438310511s ago: executing program 8 (id=5358):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

2.571607329s ago: executing program 3 (id=5360):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x9)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14)
mlockall(0x2)
r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[], 0x0)
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(r4, &(0x7f00000a5000/0x2000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00')
fchdir(r5)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a300000000009"], 0xa0}}, 0x40880)
syz_emit_ethernet(0x1196, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0)
sendto$inet(r3, &(0x7f0000000040)="ab", 0x1, 0x8c5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)

2.532224479s ago: executing program 9 (id=5361):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
kexec_load(0x1, 0x0, 0x0, 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x5}}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0xf5, &(0x7f0000000340), &(0x7f0000000440)=""/245, 0x0, 0x0, 0xe1, 0x3a, &(0x7f0000000540)="f0651157d8e6739ef73e1477830c5b99f8806d84697a6e8ce7ba4788f246c34a21aa41369a97efc6dc8ffde0dd115e7748f3931eed31150c6f11a595df3aa9c7ab03f6ad9aa86fea6ab4946cf50878e94671d0b72c168f67ebf000de8f121b8cd73f12948422d28fc34915e8907c8cc0a7b7ec3084761f89f492a7ee5a42be206e3a957b952676b7763a833c8855bcbf81f998ba5d3c901875616d62db286b57017ecdde62af8bc69c97e67ba2e0518edbfe064a939cd556470bbef9d35559a64c2b2bac283d1f7a136292c7299da3d74dfa2e0373666fa4620842aa415da84d8c", &(0x7f0000000640)="6b99cdea5689d035908428c05327f08ff4000171e96e08e4b0d028253c73cf3acc7bf460593a621588947c1004c4eb3f7fd9fc00604a885ad986", 0x4, 0x0, 0x8}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x21}, 0x94)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)

2.078842991s ago: executing program 7 (id=5362):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205"], 0x0)

1.105972704s ago: executing program 9 (id=5364):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0)

623.40629ms ago: executing program 4 (id=5365):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)}, {&(0x7f00000006c0)="9042053d45c5098d54b5c9904b4019deb90da0c5a38c443b7d7d6eb58c6cb58561f8577b9eb6ab9949b87533f5fd52dc984c7745a7e45fad8a0d426419a4af018724cbdc4300fb51147f9d88aa8d4b86b62404eccb92230c2ac2983fee1ac0b5af5a7527630b5fafb8a26ae3a0e478facbdf05fd2863270df5cb7564a779379c534c2568c9e4c6f7155479ae20e57f630c29ab6890822e3c0cfb931ea226c49e2ea996407db6c24d8b8847d12399ee1e241dc59adaa1259da81b7ca3428dbafb15f214d043fae622dfbfa79a8a2b8a96abb1c9075a68f29432e959c12df6a1475a70e9fd036df636366e6e0c", 0xec}, {&(0x7f00000007c0)="5ad30c587b73b44bf81af07e35c9df278b388b87831a98da058af5c506af89349476904811d47a1415a31288ef5e3df5114bd2e328", 0x35}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91389123e5", 0x11}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0)

508.183487ms ago: executing program 4 (id=5366):
pipe(&(0x7f0000002100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setns(0xc9, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="096a4f48417ce3a614"], 0x0)
r2 = socket(0x2a, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x600, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008841}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

421.591889ms ago: executing program 4 (id=5367):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b8064", 0x4a}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93", 0x22}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583", 0x46}, {0x0}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x7, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

358.36551ms ago: executing program 4 (id=5368):
pipe(&(0x7f0000002100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setns(0xc9, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="096a4f48417ce3a614"], 0x0)
r2 = socket(0x2a, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x600, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008841}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)

268.186271ms ago: executing program 4 (id=5369):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e", 0x15}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b7", 0x47}, {&(0x7f00000006c0)="9042053d45c5098d54b5c9904b4019deb90da0c5a38c443b7d7d6eb58c6cb58561f8577b9eb6ab9949b87533f5fd52dc984c7745a7e45fad8a0d426419a4af018724cbdc4300fb51147f9d88aa8d4b86b62404eccb92230c2ac2983fee1ac0b5af5a7527630b5fafb8a26ae3a0e478facbdf05fd2863270df5cb7564a779379c534c2568c9e4c6f7155479ae20e57f630c29ab6890822e3c0cfb931ea226c49e2ea996407db6c24d8b8847d12399ee1e241dc59adaa1259da81b7ca3428dbafb15f214d043fae622dfbfa79a8a2b8a96abb1c9075a68f29432e959c12df6a1475a70e9fd036df636366e6e0c", 0xec}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a91", 0xd}], 0x6, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

257.760205ms ago: executing program 4 (id=5370):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x60000000000000, 0x20000)
close(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$peekuser(0x3, r3, 0x1)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r8, 0x9)
readv(r7, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendfile(r0, r1, 0x0, 0x20000023896)

136.02068ms ago: executing program 7 (id=5371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8)

0s ago: executing program 8 (id=5372):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000f7c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dd3000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a7, 0x1c891, 0x4, 0x22a})
move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0)

kernel console output (not intermixed with test programs):

: avc:  denied  { write } for  pid=21634 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1044.572608][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.580722][ T5741] usb 8-1: Product: syz
[ 1044.585676][ T5741] usb 8-1: Manufacturer: syz
[ 1044.590309][ T5741] usb 8-1: SerialNumber: syz
[ 1044.602666][ T5741] cdc_mbim 8-1:1.0: skipping garbage
[ 1044.962340][ T5624] Bluetooth: hci8: command tx timeout
[ 1045.706015][ T5741] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS
[ 1045.738352][ T5741] cdc_mbim 8-1:1.0: bind() failure
[ 1045.835406][  T992] hid_parser_main: 113 callbacks suppressed
[ 1045.835428][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.851551][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.859028][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.861676][ T5741] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[ 1045.871756][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.880963][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.888466][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.895916][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.904717][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.912144][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.919709][  T992] hid-u2fzero 0003:20A0:4287.0023: unknown main item tag 0x0
[ 1045.932174][  T992] hid-u2fzero 0003:20A0:4287.0023: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.9-1/input0
[ 1045.963264][  T992] usb 10-1: USB disconnect, device number 7
[ 1045.968368][ T5741] cdc_ncm 8-1:1.1: bind() failure
[ 1046.008448][   T29] audit: type=1400 audit(1785789966.354:4915): avc:  denied  { ioctl } for  pid=21645 comm="syz.8.5085" path="socket:[76878]" dev="sockfs" ino=76878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1046.067272][ T5741] usb 8-1: USB disconnect, device number 15
[ 1046.283732][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b93e800: rx timeout, send abort
[ 1046.783833][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4c800: rx timeout, send abort
[ 1046.795048][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b93e800: abort rx timeout. Force session deactivation
[ 1046.840064][    C1] vcan0: j1939_simple_recv: Received already invalidated message
[ 1047.032958][   T29] audit: type=1400 audit(1785789966.354:4916): avc:  denied  { bind } for  pid=21645 comm="syz.8.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1047.053022][   T29] audit: type=1400 audit(1785789966.364:4917): avc:  denied  { setopt } for  pid=21645 comm="syz.8.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1047.091115][   T29] audit: type=1400 audit(1785789966.394:4918): avc:  denied  { write } for  pid=21645 comm="syz.8.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1047.110801][   T29] audit: type=1400 audit(1785789966.674:4919): avc:  denied  { read } for  pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1047.156901][   T29] audit: type=1400 audit(1785789966.674:4920): avc:  denied  { search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1047.195602][T21649] fido_id[21649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1047.292089][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4c800: abort rx timeout. Force session deactivation
[ 1047.304173][   T29] audit: type=1400 audit(1785789966.714:4921): avc:  denied  { write search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1047.326643][   T29] audit: type=1400 audit(1785789966.714:4922): avc:  denied  { add_name } for  pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1048.481655][T21517] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1048.513322][T21673] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1048.526569][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1048.526581][   T29] audit: type=1400 audit(1785789968.864:4926): avc:  denied  { write } for  pid=21672 comm="syz.7.5090" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1048.578555][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1048.613224][T21673] udc dummy_udc.0: failed to start g1: -19
[ 1048.636729][T21673] UDC core: g1: couldn't find an available UDC or it's busy
[ 1048.656019][T21517] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1048.733915][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1048.791289][T21517] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1049.288482][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1049.412702][T21517] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1049.581124][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1050.301208][ T5741] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1050.341665][T21690] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1050.436359][   T29] audit: type=1400 audit(1785789970.794:4927): avc:  denied  { write } for  pid=21644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1050.484390][T21705] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1050.491664][ T5741] usb 8-1: Using ep0 maxpacket: 8
[ 1050.540170][T21705] udc dummy_udc.0: failed to start g1: -19
[ 1050.546569][ T5741] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1050.587840][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1050.610223][T21705] UDC core: g1: couldn't find an available UDC or it's busy
[ 1050.670256][ T5741] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1050.709734][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1050.728291][T21517] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.745830][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1050.829973][ T5741] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1050.873128][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1050.886582][T21517] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.909411][ T5741] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1050.993445][T20721] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.000619][T20721] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1051.011751][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1051.047150][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1051.262060][ T5741] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1051.333413][T20721] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.340564][T20721] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1051.361334][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1051.493322][ T5741] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1051.640277][   T29] audit: type=1400 audit(1785789971.894:4928): avc:  denied  { write } for  pid=21708 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.690416][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1051.813920][ T5741] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1052.235647][ T5741] usb 8-1: string descriptor 0 read error: -22
[ 1052.241944][ T5741] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1052.258571][   T29] audit: type=1400 audit(1785789972.614:4929): avc:  denied  { write } for  pid=21712 comm="syz.3.5098" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1052.289588][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.299412][T21714] random: crng reseeded on system resumption
[ 1052.367514][ T5741] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1052.407194][   T29] audit: type=1400 audit(1785789972.614:4930): avc:  denied  { open } for  pid=21712 comm="syz.3.5098" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1052.882544][ T5741] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1053.538042][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 1053.600661][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1053.627934][   T29] audit: type=1400 audit(1785789973.974:4931): avc:  denied  { write } for  pid=21715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1053.747015][ T5741] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1053.775598][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.264086][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.281620][ T5741] usb 4-1: config 0 descriptor??
[ 1054.453371][   T10] usb 8-1: USB disconnect, device number 16
[ 1054.588365][   T29] audit: type=1400 audit(1785789974.944:4932): avc:  denied  { write } for  pid=21743 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1055.521320][ T5741] hid_parser_main: 222 callbacks suppressed
[ 1055.521345][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.547705][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.562315][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.569882][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.578784][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.586286][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.593755][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.601217][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.609762][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.617262][ T5741] hid-u2fzero 0003:20A0:4287.0024: unknown main item tag 0x0
[ 1055.629072][ T5741] hid-u2fzero 0003:20A0:4287.0024: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0
[ 1055.692611][T21517] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1055.715535][ T5741] usb 4-1: USB disconnect, device number 10
[ 1055.916991][T21759] fido_id[21759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1055.948876][   T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1056.286230][T21174] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1056.333987][   T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1056.478117][T21174] usb 4-1: Using ep0 maxpacket: 8
[ 1056.580833][T21174] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1056.735462][T21174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.034353][   T10] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 1057.049422][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1057.058586][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1057.066635][   T10] usb 8-1: SerialNumber: syz
[ 1057.075088][T21758] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1057.134410][T21174] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1057.159242][T21174] pvrusb2: **********
[ 1057.177009][T21174] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1057.202225][T21174] pvrusb2: Important functionality might not be entirely working.
