last executing test programs:

14.802184364s ago: executing program 0 (id=375):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0}, 0x94)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$packet(0x11, 0x3, 0x300)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x1000000})
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffd, 0x4, 0x1, 0x0, 0x19bc1b9b, 0x0, 0x5, 0xfffffffe, 0x2873, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xf610, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20006, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfff, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x10000000, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x3, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0xc956, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x8949, 0x0, 0x2]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
syz_pidfd_open(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x29, &(0x7f0000000040)="e4fc481d446b0bad51069ec0dc7f2a5f77e2e15e9ce98224bfcdd68b7fcd07cd99211328e0682f8fa6", 0x5})
openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00))
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, &(0x7f0000000840)={{}, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x10}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)

13.689496444s ago: executing program 0 (id=380):
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x9, 0x0, 0x4}, {0x9, 0x5, 0x2, 0x1000}]}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0xa, 0x3, 0x3a)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810)
r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000240))
ioctl$BLKCLOSEZONE(r7, 0x40101287, &(0x7f0000000140)={0x2, 0xfffffffffffffff7})
socket$kcm(0x2, 0xa, 0x2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616ed58a6cd364a70ddab972f287e4f9fb733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k'])
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48})

12.327728027s ago: executing program 0 (id=388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff10"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10060)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x20)
syz_emit_ethernet(0x4f, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x19, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "5695c3"}]}}}}}}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r5, r5, 0x0, 0xb)

11.31506085s ago: executing program 0 (id=390):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
close(r9)
r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
execveat$binfmt(r10, r8, 0x0, 0x0, 0x1000)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r11 = accept4(r7, 0x0, 0x0, 0x800)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r11, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000003e0007012dbd7000fcd3df25047cd63100000400"], 0x18}}, 0x0)
io_uring_enter(r4, 0x627, 0x4c1, 0xb, 0x0, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r13, 0x0, 0xffffffff000)
connect$llc(r1, 0x0, 0x0)

11.180942815s ago: executing program 2 (id=393):
r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x2, 0xd, 0x80, "13ffff000000c1ff8180000000000000000000bef20000008b05000000000001", 0x3031334d})

11.118370566s ago: executing program 2 (id=394):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r1, 0x0, 0x9f)
r2 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

10.737432446s ago: executing program 2 (id=396):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f00000001c0)) (async, rerun: 32)
fcntl$setlease(r2, 0x400, 0x2) (async, rerun: 32)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(r1, 0x0, 0x0) (async)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000133000/0x4000)=nil, 0x4000, 0x14) (async)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
keyctl$session_to_parent(0x12) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r7, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0x2) (async)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f00000003c0)=@isdn={0x22, 0x7, 0x15, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYRESDEC, @ANYRES32=r8, @ANYRES64, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRESOCT=r5, @ANYRESHEX=r0, @ANYBLOB="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"], 0x18}, 0x0)

9.553928591s ago: executing program 1 (id=404):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8)
syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f"], 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

8.032203682s ago: executing program 0 (id=409):
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b52, 0x2c)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r0, 0x5437, 0x0)

7.885351638s ago: executing program 1 (id=410):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

7.554487577s ago: executing program 0 (id=413):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x240480, 0x0)
syz_usb_connect(0x3, 0x166, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x4e, 0x5b, 0xca, 0x8, 0xbdb, 0x1002, 0xc39a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x154, 0x1, 0x8, 0xc, 0x40, 0x3, [{{0x9, 0x4, 0xa7, 0x4, 0x1, 0xdc, 0x78, 0x5d, 0xe3, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x81}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x7, ']'}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x300, 0x3, 0x4, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x3, 0x4, 0xff}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x677c, 0x8, "7edf8d"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x17264d6a75a42c80, 0x3, 0xff, 0x4, 0x1, 0x46}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x1, 0x4, 0xc, 0x1, 0x1}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0xd, 0x10, 0x97, [@generic={0xef, 0xd, "8109f5529f306e4c23c18d4b351c46f12422d33b7496514cb41b8b51a0c9ad4e80cc1504b9b308c6b5d83165976e7ba5b094f80167e3d278efc22af41e5d0a224875fa4f6c13d7bba921c6fbde51b85bff3388768c0fd44ed07be61a8f95e34e41e975b65f7d14a2701cace769084b4aafbfd23ec2df23653700ef023438574f623d5ad726f843acfc26a1ba8f3cf26235cdd5e647d900df2e1d3d58d718433c43409bd89b0de225b2f3c69856a4a590604ea1f05f7b0e55a0d4c59a9a90e8b4a1f41fcad47da963786b4d7661b9ab7a60932f9d59e771734a958f0882bd0d2262a2dbafbfa7a4706a8eccae9f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x32bc}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x1, 0x36, 0x4, 0x10, 0x1}, 0x15, &(0x7f0000000780)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xbe, 0x8, 0x2}]}, 0xa, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x142b}}, {0xa3, &(0x7f0000000800)=@string={0xa3, 0x3, "4dfca3d264aec7f1df91680779f5a0973450342f20a5f61e4d0e143ca81a23005021aeb7e69e596d88512b04be28c086e20308810c8a964df0a1f154ddec1ac2f41b951c66cd55742e2e0eaf63a71e3757eacd79f1bcb3e617b212e25ba45bbf8d82888d754c72cf5410178e76f54cce28380c1a8c3ecce5f229232099bf2a695bec8b45464e0c8e6466cad91375e01be4c05e2c4369fa715285c94074426115c8"}}, {0x12, &(0x7f00000008c0)=@string={0x12, 0x3, "3cd3e89ea22843634e733133f05b79d5"}}, {0x16, &(0x7f0000000900)=@string={0x16, 0x3, "72137b1b76ef982b0878d6dc187630badec9fac2"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x846}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x6673}}, {0xe9, &(0x7f0000000a40)=@string={0xe9, 0x3, "a80b69e429b1c5c322a0e71f63015d856c757dca11f7ff76f59b512b2d529b13f21ee6e07802329ab23d6