[ 1057.277766][T21517] veth0_vlan: entered promiscuous mode
[ 1057.292181][T21174] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1057.323093][T21174] pvrusb2: **********
[ 1057.331977][T21758] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1057.335178][ T2364] pvrusb2: Invalid write control endpoint
[ 1057.355951][T21517] veth1_vlan: entered promiscuous mode
[ 1057.386378][ T5741] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1057.497825][T21517] veth0_macvtap: entered promiscuous mode
[ 1057.508221][   T29] audit: type=1400 audit(1785789977.864:4933): avc:  denied  { write } for  pid=21764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1057.622853][T21517] veth1_macvtap: entered promiscuous mode
[ 1057.996116][T21517] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1058.015766][ T5741] usb 10-1: Using ep0 maxpacket: 8
[ 1058.044456][ T5741] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1058.081124][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1058.134717][   T10] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 1058.155311][ T5741] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1058.178261][T21517] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1058.207426][ T2364] pvrusb2: Invalid write control endpoint
[ 1058.363029][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1058.407108][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1058.418550][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.480341][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1058.491810][   T29] audit: type=1400 audit(1785789977.914:4934): avc:  denied  { sqpoll } for  pid=21773 comm="syz.3.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1058.491863][   T29] audit: type=1400 audit(1785789977.924:4935): avc:  denied  { getopt } for  pid=21773 comm="syz.3.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1058.531250][   T29] audit: type=1400 audit(1785789977.924:4936): avc:  denied  { listen } for  pid=21773 comm="iou-sqp-21787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1058.531993][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.620324][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.653506][ T5741] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1058.661356][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1058.691676][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.710187][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1058.732525][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1058.768890][ T5741] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1058.812691][   T29] audit: type=1400 audit(1785789978.304:4937): avc:  denied  { mmap_zero } for  pid=21757 comm="syz.7.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[ 1058.833044][   T29] audit: type=1400 audit(1785789978.374:4938): avc:  denied  { bind } for  pid=21757 comm="syz.7.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1058.854653][   T29] audit: type=1400 audit(1785789978.384:4939): avc:  denied  { write } for  pid=21757 comm="syz.7.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1058.874312][   T29] audit: type=1400 audit(1785789978.924:4940): avc:  denied  { write } for  pid=21797 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1059.114143][ T5704] usb 8-1: USB disconnect, device number 17
[ 1059.176681][ T5704] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device
[ 1059.340349][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.414280][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1059.461751][T21807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.504846][T21807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.586038][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.619946][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1059.740461][   T10] usb 4-1: USB disconnect, device number 11
[ 1059.747088][ T2364] pvrusb2: Device being rendered inoperable
[ 1059.748373][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1059.748467][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1059.782075][ T2364] pvrusb2: Attached sub-driver cx25840
[ 1059.782120][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1059.782129][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1060.013188][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1060.013225][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1060.017488][ T5741] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1060.017535][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1060.017567][ T5741] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1060.017605][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1060.017634][ T5741] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1060.027751][ T5741] usb 10-1: string descriptor 0 read error: -22
[ 1060.027866][ T5741] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1060.027895][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.084957][ T5741] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1060.110158][   T29] audit: type=1400 audit(1785789980.464:4941): avc:  denied  { write } for  pid=21809 comm="syz.4.5052" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1060.156109][T21812] input: syz1 as /devices/virtual/input/input113
[ 1060.156143][T21812] input: failed to attach handler leds to device input113, error: -6
[ 1060.244500][T16697] usb 10-1: USB disconnect, device number 8
[ 1060.397365][T21174] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1060.546219][T21174] usb 5-1: Using ep0 maxpacket: 32
[ 1060.616406][T21174] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[ 1060.616484][T21174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.373280][ T5741] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1061.434461][T21174] usb 5-1: selecting invalid altsetting 3
[ 1061.434501][T21174] comedi comedi5: could not set alternate setting 3 in high speed
[ 1061.434521][T21174] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[ 1061.447721][T21174] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22
[ 1061.471318][T21174] usb 5-1: USB disconnect, device number 24
[ 1061.524113][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 1061.812821][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1061.826993][ T5741] usb 8-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1061.836256][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.894314][ T5741] usb 8-1: config 0 descriptor??
[ 1062.444829][T21841] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1062.969327][   T29] audit: type=1400 audit(1785789983.254:4942): avc:  denied  { write } for  pid=21811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1063.711068][ T5741] hid_parser_main: 222 callbacks suppressed
[ 1063.711092][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.727070][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.739704][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.747303][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.754859][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.762794][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.771732][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.822342][  T992] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1063.918263][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.925849][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.933444][ T5741] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0
[ 1063.959406][ T5741] hid-u2fzero 0003:20A0:4287.0025: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.7-1/input0
[ 1064.014724][  T992] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1064.035714][  T992] usb 10-1: not running at top speed; connect to a high speed hub
[ 1064.428331][ T5741] usb 8-1: USB disconnect, device number 18
[ 1064.455665][T21854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.478026][  T992] usb 10-1: config 17 has an invalid interface number: 8 but max is 1
[ 1064.504061][  T992] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1064.564833][  T992] usb 10-1: config 17 has no interface number 0
[ 1064.931979][T21856] fido_id[21856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1064.946962][   T29] audit: type=1400 audit(1785789985.264:4943): avc:  denied  { write } for  pid=21848 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1065.180464][  T992] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[ 1065.216439][  T992] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64
[ 1065.243022][  T992] usb 10-1: config 17 interface 8 has no altsetting 0
[ 1065.258533][  T992] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1065.268022][  T992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.289984][  T992] usb 10-1: Product: syz
[ 1065.315143][T21174] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1065.416540][  T992] usb 10-1: Manufacturer: syz
[ 1065.423620][  T992] usb 10-1: SerialNumber: syz
[ 1065.440266][T21845] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1065.563928][T21174] usb 9-1: device descriptor read/64, error -71
[ 1065.602327][T16697] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1065.721953][T21845] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[ 1065.762481][T16697] usb 5-1: Using ep0 maxpacket: 16
[ 1065.773761][T16697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.792789][  T992] usb 10-1: selecting invalid altsetting 0
[ 1065.837459][T16697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1065.876290][  T992] usb 10-1: USB disconnect, device number 9
[ 1065.913025][T21174] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1065.960463][   T46] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1066.284712][   T46] usb 8-1: Using ep0 maxpacket: 8
[ 1066.317057][T21174] usb 9-1: device descriptor read/64, error -71
[ 1066.326092][T16697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1066.335832][T16697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1066.345539][T16697] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1066.356907][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1066.374595][T16697] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1066.387484][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1066.409347][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1066.417783][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1066.433116][T16697] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1066.466199][   T29] audit: type=1400 audit(1785789986.824:4944): avc:  denied  { write } for  pid=21867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1066.477762][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1066.492925][T16697] usb 5-1: Manufacturer: syz
[ 1066.501023][T21174] usb usb9-port1: attempt power cycle
[ 1066.525606][T16697] usb 5-1: config 0 descriptor??
[ 1066.525673][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1066.552426][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1066.560114][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1066.571489][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1066.585209][ T5712] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1066.600245][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1066.611497][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1066.615660][   T29] audit: type=1400 audit(1785789986.974:4945): avc:  denied  { write } for  pid=21885 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1066.624360][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1066.656986][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1066.669211][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1066.681169][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1066.692470][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1066.710202][   T46] usb 8-1: string descriptor 0 read error: -22
[ 1066.716548][   T46] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1066.726169][   T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.752290][ T5712] usb 4-1: Using ep0 maxpacket: 16
[ 1066.759371][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.775595][   T46] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1066.784986][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1066.818799][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1066.846398][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1066.856924][T21174] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1066.874363][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1066.888855][T21174] usb 9-1: device descriptor read/8, error -71
[ 1066.896183][ T5712] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1066.905646][ T5712] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1066.918286][ T5712] usb 4-1: Manufacturer: syz
[ 1066.936255][ T5712] usb 4-1: config 0 descriptor??
[ 1067.731939][ T5712] rc_core: IR keymap rc-hauppauge not found
[ 1067.746875][ T5712] Registered IR keymap rc-empty
[ 1067.751957][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1067.765092][T21881] input: syz1 as /devices/virtual/input/input114
[ 1067.783489][T21174] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1067.793962][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1067.826542][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1067.840858][T21174] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1067.854668][   T29] audit: type=1400 audit(1785789988.214:4946): avc:  denied  { write } for  pid=21887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1067.855498][T21174] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.906281][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115
[ 1067.933498][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1067.967138][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1067.996148][T21174] usb 9-1: config 0 descriptor??
[ 1068.018769][T21174] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1068.030058][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.069586][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.109369][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.133073][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.155183][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.155918][   T29] audit: type=1400 audit(1785789988.514:4947): avc:  denied  { write } for  pid=21911 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1068.234230][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.292781][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.490699][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1068.640135][ T5712] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1068.673974][ T5712] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1068.932310][T16697] rc_core: IR keymap rc-hauppauge not found
[ 1068.946420][T16697] Registered IR keymap rc-empty
[ 1068.954517][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1068.982320][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1069.166762][T16697] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[ 1069.336141][T16697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input116
[ 1069.508019][  T992] usb 4-1: USB disconnect, device number 12
[ 1069.551413][   T29] audit: type=1400 audit(1785789989.904:4948): avc:  denied  { setopt } for  pid=21898 comm="syz.8.5127" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1069.642808][T21174] usb 9-1: USB disconnect, device number 17
[ 1069.755878][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1069.785457][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1069.789061][   T46] usb 8-1: USB disconnect, device number 19
[ 1069.873716][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1069.922567][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.116232][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.213436][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.326017][T21936] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1070.702306][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.732300][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.766241][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.884281][T16697] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1070.921258][T16697] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1070.990363][T16697] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1071.058844][T16697] usb 5-1: USB disconnect, device number 25
[ 1071.079655][T21946] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬(�	IrÝ\•žu}ibˆŒ�ÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh<yÞ¯ðÕMÈv÷«^7 !JÐ>–O„h'®ÈûrK1‚\kU{!�e½úó¬Üš7»ßß
[ 1071.079655][T21946] ÄUúeâ[¦ÓÎ%#s'
[ 1071.083688][   T29] audit: type=1400 audit(1785789991.434:4949): avc:  denied  { mounton } for  pid=21945 comm="syz.3.5135" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1071.376389][T21954] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[ 1071.464897][T21955] random: crng reseeded on system resumption
[ 1071.508467][  T992] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[ 1071.662895][T18299] Bluetooth: hci0: command 0x0406 tx timeout
[ 1071.675152][T21954] CPU: 1 UID: 0 PID: 21954 Comm: syz.7.5133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1071.675193][T21954] Tainted: [L]=SOFTLOCKUP
[ 1071.675203][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1071.675219][T21954] Call Trace:
[ 1071.675229][T21954]  <TASK>
[ 1071.675239][T21954]  dump_stack_lvl+0x100/0x190
[ 1071.675279][T21954]  sysfs_warn_dup.cold+0x1c/0x28
[ 1071.675315][T21954]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1071.675341][T21954]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1071.675363][T21954]  ? find_held_lock+0x2b/0x80
[ 1071.675384][T21954]  ? kobject_add_internal+0x25f/0x930
[ 1071.675419][T21954]  ? kobject_add_internal+0x25f/0x930
[ 1071.675458][T21954]  ? class_dir_child_ns_type+0xd/0x60
[ 1071.675495][T21954]  kobject_add_internal+0x2c8/0x930
[ 1071.675535][T21954]  kobject_add+0x16a/0x1e0
[ 1071.675569][T21954]  ? __pfx_kobject_add+0x10/0x10
[ 1071.675606][T21954]  ? get_device_parent+0x1b3/0x4c0
[ 1071.675637][T21954]  ? kobject_put+0xb9/0x640
[ 1071.675677][T21954]  device_add+0x294/0x1970
[ 1071.675711][T21954]  ? lockdep_init_map_type+0x5c/0x250
[ 1071.675741][T21954]  ? __pfx_device_add+0x10/0x10
[ 1071.675772][T21954]  ? lockdep_init_map_type+0x5c/0x250
[ 1071.675802][T21954]  ? __init_waitqueue_head+0xca/0x150
[ 1071.675842][T21954]  tty_register_device_attr+0x388/0x7f0
[ 1071.675879][T21954]  ? lockdep_init_map_type+0x5c/0x250
[ 1071.675911][T21954]  ? __pfx_tty_register_device_attr+0x10/0x10
[ 1071.675950][T21954]  ? tty_port_init+0x156/0x1c0
[ 1071.675985][T21954]  gsm_activate_mux+0x155/0x2a0
[ 1071.676019][T21954]  gsmld_ioctl+0xbbc/0x15c0
[ 1071.676059][T21954]  ? kasan_quarantine_put+0x104/0x240
[ 1071.676086][T21954]  ? __pfx_gsmld_ioctl+0x10/0x10
[ 1071.676123][T21954]  ? __ldsem_down_read_nested+0xf3/0x890
[ 1071.676161][T21954]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[ 1071.676204][T21954]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1071.676234][T21954]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[ 1071.676261][T21954]  ? __pfx_gsmld_ioctl+0x10/0x10
[ 1071.676293][T21954]  tty_ioctl+0x11b4/0x1640
[ 1071.676323][T21954]  ? __pfx_tty_ioctl+0x10/0x10
[ 1071.676352][T21954]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1071.676398][T21954]  ? __fget_files+0x215/0x3d0
[ 1071.676421][T21954]  ? hook_file_ioctl_common+0x140/0x440
[ 1071.676457][T21954]  ? selinux_file_ioctl+0x13b/0x290
[ 1071.676491][T21954]  ? selinux_file_ioctl+0xb6/0x290
[ 1071.676528][T21954]  ? __pfx_tty_ioctl+0x10/0x10
[ 1071.676558][T21954]  __x64_sys_ioctl+0x18e/0x210
[ 1071.676594][T21954]  do_syscall_64+0x115/0x870
[ 1071.676621][T21954]  ? clear_bhb_loop+0x40/0x90
[ 1071.676651][T21954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.676675][T21954] RIP: 0033:0x7f493979e019
[ 1071.676696][T21954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1071.676719][T21954] RSP: 002b:00007f49379f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1071.676744][T21954] RAX: ffffffffffffffda RBX: 00007f4939a26090 RCX: 00007f493979e019
[ 1071.676761][T21954] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004
[ 1071.676776][T21954] RBP: 00007f493983500c R08: 0000000000000000 R09: 0000000000000000
[ 1071.676791][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1071.676806][T21954] R13: 00007f4939a26128 R14: 00007f4939a26090 R15: 00007fff73968428
[ 1071.676839][T21954]  </TASK>
[ 1071.738618][   T29] audit: type=1400 audit(1785789991.744:4950): avc:  denied  { kexec_image_load } for  pid=21948 comm="syz.8.5136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 1071.902410][T21954] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1072.015115][  T992] usb 4-1: device descriptor read/64, error -71
[ 1072.056639][   T29] audit: type=1400 audit(1785789992.384:4951): avc:  denied  { write } for  pid=21919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1072.290927][   T29] audit: type=1400 audit(1785789992.634:4952): avc:  denied  { read write } for  pid=21959 comm="syz.8.5137" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1072.327568][   T29] audit: type=1400 audit(1785789992.634:4953): avc:  denied  { open } for  pid=21959 comm="syz.8.5137" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1072.451663][   T29] audit: type=1400 audit(1785789992.804:4954): avc:  denied  { write } for  pid=21961 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1072.692294][  T992] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[ 1072.692525][T16697] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1072.812595][T21972] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1072.958773][  T992] usb 4-1: device descriptor read/64, error -71
[ 1073.022362][   T46] IPVS: starting estimator thread 0...
[ 1073.221794][  T992] usb usb4-port1: attempt power cycle
[ 1073.335021][T16697] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1073.352377][T21973] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1073.374987][T16697] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1073.409994][T16697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.482043][T16697] usb 5-1: config 0 descriptor??
[ 1073.551006][T16697] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1073.729785][  T992] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[ 1073.752802][  T992] usb 4-1: device descriptor read/8, error -71
[ 1073.771456][ T5741] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1073.812113][   T29] audit: type=1400 audit(1785789994.164:4955): avc:  denied  { write } for  pid=21966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1074.044037][  T992] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[ 1074.377769][ T5741] usb 8-1: Using ep0 maxpacket: 16
[ 1074.394472][ T5741] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1074.401902][  T992] usb 4-1: device descriptor read/8, error -71
[ 1074.422247][   T29] audit: type=1400 audit(1785789994.744:4956): avc:  denied  { write } for  pid=21995 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1074.514901][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1074.527023][ T5741] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1074.536839][ T5741] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1074.546553][ T5741] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1074.560877][ T5741] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1074.581734][ T5741] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1074.621732][ T5741] usb 8-1: Manufacturer: syz
[ 1074.647983][ T5741] usb 8-1: config 0 descriptor??
[ 1074.706728][  T992] usb usb4-port1: unable to enumerate USB device
[ 1074.809898][T22005] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1074.941483][ T5712] usb 5-1: USB disconnect, device number 26
[ 1075.103407][  T992] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1075.365212][  T992] usb 4-1: Using ep0 maxpacket: 8
[ 1075.376709][  T992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1075.385543][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1075.400859][  T992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1075.418016][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1075.433611][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1075.454630][  T992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1075.462108][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1075.478630][  T992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1075.633881][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1075.665965][   T29] audit: type=1400 audit(1785789996.014:4957): avc:  denied  { write } for  pid=22007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1075.717965][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1075.768609][  T992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1075.830976][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1075.970905][  T992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1076.072565][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1076.279315][  T992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1076.294045][  T992] usb 4-1: string descriptor 0 read error: -22
[ 1076.300449][  T992] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1076.312855][  T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.387127][T22034] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1076.447390][  T992] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1076.511790][T22028] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1076.549169][   T29] audit: type=1400 audit(1785789996.904:4958): avc:  denied  { write } for  pid=22035 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1076.617681][T15756] Bluetooth: hci5: unexpected event for opcode 0x0c1c
[ 1076.852276][ T5732] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1077.340531][ T5741] rc_core: IR keymap rc-hauppauge not found
[ 1077.371056][ T5741] Registered IR keymap rc-empty
[ 1077.380344][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1077.412544][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1077.447444][ T5741] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1077.522387][ T5732] usb 5-1: Using ep0 maxpacket: 8
[ 1077.549295][ T5741] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input117
[ 1077.570200][ T5732] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1077.810325][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.831541][T22059] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1078.207408][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1078.790537][ T5732] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1078.812246][ T5732] pvrusb2: **********
[ 1078.817642][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1078.826366][ T5732] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1078.842305][ T5732] pvrusb2: Important functionality might not be entirely working.
[ 1078.850153][ T5732] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1078.866207][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1078.917324][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1078.972402][ T5732] pvrusb2: **********
[ 1078.978003][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.138220][ T2364] pvrusb2: Invalid write control endpoint
[ 1079.149412][   T10] usb 4-1: USB disconnect, device number 17
[ 1079.172723][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.265867][   T29] audit: type=1400 audit(1785789999.584:4959): avc:  denied  { write } for  pid=22048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1079.642324][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.658989][   T29] audit: type=1400 audit(1785790000.014:4960): avc:  denied  { write } for  pid=22079 comm="syz.7.5157" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1079.688752][T22080] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1079.700213][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.730366][T22080] udc dummy_udc.0: failed to start g1: -19
[ 1079.764141][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.777024][T22080] UDC core: g1: couldn't find an available UDC or it's busy
[ 1079.803591][ T5741] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1079.834350][ T5741] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[ 1079.864391][ T5741] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1079.907983][   T29] audit: type=1400 audit(1785790000.264:4961): avc:  denied  { create } for  pid=22083 comm="syz.8.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1079.948059][ T2364] pvrusb2: Invalid write control endpoint
[ 1079.962569][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1079.965233][ T5741] usb 8-1: USB disconnect, device number 20
[ 1079.981122][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1080.034214][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1080.038437][   T29] audit: type=1400 audit(1785790000.264:4962): avc:  denied  { write } for  pid=22083 comm="syz.8.5158" name="cgroup.subtree_control" dev="cgroup2" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1080.092683][T22086] f2fs: Unknown parameter 'usrquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/dev/nullb0'
[ 1080.126589][T22092] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20001
[ 1080.175440][ T2364] pvrusb2: Device being rendered inoperable
[ 1080.178488][   T29] audit: type=1400 audit(1785790000.264:4963): avc:  denied  { open } for  pid=22083 comm="syz.8.5158" path="<too_long>" dev="cgroup2" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1080.342921][   T29] audit: type=1400 audit(1785790000.434:4964): avc:  denied  { ioctl } for  pid=22083 comm="syz.8.5158" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1080.357505][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1081.354058][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1081.389309][   T29] audit: type=1400 audit(1785790000.484:4965): avc:  denied  { write } for  pid=22087 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1081.532454][T22099] input: syz1 as /devices/virtual/input/input118
[ 1081.539188][T22099] input: failed to attach handler leds to device input118, error: -6
[ 1081.751195][   T10] usb 5-1: USB disconnect, device number 27
[ 1081.816852][ T2364] pvrusb2: Attached sub-driver cx25840
[ 1081.848681][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1081.923651][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1082.732311][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1084.107889][   T29] audit: type=1400 audit(1785790004.464:4966): avc:  denied  { write } for  pid=22111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1084.515954][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 1084.556458][   T29] audit: type=1400 audit(1785790004.894:4967): avc:  denied  { write } for  pid=22137 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1084.620019][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1084.666550][   T10] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1084.689629][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.753671][   T10] usb 5-1: config 0 descriptor??
[ 1084.952326][ T5741] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[ 1085.102425][  T992] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1085.302379][  T992] usb 9-1: Using ep0 maxpacket: 8
[ 1085.332546][  T992] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1085.389035][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1085.441918][  T992] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1085.499529][   T10] hid_parser_main: 222 callbacks suppressed
[ 1085.499552][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.519993][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1085.542321][ T5741] usb 8-1: device descriptor read/64, error -71
[ 1085.549031][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.564753][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.572740][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.580529][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1085.581714][  T992] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1085.607192][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.608033][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1085.623008][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.628763][  T992] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1085.662270][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.680129][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.697418][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.711137][   T10] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0
[ 1085.736334][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1085.748295][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1085.767429][  T992] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1085.775250][   T29] audit: type=1400 audit(1785790006.134:4968): avc:  denied  { write } for  pid=22141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1085.776470][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1085.809389][ T5741] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[ 1085.847184][   T10] hid-u2fzero 0003:20A0:4287.0026: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0
[ 1085.869191][   T29] audit: type=1400 audit(1785790006.224:4969): avc:  denied  { create } for  pid=22162 comm="syz.9.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1085.869459][  T992] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1085.915477][   T10] usb 5-1: USB disconnect, device number 28
[ 1085.916356][T22163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22163 comm=syz.9.5174
[ 1085.982949][ T5741] usb 8-1: device descriptor read/64, error -71
[ 1085.987393][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1086.015920][  T992] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1086.030967][T22164] fido_id[22164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1086.047904][  T992] usb 9-1: string descriptor 0 read error: -22
[ 1086.058768][   T29] audit: type=1400 audit(1785790006.414:4970): avc:  denied  { write } for  pid=22168 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1086.072137][  T992] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1086.102770][  T992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.119502][ T5741] usb usb8-port1: attempt power cycle
[ 1086.197679][  T992] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1086.472299][ T5741] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[ 1086.502967][ T5741] usb 8-1: device descriptor read/8, error -71
[ 1086.603367][   T29] audit: type=1400 audit(1785790006.954:4971): avc:  denied  { read write } for  pid=22179 comm="syz.9.5179" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1086.646047][ T5712] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[ 1086.646085][   T29] audit: type=1400 audit(1785790006.954:4972): avc:  denied  { open } for  pid=22179 comm="syz.9.5179" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1087.205140][ T5741] usb 8-1: new full-speed USB device number 24 using dummy_hcd
[ 1087.235620][ T5741] usb 8-1: device descriptor read/8, error -71
[ 1087.342683][ T5741] usb usb8-port1: unable to enumerate USB device
[ 1087.754556][T22195] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1088.558821][ T5741] usb 9-1: USB disconnect, device number 18
[ 1089.033676][T22205] random: crng reseeded on system resumption
[ 1089.335200][T22209] binder: 22206:22209 ioctl c0306201 0 returned -14
[ 1090.534749][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1090.542974][ T5712] usb 5-1: no configurations
[ 1090.547729][ T5712] usb 5-1: can't read configurations, error -22
[ 1090.742466][ T5741] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[ 1090.782492][   T46] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1090.785590][   T29] audit: type=1400 audit(1785790011.134:4973): avc:  denied  { cmd } for  pid=22223 comm="syz.7.5190" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[ 1090.913095][ T5741] usb 10-1: device descriptor read/64, error -71
[ 1091.387424][   T29] audit: type=1400 audit(1785790011.624:4974): avc:  denied  { write } for  pid=22223 comm="syz.7.5190" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1091.387487][   T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 1091.550347][   T46] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1091.602557][ T5741] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[ 1091.638994][   T46] usb 9-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1091.654220][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.742326][ T5741] usb 10-1: device descriptor read/64, error -71
[ 1091.803531][   T46] usb 9-1: config 0 descriptor??
[ 1091.862310][ T5712] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1092.630434][ T5741] usb usb10-port1: attempt power cycle
[ 1093.092297][   T46] hid_parser_main: 222 callbacks suppressed
[ 1093.092322][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.106265][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.113916][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.121418][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.130396][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.139260][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.146746][ T5712] usb 5-1: device descriptor read/64, error -71
[ 1093.155224][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.162771][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.171259][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.179389][   T46] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0
[ 1093.200206][   T46] hid-u2fzero 0003:20A0:4287.0027: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.8-1/input0
[ 1093.213088][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1093.262306][ T5741] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[ 1093.274705][ T5712] usb usb5-port1: attempt power cycle
[ 1093.282920][ T5741] usb 10-1: device descriptor read/8, error -71
[ 1093.297327][  T187] usb 9-1: USB disconnect, device number 19
[ 1093.372257][ T5732] usb 4-1: Using ep0 maxpacket: 16
[ 1093.378788][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1093.389506][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1093.400740][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1093.410987][ T5732] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1093.420889][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1093.434075][   T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1093.443192][ T5732] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1093.452342][ T5732] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1093.461374][ T5732] usb 4-1: Manufacturer: syz
[ 1093.474988][ T5732] usb 4-1: config 0 descriptor??
[ 1093.532425][ T5741] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[ 1093.572536][   T10] usb 8-1: device descriptor read/64, error -71
[ 1093.612323][ T5712] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[ 1093.633314][ T5712] usb 5-1: device descriptor read/8, error -71
[ 1093.752442][ T5741] usb 10-1: device not accepting address 13, error -71
[ 1093.759529][ T5732] rc_core: IR keymap rc-hauppauge not found
[ 1093.769942][ T5732] Registered IR keymap rc-empty
[ 1093.775145][ T5741] usb usb10-port1: unable to enumerate USB device
[ 1093.781800][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.802279][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.822285][   T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1093.830767][ T5732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1093.861451][ T5732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input120
[ 1093.882542][ T5712] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[ 1093.893351][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.912510][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.922763][ T5712] usb 5-1: device descriptor read/8, error -71
[ 1093.932387][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.953477][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.972606][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1093.982287][   T10] usb 8-1: device descriptor read/64, error -71
[ 1093.992292][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1094.012331][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1094.033470][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1094.036936][ T5712] usb usb5-port1: unable to enumerate USB device
[ 1094.052359][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1094.072658][ T5732] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1094.082747][ T5741] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1094.094123][   T10] usb usb8-port1: attempt power cycle
[ 1094.099609][ T5732] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1094.109431][ T5732] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1094.132319][   T46] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1094.211181][T22233] input: syz1 as /devices/virtual/input/input119
[ 1094.217606][T22233] input: failed to attach handler leds to device input119, error: -6
[ 1094.244822][ T5741] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1094.258168][ T5741] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.274936][ T5741] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1094.285157][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.293605][ T5741] usb 10-1: Product: syz
[ 1094.297861][ T5741] usb 10-1: Manufacturer: syz
[ 1094.302877][ T5741] usb 10-1: SerialNumber: syz
[ 1094.313781][ T5741] cdc_mbim 10-1:1.0: skipping garbage
[ 1094.320445][   T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1094.331566][   T46] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.347239][   T46] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1094.356642][   T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.365606][   T46] usb 9-1: Product: syz
[ 1094.370381][   T46] usb 9-1: Manufacturer: syz
[ 1094.375550][   T46] usb 9-1: SerialNumber: syz
[ 1094.391118][   T46] cdc_mbim 9-1:1.0: skipping garbage
[ 1094.442261][   T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 1094.467933][   T10] usb 8-1: device descriptor read/8, error -71
[ 1094.900446][   T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1095.041370][   T46] cdc_mbim 9-1:1.0: failed GET_NTB_PARAMETERS
[ 1095.058328][   T46] cdc_mbim 9-1:1.0: bind() failure
[ 1095.138607][ T5741] cdc_mbim 10-1:1.0: failed GET_NTB_PARAMETERS
[ 1095.217181][   T46] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1095.274436][   T46] cdc_ncm 9-1:1.1: bind() failure
[ 1095.545723][   T46] usb 9-1: USB disconnect, device number 20
[ 1095.648088][ T5741] cdc_mbim 10-1:1.0: bind() failure
[ 1095.654698][ T5703] usb 4-1: USB disconnect, device number 18
[ 1095.676638][ T5741] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1095.685017][ T5741] cdc_ncm 10-1:1.1: bind() failure
[ 1095.690294][   T10] usb 8-1: device descriptor read/8, error -71
[ 1095.709191][ T5741] usb 10-1: USB disconnect, device number 14
[ 1095.885005][   T10] usb usb8-port1: unable to enumerate USB device
[ 1095.993271][T22260] binder: 22253:22260 ioctl c0306201 0 returned -14
[ 1096.491268][   T29] audit: type=1400 audit(1785790016.844:4975): avc:  denied  { read write } for  pid=22263 comm="syz.8.5202" name="sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1096.668630][T22262] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1097.515900][   T29] audit: type=1400 audit(1785790016.874:4976): avc:  denied  { open } for  pid=22263 comm="syz.8.5202" path="/dev/sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1097.540209][   T29] audit: type=1400 audit(1785790016.984:4977): avc:  denied  { ioctl } for  pid=22263 comm="syz.8.5202" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1097.653522][T22273] team0: Port device vlan3 added
[ 1097.875103][T22283] input: syz1 as /devices/virtual/input/input121
[ 1097.881656][T22283] input: failed to attach handler leds to device input121, error: -6
[ 1098.286165][ T5741] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[ 1098.496361][   T29] audit: type=1400 audit(1785790018.714:4978): avc:  denied  { accept } for  pid=22285 comm="syz.3.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1098.519713][   T29] audit: type=1400 audit(1785790018.714:4979): avc:  denied  { setopt } for  pid=22285 comm="syz.3.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1098.555070][ T5741] usb 10-1: device descriptor read/64, error -71
[ 1098.636737][T22293] FAULT_INJECTION: forcing a failure.
[ 1098.636737][T22293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1098.656230][T22293] CPU: 0 UID: 0 PID: 22293 Comm: syz.7.5213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1098.656263][T22293] Tainted: [L]=SOFTLOCKUP
[ 1098.656271][T22293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1098.656283][T22293] Call Trace:
[ 1098.656289][T22293]  <TASK>
[ 1098.656307][T22293]  dump_stack_lvl+0x100/0x190
[ 1098.656339][T22293]  should_fail_ex.cold+0x5/0xa
[ 1098.656365][T22293]  _copy_from_user+0x2e/0xd0
[ 1098.656410][T22293]  kvm_arch_vm_ioctl+0xfc4/0x18d0
[ 1098.656448][T22293]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 1098.656470][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656518][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656557][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656597][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656638][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656698][T22293]  ? find_held_lock+0x2b/0x80
[ 1098.656726][T22293]  ? is_bpf_text_address+0x8a/0x1a0
[ 1098.656787][T22293]  ? stack_depot_save_flags+0x27/0x9d0
[ 1098.656818][T22293]  ? __lock_acquire+0x49f/0x1a40
[ 1098.656843][T22293]  ? tomoyo_path_number_perm+0x46d/0x580
[ 1098.656877][T22293]  kvm_vm_ioctl+0x1560/0x4180
[ 1098.656907][T22293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.656941][T22293]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1098.657092][T22293]  ? kasan_quarantine_put+0x104/0x240
[ 1098.657121][T22293]  ? lockdep_hardirqs_on+0x78/0x100
[ 1098.657155][T22293]  ? find_held_lock+0x2b/0x80
[ 1098.657176][T22293]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1098.657205][T22293]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1098.657243][T22293]  ? tomoyo_path_number_perm+0x188/0x580
[ 1098.657271][T22293]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1098.657307][T22293]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1098.657331][T22293]  ? do_vfs_ioctl+0x226/0x13e0
[ 1098.657359][T22293]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1098.657388][T22293]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1098.657430][T22293]  ? __fget_files+0x215/0x3d0
[ 1098.657450][T22293]  ? hook_file_ioctl_common+0x140/0x440
[ 1098.657481][T22293]  ? selinux_file_ioctl+0x13b/0x290
[ 1098.657511][T22293]  ? selinux_file_ioctl+0xb6/0x290
[ 1098.657544][T22293]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1098.657576][T22293]  __x64_sys_ioctl+0x18e/0x210
[ 1098.657609][T22293]  do_syscall_64+0x115/0x870
[ 1098.657634][T22293]  ? clear_bhb_loop+0x40/0x90
[ 1098.657660][T22293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.657683][T22293] RIP: 0033:0x7f493979e019
[ 1098.657702][T22293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.657722][T22293] RSP: 002b:00007f493a584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1098.657743][T22293] RAX: ffffffffffffffda RBX: 00007f4939a25fa0 RCX: 00007f493979e019
[ 1098.657757][T22293] RDX: 0000200000000040 RSI: 000000004188aec6 RDI: 0000000000000004
[ 1098.657771][T22293] RBP: 00007f493a584090 R08: 0000000000000000 R09: 0000000000000000
[ 1098.657784][T22293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1098.657797][T22293] R13: 00007f4939a26038 R14: 00007f4939a25fa0 R15: 00007fff73968428
[ 1098.657827][T22293]  </TASK>
[ 1099.273136][ T5741] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[ 1099.492273][ T5741] usb 10-1: device descriptor read/64, error -71
[ 1099.528123][  T992] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1099.602672][ T5741] usb usb10-port1: attempt power cycle
[ 1099.704673][  T992] usb 5-1: Using ep0 maxpacket: 8
[ 1099.813115][  T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1099.820731][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1099.835254][  T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1099.847121][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1099.859512][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1099.872264][  T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1099.879758][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1099.891698][  T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1099.908266][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1099.924766][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1099.938546][  T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1099.947029][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1099.958684][  T992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1099.962432][ T5741] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[ 1099.972885][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1099.989186][  T992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1100.003058][ T5741] usb 10-1: device descriptor read/8, error -71
[ 1100.003880][  T992] usb 5-1: string descriptor 0 read error: -22
[ 1100.017957][  T992] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1100.027050][  T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.041622][  T992] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1100.162266][   T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1100.172285][ T5703] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[ 1100.246438][ T5741] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1100.282753][ T5741] usb 10-1: device descriptor read/8, error -71
[ 1100.316617][   T10] usb 9-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[ 1100.332080][ T5703] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1100.342310][   T10] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1100.442691][ T5703] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1100.451475][ T5741] usb usb10-port1: unable to enumerate USB device
[ 1100.460027][   T10] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1100.466864][ T5703] usb 4-1: Product: syz
[ 1100.471031][ T5703] usb 4-1: Manufacturer: syz
[ 1100.476403][ T5703] usb 4-1: SerialNumber: syz
[ 1100.482477][   T10] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1100.492039][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.500083][   T10] usb 9-1: Product: syz
[ 1100.505021][ T5703] usb 4-1: config 0 descriptor??
[ 1100.967682][   T10] usb 9-1: Manufacturer: syz
[ 1100.973562][   T10] usb 9-1: SerialNumber: syz
[ 1101.260056][T22318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.276726][   T10] uvcvideo 9-1:220.0: Found UVC 0.00 device syz (8086:0b07)
[ 1101.278911][T22321] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1101.305373][T22318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.314110][   T10] uvcvideo 9-1:220.0: No valid video chain found.
[ 1101.353138][   T10] usb 9-1: USB disconnect, device number 21
[ 1101.446206][   T29] audit: type=1400 audit(1785790021.804:4980): avc:  denied  { write } for  pid=22330 comm="syz.9.5226" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1101.449454][T22332] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1101.479706][T22332] udc dummy_udc.0: failed to start g1: -19
[ 1101.488324][T22332] UDC core: g1: couldn't find an available UDC or it's busy
[ 1101.559336][ T5703] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 1101.581561][ T5703] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71)
[ 1101.883096][ T5703] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[ 1101.894839][ T5703] usb 4-1: USB disconnect, device number 19
[ 1101.969721][T22341] random: crng reseeded on system resumption
[ 1102.430118][   T10] usb 5-1: USB disconnect, device number 33
[ 1102.547110][   T29] audit: type=1400 audit(1785790022.904:4981): avc:  denied  { write } for  pid=22342 comm="syz.8.5230" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1102.551226][T22343] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1102.669426][T22343] udc dummy_udc.0: failed to start g1: -19
[ 1102.681538][T22343] UDC core: g1: couldn't find an available UDC or it's busy
[ 1102.733430][   T29] audit: type=1400 audit(1785790023.094:4982): avc:  denied  { append } for  pid=22347 comm="syz.4.5232" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1103.110025][T22358] input: syz1 as /devices/virtual/input/input122
[ 1103.116462][T22358] input: failed to attach handler leds to device input122, error: -6
[ 1104.292287][   T46] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1104.638665][ T5732] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1104.896328][ T5732] usb 5-1: Using ep0 maxpacket: 16
[ 1104.979175][ T5732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.090349][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1105.149048][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1105.195834][ T5732] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1105.285791][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1105.359865][T22376] random: crng reseeded on system resumption
[ 1105.658874][ T5732] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1105.751943][   T46] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1105.767685][   T46] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1105.793427][ T5732] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1105.802342][   T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.827966][   T46] usb 10-1: config 0 descriptor??
[ 1105.829913][ T5732] usb 5-1: Manufacturer: syz
[ 1105.869615][ T5732] usb 5-1: config 0 descriptor??
[ 1105.881240][   T46] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1105.901230][T18299] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1105.918991][T22379] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5241'.
[ 1105.999392][T18299] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1106.008655][T18299] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1106.020936][T18299] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1106.028708][T18299] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1106.363027][ T5732] rc_core: IR keymap rc-hauppauge not found
[ 1106.370203][ T5732] Registered IR keymap rc-empty
[ 1106.382349][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.412661][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.450117][ T5732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1106.462430][   T46] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1106.479036][ T5732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input123
[ 1106.499736][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.523212][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.562348][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.587672][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.634188][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.645817][   T46] usb 8-1: Using ep0 maxpacket: 8
[ 1106.652660][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1106.653025][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.660371][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1106.673163][T20486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.686672][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1106.701743][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1106.703335][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.712959][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1106.744578][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1106.752804][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.763412][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1106.783933][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1106.798409][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1106.803766][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.810511][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1106.831851][   T46] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1106.845736][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1106.858014][ T5732] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.860243][   T46] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1106.884099][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1106.884688][T20486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.895686][   T46] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1106.909532][ T5732] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1106.923534][   T46] usb 8-1: string descriptor 0 read error: -22
[ 1106.934262][   T46] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1106.940284][ T5732] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1106.943668][   T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.974781][   T46] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1106.998740][ T5732] usb 5-1: USB disconnect, device number 34
[ 1107.200497][ T5703] usb 10-1: USB disconnect, device number 19
[ 1107.205249][T20486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.426971][T20486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.958218][   T29] audit: type=1400 audit(1785790028.314:4983): avc:  denied  { mount } for  pid=22406 comm="syz.4.5246" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1108.019378][   T29] audit: type=1400 audit(1785790028.374:4984): avc:  denied  { unmount } for  pid=21517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1108.114845][T18299] Bluetooth: hci9: command tx timeout
[ 1108.648331][T22417] random: crng reseeded on system resumption
[ 1108.900640][T20486] bridge_slave_1: left allmulticast mode
[ 1108.908870][T20486] bridge_slave_1: left promiscuous mode
[ 1108.915762][T20486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.928291][T20486] bridge_slave_0: left allmulticast mode
[ 1108.934940][T20486] bridge_slave_0: left promiscuous mode
[ 1108.940815][T20486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1109.277210][   T29] audit: type=1400 audit(1785790029.634:4985): avc:  denied  { write } for  pid=22423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1109.420234][T21174] usb 8-1: USB disconnect, device number 29
[ 1109.560332][   T29] audit: type=1400 audit(1785790029.904:4986): avc:  denied  { write } for  pid=22442 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1110.192500][T18299] Bluetooth: hci9: command tx timeout
[ 1111.009890][T22460] random: crng reseeded on system resumption
[ 1111.889426][T20486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1111.953395][T22464] binder: 22461:22464 ioctl c0306201 0 returned -14
[ 1112.303668][T18299] Bluetooth: hci9: command tx timeout
[ 1112.335735][T20486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1112.346567][T20486] bond0 (unregistering): Released all slaves
[ 1112.366250][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1112.580035][T22378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.606772][T22378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.665872][T22378] bridge_slave_0: entered allmulticast mode
[ 1112.931276][ T5712] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 1112.979316][T22478] binder: 22471:22478 ioctl c0306201 0 returned -14
[ 1113.378431][T22378] bridge_slave_0: entered promiscuous mode
[ 1113.573085][T22378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.582372][ T5712] usb 5-1: device descriptor read/64, error -71
[ 1113.608808][T22378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.667247][T22378] bridge_slave_1: entered allmulticast mode
[ 1113.725705][T22378] bridge_slave_1: entered promiscuous mode
[ 1113.757807][   T29] audit: type=1400 audit(1785790034.114:4987): avc:  denied  { read } for  pid=22484 comm="syz.7.5263" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1113.823711][ T5712] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[ 1113.832248][   T29] audit: type=1400 audit(1785790034.114:4988): avc:  denied  { open } for  pid=22484 comm="syz.7.5263" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1113.881209][   T29] audit: type=1400 audit(1785790034.174:4989): avc:  denied  { getopt } for  pid=22484 comm="syz.7.5263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1114.068722][T22378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1114.085931][ T5712] usb 5-1: device descriptor read/64, error -71
[ 1114.154826][T22496] random: crng reseeded on system resumption
[ 1114.442281][T18299] Bluetooth: hci9: command tx timeout
[ 1114.598011][T22378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1114.604424][   T29] audit: type=1400 audit(1785790034.954:4990): avc:  denied  { mount } for  pid=22498 comm="syz.7.5266" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1114.674851][ T5712] usb usb5-port1: attempt power cycle
[ 1114.857325][T22378] team0: Port device team_slave_0 added
[ 1114.888440][T22378] team0: Port device team_slave_1 added
[ 1114.902514][ T5741] usb 8-1: new full-speed USB device number 30 using dummy_hcd
[ 1115.082927][ T5712] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[ 1115.096989][ T5741] usb 8-1: not running at top speed; connect to a high speed hub
[ 1115.109081][ T5741] usb 8-1: config 0 has no interfaces?
[ 1115.123731][ T5712] usb 5-1: device descriptor read/8, error -71
[ 1115.130928][ T5741] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[ 1115.163344][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1115.185811][ T5741] usb 8-1: Product: syz
[ 1115.206556][   T29] audit: type=1400 audit(1785790035.564:4991): avc:  denied  { create } for  pid=22506 comm="syz.9.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1115.226201][ T5741] usb 8-1: Manufacturer: syz
[ 1115.260687][ T5741] usb 8-1: config 0 descriptor??
[ 1115.403922][T22507] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1115.420168][ T5712] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[ 1115.489646][ T5712] usb 5-1: device descriptor read/8, error -71
[ 1115.545676][   T29] audit: type=1400 audit(1785790035.904:4992): avc:  denied  { write } for  pid=22497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1115.570360][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.633896][ T5712] usb usb5-port1: unable to enumerate USB device
[ 1115.712062][T20486] hsr_slave_0: left promiscuous mode
[ 1115.724075][T20486] hsr_slave_1: left promiscuous mode
[ 1115.740249][T22521] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1115.768861][T20486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1115.834567][T20486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1115.841925][   T29] audit: type=1400 audit(1785790036.184:4993): avc:  denied  { write } for  pid=22520 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1115.878010][T20486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1115.895761][T20486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1115.906291][T22523] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5270'.
[ 1115.941797][ T5741] usb 8-1: USB disconnect, device number 30
[ 1115.980413][T20486] veth1_macvtap: left promiscuous mode
[ 1116.012278][T20486] veth0_macvtap: left promiscuous mode
[ 1116.024984][T20486] veth1_vlan: left promiscuous mode
[ 1116.176693][T20486] team0 (unregistering): Port device vlan3 removed
[ 1116.448450][T20486] team0 (unregistering): Port device team_slave_1 removed
[ 1116.465236][T20486] team0 (unregistering): Port device team_slave_0 removed
[ 1116.563935][T22535] random: crng reseeded on system resumption
[ 1116.939525][   T29] audit: type=1400 audit(1785790037.294:4994): avc:  denied  { unmount } for  pid=21078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1117.410574][T22545] random: crng reseeded on system resumption
[ 1117.782697][   T46] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1117.808119][T22378] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1117.815189][T22378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1117.842299][T22378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1117.857252][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1117.864919][T22378] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1117.881253][T22378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1117.927830][T22378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1118.013900][T22378] hsr_slave_0: entered promiscuous mode
[ 1118.020455][T22378] hsr_slave_1: entered promiscuous mode
[ 1118.027604][T22378] debugfs: 'hsr0' already exists in 'hsr'
[ 1118.034589][T22378] Cannot create hsr debugfs directory
[ 1118.060707][   T46] usb 10-1: Using ep0 maxpacket: 16
[ 1118.081123][   T46] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.108186][   T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1118.123635][   T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1118.134613][   T46] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1118.169572][   T46] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1118.226175][   T46] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1118.238438][   T46] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1118.281862][   T46] usb 10-1: Manufacturer: syz
[ 1118.289730][   T46] usb 10-1: config 0 descriptor??
[ 1118.344880][ T5703] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[ 1118.352912][ T5732] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1118.412463][ T5741] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[ 1118.502702][ T5703] usb 8-1: device descriptor read/64, error -71
[ 1118.534574][ T5732] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.559376][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1118.570478][ T5741] usb 9-1: device descriptor read/64, error -71
[ 1118.591337][ T5732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1118.601029][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.609291][ T5732] usb 5-1: Product: syz
[ 1118.612648][   T46] rc_core: IR keymap rc-hauppauge not found
[ 1118.614804][ T5732] usb 5-1: Manufacturer: syz
[ 1118.619463][   T46] Registered IR keymap rc-empty
[ 1118.624292][ T5732] usb 5-1: SerialNumber: syz
[ 1118.655014][ T5732] cdc_mbim 5-1:1.0: skipping garbage
[ 1118.660494][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.687850][   T29] audit: type=1400 audit(1785790039.044:4995): avc:  denied  { write } for  pid=22553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1118.704774][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.743582][ T5703] usb 8-1: new full-speed USB device number 32 using dummy_hcd
[ 1118.762596][   T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1118.780969][   T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input124
[ 1118.797425][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.809483][   T29] audit: type=1400 audit(1785790039.164:4996): avc:  denied  { write } for  pid=22565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1118.832077][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.864067][ T5741] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[ 1118.897975][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.903568][ T5703] usb 8-1: device descriptor read/64, error -71
[ 1118.922392][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.943143][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1118.966389][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1119.002319][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1119.013007][ T5741] usb 9-1: device descriptor read/64, error -71
[ 1119.019537][ T5703] usb usb8-port1: attempt power cycle
[ 1119.054976][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1119.092471][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1119.122951][   T46] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1119.145633][ T5741] usb usb9-port1: attempt power cycle
[ 1119.167002][   T46] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1119.182323][   T46] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1119.217415][   T46] usb 10-1: USB disconnect, device number 20
[ 1119.224271][T22378] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1119.267570][T22378] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1119.289320][T22378] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1119.320766][T22378] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1119.336344][T22378] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1119.353050][ T5732] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[ 1119.363197][ T5703] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[ 1119.375074][ T5732] cdc_mbim 5-1:1.0: bind() failure
[ 1119.377995][T22378] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1119.386435][ T5732] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1119.396396][ T5732] cdc_ncm 5-1:1.1: bind() failure
[ 1119.396418][   T29] audit: type=1400 audit(1785790039.754:4997): avc:  denied  { write } for  pid=22570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1119.401545][ T5703] usb 8-1: device descriptor read/8, error -71
[ 1119.427291][T22378] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1119.449076][ T5732] usb 5-1: USB disconnect, device number 39
[ 1119.453512][T22378] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1119.512263][ T5741] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1119.532861][ T5741] usb 9-1: device descriptor read/8, error -71
[ 1119.570423][   T29] audit: type=1400 audit(1785790039.924:4998): avc:  denied  { write } for  pid=22587 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1119.584864][T22378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1119.627233][T22378] 8021q: adding VLAN 0 to HW filter on device team0
[ 1119.648699][T20486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1119.655924][T20486] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1119.688113][T20486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1119.695264][T20486] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1119.742279][ T5703] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[ 1119.789556][ T5703] usb 8-1: device descriptor read/8, error -71
[ 1119.802273][ T5741] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 1119.854875][ T5741] usb 9-1: device descriptor read/8, error -71
[ 1119.923860][ T5703] usb usb8-port1: unable to enumerate USB device
[ 1119.993226][ T5741] usb usb9-port1: unable to enumerate USB device
[ 1120.092718][   T29] audit: type=1400 audit(1785790040.444:4999): avc:  denied  { create } for  pid=22599 comm="syz.4.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1120.615518][   T29] audit: type=1400 audit(1785790040.964:5000): avc:  denied  { write } for  pid=22589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1122.412025][   T29] audit: type=1400 audit(1785790042.764:5001): avc:  denied  { write } for  pid=22614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1122.754487][T15756] Bluetooth: hci3: command 0x0406 tx timeout
[ 1123.114873][T22378] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1123.294791][T22631] binder: 22625:22631 ioctl c0306201 0 returned -14
[ 1125.620089][T22378] veth0_vlan: entered promiscuous mode
[ 1125.645301][T22378] veth1_vlan: entered promiscuous mode
[ 1125.733095][T22378] veth0_macvtap: entered promiscuous mode
[ 1125.762221][T22378] veth1_macvtap: entered promiscuous mode
[ 1125.801765][T22378] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1125.845924][T22378] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1126.178525][T22645] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5288'.
[ 1126.715267][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.802427][ T3338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.927911][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.974816][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1127.076414][  T992] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[ 1127.196568][T22674] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1127.201854][T20486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.225782][  T992] usb 9-1: device descriptor read/64, error -71
[ 1127.237697][T20486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.244983][T22674] udc dummy_udc.0: failed to start g1: -19
[ 1127.245621][T22674] UDC core: g1: couldn't find an available UDC or it's busy
[ 1127.282667][   T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[ 1127.351190][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.384744][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.463837][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1127.481391][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.501201][   T29] audit: type=1400 audit(1785790047.854:5002): avc:  denied  { write } for  pid=22640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1127.535288][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1127.568837][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1127.643853][T22688] binder: 22680:22688 ioctl c0306201 0 returned -14
[ 1127.826785][  T992] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[ 1127.925432][T18299] Bluetooth: hci4: command 0x0406 tx timeout
[ 1128.001156][   T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1128.011103][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1128.027981][   T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1128.043494][   T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1128.060050][  T187] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1128.068111][   T29] audit: type=1400 audit(1785790048.414:5003): avc:  denied  { write } for  pid=22687 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1128.110979][   T10] usb 8-1: Manufacturer: syz
[ 1128.129338][   T10] usb 8-1: config 0 descriptor??
[ 1128.149911][   T29] audit: type=1400 audit(1785790048.504:5004): avc:  denied  { write } for  pid=22691 comm="syz.3.5238" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1128.151050][T22693] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1128.173239][  T992] usb 9-1: device descriptor read/64, error -71
[ 1128.224403][T22693] udc dummy_udc.0: failed to start g1: -19
[ 1128.233636][T22693] UDC core: g1: couldn't find an available UDC or it's busy
[ 1128.292426][  T187] usb 5-1: Using ep0 maxpacket: 8
[ 1128.318090][  T187] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1128.368903][  T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.402747][  T992] usb usb9-port1: attempt power cycle
[ 1128.593148][   T10] rc_core: IR keymap rc-hauppauge not found
[ 1128.599396][   T10] Registered IR keymap rc-empty
[ 1128.627389][  T187] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1128.639916][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1128.647963][  T187] pvrusb2: **********
[ 1128.652056][  T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1128.662394][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1128.669954][  T187] pvrusb2: Important functionality might not be entirely working.
[ 1128.679839][  T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1128.703182][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1128.728435][  T187] pvrusb2: **********
[ 1128.762647][  T992] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 1128.772030][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input125
[ 1128.792989][  T992] usb 9-1: device descriptor read/8, error -71
[ 1128.924479][   T29] audit: type=1400 audit(1785790049.284:5005): avc:  denied  { write } for  pid=22692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1128.959989][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.007785][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.033309][T22718] input: syz1 as /devices/virtual/input/input126
[ 1129.039789][T22718] input: failed to attach handler leds to device input126, error: -6
[ 1129.082618][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.153528][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.205840][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.263032][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.298540][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.313971][   T29] audit: type=1400 audit(1785790049.664:5006): avc:  denied  { write } for  pid=22719 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1129.376153][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.392530][  T992] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[ 1129.412715][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.423325][  T992] usb 9-1: device descriptor read/8, error -71
[ 1129.442363][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1129.498375][   T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1129.539158][   T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1129.575798][  T992] usb usb9-port1: unable to enumerate USB device
[ 1129.599089][   T10] usb 8-1: USB disconnect, device number 35
[ 1129.916054][T22731] binder: 22726:22731 ioctl c0306201 0 returned -14
[ 1131.368440][   T29] audit: type=1400 audit(1785790051.724:5007): avc:  denied  { write } for  pid=22736 comm="syz.3.5310" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1132.028703][ T2364] pvrusb2: Invalid write control endpoint
[ 1132.532805][T22740] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1132.568991][  T187] usb 5-1: USB disconnect, device number 40
[ 1132.589714][T22740] udc dummy_udc.0: failed to start g1: -19
[ 1132.629598][T22740] UDC core: g1: couldn't find an available UDC or it's busy
[ 1132.954968][T22753] binder: 22750:22753 ioctl c0306201 0 returned -14
[ 1133.418343][ T2364] pvrusb2: Invalid write control endpoint
[ 1133.437396][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1133.462415][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1133.471918][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1133.522580][ T2364] pvrusb2: Device being rendered inoperable
[ 1133.531881][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1133.539325][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1133.548063][ T2364] pvrusb2: Attached sub-driver cx25840
[ 1133.558905][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1133.569403][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1133.662476][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1133.869695][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1133.941094][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1134.009557][  T187] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1134.061055][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1134.204255][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.099496][   T10] usb 4-1: Product: syz
[ 1135.105440][   T10] usb 4-1: Manufacturer: syz
[ 1135.110173][   T10] usb 4-1: SerialNumber: syz
[ 1135.123487][   T10] cdc_mbim 4-1:1.0: skipping garbage
[ 1135.562407][  T187] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[ 1135.892781][  T187] usb 5-1: device descriptor read/64, error -71
[ 1136.334083][   T29] audit: type=1400 audit(1785790056.674:5008): avc:  denied  { write } for  pid=22776 comm="syz.8.5319" name="cluster" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1136.362263][  T187] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[ 1136.487178][T22786] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1136.494192][   T29] audit: type=1400 audit(1785790056.674:5009): avc:  denied  { create } for  pid=22776 comm="syz.8.5319" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[ 1136.494241][   T29] audit: type=1400 audit(1785790056.684:5010): avc:  denied  { write } for  pid=22776 comm="syz.8.5319" name="heartbeat" dev="configfs" ino=82325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1136.494307][   T29] audit: type=1400 audit(1785790056.694:5011): avc:  denied  { read } for  pid=22776 comm="syz.8.5319" name="start_block" dev="configfs" ino=82332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 1136.494353][   T29] audit: type=1800 audit(1785790056.694:5012): pid=22778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5319" name="start_block" dev="configfs" ino=82332 res=0 errno=0
[ 1136.494464][   T29] audit: type=1400 audit(1785790056.764:5013): avc:  denied  { cmd } for  pid=22776 comm="iou-wrk-22778" path="socket:[82334]" dev="sockfs" ino=82334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1136.494521][   T29] audit: type=1400 audit(1785790056.824:5014): avc:  denied  { write } for  pid=22784 comm="syz.7.5323" name="c.1" dev="configfs" ino=17299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1136.538426][  T187] usb 5-1: device descriptor read/64, error -71
[ 1136.611743][   T10] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[ 1136.639687][T22786] udc dummy_udc.0: failed to start g1: -19
[ 1136.653318][T22786] UDC core: g1: couldn't find an available UDC or it's busy
[ 1136.653719][  T187] usb usb5-port1: attempt power cycle
[ 1136.671087][   T10] cdc_mbim 4-1:1.0: bind() failure
[ 1137.002252][  T187] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[ 1137.704739][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1137.711681][   T10] cdc_ncm 4-1:1.1: bind() failure
[ 1137.717513][  T187] usb 5-1: device descriptor read/8, error -71
[ 1137.730592][   T10] usb 4-1: USB disconnect, device number 20
[ 1138.119245][T18299] Bluetooth: hci6: command 0x0406 tx timeout
[ 1138.183173][   T29] audit: type=1400 audit(1785790058.434:5015): avc:  denied  { mounton } for  pid=22792 comm="syz.7.5324" path="/68/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1138.365344][  T187] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[ 1138.392981][  T187] usb 5-1: device descriptor read/8, error -71
[ 1138.513252][  T187] usb usb5-port1: unable to enumerate USB device
[ 1138.846410][T22808] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 1138.876394][T22808] udc dummy_udc.0: failed to start g1: -19
[ 1138.909123][T22808] UDC core: g1: couldn't find an available UDC or it's busy
[ 1138.996097][T22817] binder: 22805:22817 ioctl c0306201 0 returned -14
[ 1139.774655][T22821] random: crng reseeded on system resumption
[ 1140.597047][T22832] random: crng reseeded on system resumption
[ 1142.067339][T22844] binder: 22839:22844 ioctl c0306201 0 returned -14
[ 1142.179561][T22849] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1142.992970][   T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[ 1143.320444][   T10] usb 9-1: device descriptor read/64, error -71
[ 1143.323415][T15756] Bluetooth: hci7: command 0x0406 tx timeout
[ 1143.446550][T22866] binder: 22857:22866 ioctl c0306201 0 returned -14
[ 1143.692472][   T10] usb 9-1: new full-speed USB device number 31 using dummy_hcd
[ 1144.242658][   T10] usb 9-1: device descriptor read/64, error -71
[ 1144.312314][ T5703] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1144.363736][   T10] usb usb9-port1: attempt power cycle
[ 1144.477331][ T5703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 1144.499569][ T5703] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1144.541106][ T5703] usb 10-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1144.551535][ T5703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.565681][ T5703] usb 10-1: config 0 descriptor??
[ 1144.662406][T16697] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1144.731588][   T10] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1144.755229][   T10] usb 9-1: device descriptor read/8, error -71
[ 1144.843208][T22881] binder: 22875:22881 ioctl c0306201 0 returned -14
[ 1145.237133][ T5703] usbhid 10-1:0.0: can't add hid device: -71
[ 1145.243587][ T5703] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1145.252236][T16697] usb 8-1: Using ep0 maxpacket: 16
[ 1145.259513][T16697] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1145.269670][T16697] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1145.284793][ T5703] usb 10-1: USB disconnect, device number 21
[ 1145.290820][T16697] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1145.306407][T16697] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1145.316557][T16697] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1145.331372][T16697] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1145.340463][T16697] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1145.349224][T16697] usb 8-1: Manufacturer: syz
[ 1145.355596][T16697] usb 8-1: config 0 descriptor??
[ 1145.372383][   T10] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 1145.455173][   T10] usb 9-1: device descriptor read/8, error -71
[ 1145.564942][   T10] usb usb9-port1: unable to enumerate USB device
[ 1145.763806][T16697] rc_core: IR keymap rc-hauppauge not found
[ 1145.804990][T16697] Registered IR keymap rc-empty
[ 1145.835629][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1145.914991][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.057750][T16697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1146.059733][  T992] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1146.251265][T16697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input128
[ 1146.587210][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.673994][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.725713][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.763279][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.792354][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1146.914486][  T992] usb 5-1: Using ep0 maxpacket: 8
[ 1146.921620][  T992] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1146.942803][  T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.966663][  T992] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1146.982236][  T992] pvrusb2: **********
[ 1146.996170][  T992] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1147.016446][  T992] pvrusb2: Important functionality might not be entirely working.
[ 1147.024684][  T992] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1147.046109][T22899] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1147.133295][  T992] pvrusb2: **********
[ 1147.389543][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1147.427078][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1147.462299][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1147.526072][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1147.583566][T16697] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1147.635474][T16697] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1147.649775][T16697] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1147.835551][T16697] usb 8-1: USB disconnect, device number 36
[ 1147.841771][ T2364] pvrusb2: Invalid write control endpoint
[ 1147.866096][  T992] usb 5-1: USB disconnect, device number 46
[ 1147.939666][T22912] binder: 22908:22912 ioctl c0306201 0 returned -14
[ 1148.403382][ T5997] udevd[5997]: setting owner of /dev/bus/usb/008/036 to uid=0, gid=0 failed: No such file or directory
[ 1149.047960][ T5712] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1149.183850][ T2364] pvrusb2: Invalid write control endpoint
[ 1149.242328][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1149.251771][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1149.260012][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1149.272475][ T2364] pvrusb2: Device being rendered inoperable
[ 1149.280348][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1149.287769][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[ 1149.296207][ T2364] pvrusb2: Attached sub-driver cx25840
[ 1149.308353][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1149.318625][ T5712] usb 9-1: device descriptor read/64, error -71
[ 1149.325029][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1149.500096][T22929] random: crng reseeded on system resumption
[ 1149.602413][ T5712] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1149.772442][ T5712] usb 9-1: device descriptor read/64, error -71
[ 1149.884593][ T5712] usb usb9-port1: attempt power cycle
[ 1149.952290][   T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[ 1149.959998][T16697] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 1150.138454][T16697] usb 4-1: device descriptor read/64, error -71
[ 1150.154190][   T10] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[ 1150.170375][   T10] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.181502][   T10] usb 8-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1150.193748][   T10] usb 8-1: config 220 has no interface number 1
[ 1150.201801][   T10] usb 8-1: config 220 interface 0 has no altsetting 0
[ 1150.208792][   T10] usb 8-1: config 220 interface 76 has no altsetting 0
[ 1150.218585][   T10] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1150.223183][ T5712] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1150.228513][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.243995][   T10] usb 8-1: Product: syz
[ 1150.248154][   T10] usb 8-1: Manufacturer: syz
[ 1150.253749][   T10] usb 8-1: SerialNumber: syz
[ 1150.257984][ T5712] usb 9-1: device descriptor read/8, error -71
[ 1150.392569][T16697] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[ 1150.462224][  T187] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1150.483227][   T10] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1150.490529][   T10] uvcvideo 8-1:220.0: No valid video chain found.
[ 1150.502321][ T5712] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1150.507160][   T10] usb 8-1: USB disconnect, device number 37
[ 1150.524586][ T5712] usb 9-1: device descriptor read/8, error -71
[ 1150.532511][T16697] usb 4-1: device descriptor read/64, error -71
[ 1150.632619][ T5712] usb usb9-port1: unable to enumerate USB device
[ 1150.642643][T16697] usb usb4-port1: attempt power cycle
[ 1150.649700][  T187] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[ 1150.659693][  T187] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.677004][  T187] usb 10-1: config 220 has no interface number 2
[ 1150.683435][  T187] usb 10-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30
[ 1150.702578][  T187] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1150.729638][  T187] usb 10-1: config 220 interface 0 has no altsetting 0
[ 1150.733262][   T29] audit: type=1400 audit(1785790071.084:5016): avc:  denied  { create } for  pid=22936 comm="syz.4.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1150.740492][  T187] usb 10-1: config 220 interface 76 has no altsetting 0
[ 1150.764571][   T29] audit: type=1400 audit(1785790071.114:5017): avc:  denied  { connect } for  pid=22936 comm="syz.4.5366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1150.792689][  T187] usb 10-1: config 220 interface 1 has no altsetting 0
[ 1150.808859][  T187] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1150.821300][  T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.846105][  T187] usb 10-1: Product: syz
[ 1150.850931][  T187] usb 10-1: Manufacturer: syz
[ 1150.855959][  T187] usb 10-1: SerialNumber: syz
[ 1150.992294][T16697] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 1151.024094][T16697] usb 4-1: device descriptor read/8, error -71
[ 1151.170196][  T187] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1151.189469][  T187] uvcvideo 10-1:220.0: No valid video chain found.
[ 1151.216142][  T187] usb 10-1: USB disconnect, device number 22
[ 1151.292473][T16697] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1151.311404][T22949] binder: 22944:22949 ioctl c0306201 0 returned -14
[ 1151.562818][   T30] INFO: task syz.1.4933:20875 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1151.713950][   T29] audit: type=1400 audit(1785790071.994:5018): avc:  denied  { write } for  pid=5595 comm="syz-executor" path="pipe:[5452]" dev="pipefs" ino=5452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1151.768535][   T30]       Tainted: G             L      syzkaller #0
[ 1151.778502][T16697] usb 4-1: device descriptor read/8, error -71
[ 1151.779382][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1151.802378][   T30] task:syz.1.4933      state:D stack:28776 pid:20875 tgid:20874 ppid:14010  task_flags:0x400140 flags:0x00080002
[ 1151.838603][   T30] Call Trace:
[ 1151.850469][   T30]  <TASK>
[ 1151.860597][   T30]  __schedule+0x125c/0x6730
[ 1151.902631][T16697] usb usb4-port1: unable to enumerate USB device
[ 1151.994243][   T30]  ? do_raw_spin_lock+0x128/0x260
[ 1152.009916][   T30]  ? __pfx___schedule+0x10/0x10
[ 1152.028102][   T30]  ? find_held_lock+0x2b/0x80
[ 1152.035755][   T30]  ? schedule+0x225/0x2c0
[ 1152.040139][   T30]  schedule+0xdd/0x2c0
[ 1152.045849][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1152.051327][   T30]  __mutex_lock+0xccc/0x1bd0
[ 1152.055991][   T30]  ? write_ports+0xa5/0xcc0
[ 1152.060507][   T30]  ? nfsctl_transaction_write+0xcd/0x1a0
[ 1152.067712][   T30]  ? ksys_write+0x12a/0x250
[ 1152.072284][   T30]  ? do_syscall_64+0x115/0x870
[ 1152.077058][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1152.082116][   T30]  ? write_ports+0xa5/0xcc0
[ 1152.087642][   T30]  ? __lock_acquire+0x49f/0x1a40
[ 1152.092671][   T30]  write_ports+0xa5/0xcc0
[ 1152.097010][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.101932][   T30]  ? find_held_lock+0x2b/0x80
[ 1152.107498][   T30]  ? __might_fault+0xc5/0x140
[ 1152.112813][   T30]  ? __might_fault+0xc5/0x140
[ 1152.117491][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.122464][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.127427][   T30]  ? _copy_from_user+0x59/0xd0
[ 1152.132224][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.138711][   T30]  nfsctl_transaction_write+0x106/0x1a0
[ 1152.144338][   T30]  vfs_write+0x2aa/0x1050
[ 1152.148677][   T30]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1152.154768][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1152.159536][   T30]  ? __fget_files+0x215/0x3d0
[ 1152.164242][   T30]  ? __fget_files+0x21f/0x3d0
[ 1152.168921][   T30]  ksys_write+0x12a/0x250
[ 1152.173337][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1152.178209][   T30]  do_syscall_64+0x115/0x870
[ 1152.182844][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1152.187522][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.194463][   T30] RIP: 0033:0x7fa4b299e019
[ 1152.198893][   T30] RSP: 002b:00007fa4b0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1152.207355][   T30] RAX: ffffffffffffffda RBX: 00007fa4b2c25fa0 RCX: 00007fa4b299e019
[ 1152.215388][   T30] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[ 1152.223423][   T30] RBP: 00007fa4b2a3500c R08: 0000000000000000 R09: 0000000000000000
[ 1152.231389][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1152.241199][   T30] R13: 00007fa4b2c26038 R14: 00007fa4b2c25fa0 R15: 00007ffeb0ba78b8
[ 1152.249252][   T30]  </TASK>
[ 1152.252562][   T30] INFO: task syz.1.4933:20877 blocked for more than 144 seconds.
[ 1152.260335][   T30]       Tainted: G             L      syzkaller #0
[ 1152.269371][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1152.278159][   T30] task:syz.1.4933      state:D stack:28776 pid:20877 tgid:20874 ppid:14010  task_flags:0x400040 flags:0x00080002
[ 1152.290160][   T30] Call Trace:
[ 1152.293563][   T30]  <TASK>
[ 1152.296502][   T30]  __schedule+0x125c/0x6730
[ 1152.300993][   T30]  ? do_raw_spin_lock+0x128/0x260
[ 1152.306695][   T30]  ? __pfx___schedule+0x10/0x10
[ 1152.311552][   T30]  ? find_held_lock+0x2b/0x80
[ 1152.316807][   T30]  ? schedule+0x225/0x2c0
[ 1152.321138][   T30]  schedule+0xdd/0x2c0
[ 1152.326034][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1152.331515][   T30]  __mutex_lock+0xccc/0x1bd0
[ 1152.336234][   T30]  ? write_threads+0x278/0x570
[ 1152.342378][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1152.347432][   T30]  ? simple_strntoull+0xdf/0x170
[ 1152.352463][   T30]  ? __lock_acquire+0x49f/0x1a40
[ 1152.357419][   T30]  ? write_threads+0x278/0x570
[ 1152.362190][   T30]  write_threads+0x278/0x570
[ 1152.366773][   T30]  ? __pfx_write_threads+0x10/0x10
[ 1152.371862][   T30]  ? __might_fault+0xc5/0x140
[ 1152.376858][   T30]  ? _copy_from_user+0x59/0xd0
[ 1152.381660][   T30]  ? __pfx_write_threads+0x10/0x10
[ 1152.386825][   T30]  nfsctl_transaction_write+0x106/0x1a0
[ 1152.392482][   T30]  vfs_write+0x2aa/0x1050
[ 1152.396834][   T30]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1152.402950][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1152.407720][   T30]  ? __fget_files+0x215/0x3d0
[ 1152.412501][   T30]  ? __fget_files+0x21f/0x3d0
[ 1152.417194][   T30]  ksys_write+0x12a/0x250
[ 1152.421508][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1152.426412][   T30]  do_syscall_64+0x115/0x870
[ 1152.431003][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1152.435875][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.443221][   T30] RIP: 0033:0x7fa4b299e019
[ 1152.447651][   T30] RSP: 002b:00007fa4b0bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1152.456143][   T30] RAX: ffffffffffffffda RBX: 00007fa4b2c26090 RCX: 00007fa4b299e019
[ 1152.464129][   T30] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003
[ 1152.472075][   T30] RBP: 00007fa4b2a3500c R08: 0000000000000000 R09: 0000000000000000
[ 1152.480118][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1152.488230][   T30] R13: 00007fa4b2c26128 R14: 00007fa4b2c26090 R15: 00007ffeb0ba78b8
[ 1152.496334][   T30]  </TASK>
[ 1152.499430][   T30] INFO: task syz.6.4965:21036 blocked for more than 144 seconds.
[ 1152.562248][   T30]       Tainted: G             L      syzkaller #0
[ 1152.582307][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1152.602223][   T30] task:syz.6.4965      state:D stack:28776 pid:21036 tgid:21035 ppid:20746  task_flags:0x400140 flags:0x00080002
[ 1152.622255][   T30] Call Trace:
[ 1152.625572][   T30]  <TASK>
[ 1152.628506][   T30]  __schedule+0x125c/0x6730
[ 1152.642272][   T30]  ? __pfx___schedule+0x10/0x10
[ 1152.653824][   T30]  ? find_held_lock+0x2b/0x80
[ 1152.669083][   T30]  ? schedule+0x225/0x2c0
[ 1152.682257][   T30]  schedule+0xdd/0x2c0
[ 1152.702452][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1152.712199][   T30]  __mutex_lock+0xccc/0x1bd0
[ 1152.725552][   T30]  ? write_ports+0xa5/0xcc0
[ 1152.738870][   T30]  ? nfsctl_transaction_write+0xcd/0x1a0
[ 1152.772277][   T30]  ? ksys_write+0x12a/0x250
[ 1152.776850][   T30]  ? do_syscall_64+0x115/0x870
[ 1152.781632][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1152.803537][   T30]  ? write_ports+0xa5/0xcc0
[ 1152.818653][   T30]  ? __lock_acquire+0x49f/0x1a40
[ 1152.834030][   T30]  write_ports+0xa5/0xcc0
[ 1152.847391][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.873719][   T30]  ? find_held_lock+0x2b/0x80
[ 1152.882713][   T30]  ? __might_fault+0xc5/0x140
[ 1152.897061][   T30]  ? __might_fault+0xc5/0x140
[ 1152.912053][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.930962][   T30]  ? _copy_from_user+0x59/0xd0
[ 1152.953709][   T30]  ? __pfx_write_ports+0x10/0x10
[ 1152.960234][   T30]  nfsctl_transaction_write+0x106/0x1a0
[ 1152.973485][   T30]  vfs_write+0x2aa/0x1050
[ 1152.977874][   T30]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1152.986903][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1152.991714][   T30]  ? __fget_files+0x215/0x3d0
[ 1153.000945][   T30]  ? __fget_files+0x21f/0x3d0
[ 1153.006706][   T30]  ksys_write+0x12a/0x250
[ 1153.011102][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1153.016078][   T30]  do_syscall_64+0x115/0x870
[ 1153.020710][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1153.025417][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1153.031305][   T30] RIP: 0033:0x7f8b3c39e019
[ 1153.035966][   T30] RSP: 002b:00007f8b3d2a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1153.044430][   T30] RAX: ffffffffffffffda RBX: 00007f8b3c625fa0 RCX: 00007f8b3c39e019
[ 1153.052960][   T30] RDX: 0000000000000005 RSI: 0000200000000900 RDI: 0000000000000003
[ 1153.062584][   T30] RBP: 00007f8b3c43500c R08: 0000000000000000 R09: 0000000000000000
[ 1153.070663][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1153.078823][   T30] R13: 00007f8b3c626038 R14: 00007f8b3c625fa0 R15: 00007ffcf4c714d8
[ 1153.086863][   T30]  </TASK>
[ 1153.098737][   T30] INFO: task syz.6.4965:21039 blocked for more than 145 seconds.
[ 1153.121308][   T30]       Tainted: G             L      syzkaller #0
[ 1153.129187][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1153.138157][   T30] task:syz.6.4965      state:D stack:28776 pid:21039 tgid:21035 ppid:20746  task_flags:0x400040 flags:0x00080002
[ 1153.150523][   T30] Call Trace:
[ 1153.154331][   T30]  <TASK>
[ 1153.157282][   T30]  __schedule+0x125c/0x6730
[ 1153.166587][   T30]  ? do_raw_spin_lock+0x128/0x260
[ 1153.171664][   T30]  ? __pfx___schedule+0x10/0x10
[ 1153.176881][   T30]  ? find_held_lock+0x2b/0x80
[ 1153.181586][   T30]  ? schedule+0x225/0x2c0
[ 1153.186216][   T30]  schedule+0xdd/0x2c0
[ 1153.190307][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1153.197680][   T30]  __mutex_lock+0xccc/0x1bd0
[ 1153.203676][   T30]  ? write_threads+0x278/0x570
[ 1153.208482][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1153.215186][   T30]  ? simple_strntoull+0xdf/0x170
[ 1153.220169][   T30]  ? __lock_acquire+0x49f/0x1a40
[ 1153.228047][   T30]  ? write_threads+0x278/0x570
[ 1153.233808][   T30]  write_threads+0x278/0x570
[ 1153.238425][   T30]  ? __pfx_write_threads+0x10/0x10
[ 1153.243845][   T30]  ? __might_fault+0xc5/0x140
[ 1153.248562][   T30]  ? _copy_from_user+0x59/0xd0
[ 1153.253963][   T30]  ? __pfx_write_threads+0x10/0x10
[ 1153.259112][   T30]  nfsctl_transaction_write+0x106/0x1a0
[ 1153.266815][   T30]  vfs_write+0x2aa/0x1050
[ 1153.271208][   T30]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 1153.279419][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1153.284298][   T30]  ? __fget_files+0x215/0x3d0
[ 1153.288989][   T30]  ? __fget_files+0x21f/0x3d0
[ 1153.293754][   T30]  ksys_write+0x12a/0x250
[ 1153.298110][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1153.303180][   T30]  do_syscall_64+0x115/0x870
[ 1153.307801][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1153.313519][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1153.319433][   T30] RIP: 0033:0x7f8b3c39e019
[ 1153.324082][   T30] RSP: 002b:00007f8b3d288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1153.332555][   T30] RAX: ffffffffffffffda RBX: 00007f8b3c626090 RCX: 00007f8b3c39e019
[ 1153.340520][   T30] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003
[ 1153.348506][   T30] RBP: 00007f8b3c43500c R08: 0000000000000000 R09: 0000000000000000
[ 1153.356627][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1153.365806][   T30] R13: 00007f8b3c626128 R14: 00007f8b3c626090 R15: 00007ffcf4c714d8
[ 1153.374050][   T30]  </TASK>
[ 1153.377176][   T30] 
[ 1153.377176][   T30] Showing all locks held in the system:
[ 1153.388013][   T30] 1 lock held by rcu_exp_gp_kthr/18:
[ 1153.396978][   T30]  #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140
[ 1153.407339][   T30] 1 lock held by khungtaskd/30:
[ 1153.412360][   T30]  #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1153.422274][   T30] 2 locks held by getty/5366:
[ 1153.426925][   T30]  #0: ffff888036f210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1153.436745][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1153.446971][   T30] 5 locks held by kworker/u8:30/20732:
[ 1153.452536][   T30] 5 locks held by kworker/u8:31/20733:
[ 1153.458007][   T30] 3 locks held by syz.5.4928/20844:
[ 1153.463226][   T30]  #0: ffff888066c015f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.473733][   T30]  #1: ffff888076802450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.483065][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570
[ 1153.492196][   T30] 3 locks held by syz.1.4933/20875:
[ 1153.497400][   T30]  #0: ffff888079b1aef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.506511][   T30]  #1: ffff888051a34450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.515646][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[ 1153.524606][   T30] 3 locks held by syz.1.4933/20877:
[ 1153.529812][   T30]  #0: ffff88807b29d5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.538902][   T30]  #1: ffff888051a34450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.548057][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570
[ 1153.557462][   T30] 3 locks held by syz.6.4965/21036:
[ 1153.562725][   T30]  #0: ffff88807b2ad270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.572672][   T30]  #1: ffff888068422450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.582452][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[ 1153.591286][   T30] 3 locks held by syz.6.4965/21039:
[ 1153.596907][   T30]  #0: ffff88801e3f40f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.606090][   T30]  #1: ffff888068422450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.615334][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570
[ 1153.624447][   T30] 3 locks held by syz.0.5008/21312:
[ 1153.629631][   T30]  #0: ffff88802bb05eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.639077][   T30]  #1: ffff88802bc02450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.648210][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[ 1153.657085][   T30] 3 locks held by syz.0.5008/21314:
[ 1153.662414][   T30]  #0: ffff88802bb05b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1153.672866][   T30]  #1: ffff88802bc02450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1153.681964][   T30]  #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570
[ 1153.691028][   T30] 2 locks held by syz-executor/21517:
[ 1153.696409][   T30]  #0: ffff888066f98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1153.706202][   T30]  #1: ffff888066f980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 1153.715948][   T30] 3 locks held by syz.3.5360/22921:
[ 1153.721138][   T30]  #0: ffff888033d90ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1153.730751][   T30]  #1: ffff888033d900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 1153.740460][   T30]  #2: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1153.750494][   T30] 3 locks held by syz.9.5364/22933:
[ 1153.755690][   T30]  #0: ffff8880724c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1153.765278][   T30]  #1: ffff8880724c00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 1153.776398][   T30]  #2: ffffffff90d2bde0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1153.786474][   T30] 4 locks held by syz.7.5371/22948:
[ 1153.791688][   T30]  #0: ffff888055f30ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1153.801730][   T30]  #1: ffff888055f300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 1153.811473][   T30]  #2: ffffffff90d2bde0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1153.821638][   T30]  #3: ffff88802d15d2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6b0
[ 1153.830996][   T30] 3 locks held by syz.8.5372/22952:
[ 1153.836220][   T30]  #0: ffff8880571b4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1153.845854][   T30]  #1: ffff8880571b40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 1153.855545][   T30]  #2: ffffffff90d2bde0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1153.865611][   T30] 
[ 1153.878766][   T30] =============================================
[ 1153.878766][   T30] 
[ 1153.898948][   T30] NMI backtrace for cpu 1
[ 1153.898969][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1153.898996][   T30] Tainted: [L]=SOFTLOCKUP
[ 1153.899003][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1153.899015][   T30] Call Trace:
[ 1153.899022][   T30]  <TASK>
[ 1153.899030][   T30]  dump_stack_lvl+0x100/0x190
[ 1153.899061][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1153.899088][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1153.899116][   T30]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[ 1153.899150][   T30]  sys_info+0x141/0x190
[ 1153.899176][   T30]  watchdog+0xcb1/0x1030
[ 1153.899205][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1153.899229][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1153.899260][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1153.899291][   T30]  ? kthread+0x13a/0x450
[ 1153.899308][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1153.899328][   T30]  kthread+0x370/0x450
[ 1153.899346][   T30]  ? __pfx_kthread+0x10/0x10
[ 1153.899366][   T30]  ret_from_fork+0x72b/0xd50
[ 1153.899395][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1153.899421][   T30]  ? __switch_to+0x800/0x10f0
[ 1153.899440][   T30]  ? __pfx_kthread+0x10/0x10
[ 1153.899456][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1153.899488][   T30]  </TASK>
[ 1153.899501][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 1154.032880][    C0] NMI backtrace for cpu 0
[ 1154.032898][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1154.032924][    C0] Tainted: [L]=SOFTLOCKUP
[ 1154.032931][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1154.032942][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1154.032968][    C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 <e9> 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1154.032985][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242
[ 1154.033000][    C0] RAX: 00000000022d2889 RBX: ffffffff8e891480 RCX: ffffffff8bbb42d5
[ 1154.033012][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a815f RDI: ffffffff8c402680
[ 1154.033024][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d
[ 1154.033036][    C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000
[ 1154.033047][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[ 1154.033101][    C0] FS:  0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
[ 1154.033118][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1154.033131][    C0] CR2: 0000001b2f718ff8 CR3: 0000000034835000 CR4: 00000000003526f0
[ 1154.033143][    C0] Call Trace:
[ 1154.033148][    C0]  <TASK>
[ 1154.033155][    C0]  default_idle+0x9/0x10
[ 1154.033178][    C0]  default_idle_call+0x6c/0xb0
[ 1154.033201][    C0]  do_idle+0x3a7/0x5b0
[ 1154.033226][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1154.033249][    C0]  ? finish_task_switch.isra.0+0x14c/0x10c0
[ 1154.033278][    C0]  cpu_startup_entry+0x4f/0x60
[ 1154.033304][    C0]  rest_init+0x251/0x260
[ 1154.033327][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1154.033356][    C0]  start_kernel+0x48e/0x490
[ 1154.033381][    C0]  x86_64_start_reservations+0x24/0x30
[ 1154.033407][    C0]  x86_64_start_kernel+0x12b/0x130
[ 1154.033433][    C0]  common_startup_64+0x13e/0x158
[ 1154.033468][    C0]  </TASK>
[ 1154.228461][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1154.235321][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1154.245991][   T30] Tainted: [L]=SOFTLOCKUP
[ 1154.250287][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1154.260314][   T30] Call Trace:
[ 1154.263567][   T30]  <TASK>
[ 1154.266473][   T30]  dump_stack_lvl+0x100/0x190
[ 1154.271129][   T30]  vpanic+0x552/0x970
[ 1154.275085][   T30]  ? __pfx_vpanic+0x10/0x10
[ 1154.279585][   T30]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[ 1154.285736][   T30]  panic+0xd1/0xe0
[ 1154.289457][   T30]  ? __pfx_panic+0x10/0x10
[ 1154.293864][   T30]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[ 1154.300015][   T30]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[ 1154.306162][   T30]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[ 1154.312309][   T30]  ? watchdog.cold+0x1ec/0x234
[ 1154.317072][   T30]  ? watchdog+0xcc1/0x1030
[ 1154.321479][   T30]  watchdog.cold+0x1fd/0x234
[ 1154.326067][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1154.331859][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1154.336526][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1154.341547][   T30]  ? kthread+0x13a/0x450
[ 1154.345772][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1154.350437][   T30]  kthread+0x370/0x450
[ 1154.354490][   T30]  ? __pfx_kthread+0x10/0x10
[ 1154.359102][   T30]  ret_from_fork+0x72b/0xd50
[ 1154.363687][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1154.368794][   T30]  ? __switch_to+0x800/0x10f0
[ 1154.373459][   T30]  ? __pfx_kthread+0x10/0x10
[ 1154.378038][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1154.382807][   T30]  </TASK>
[ 1154.386127][   T30] Kernel Offset: disabled
[ 1154.390433][   T30] Rebooting in 86400 seconds..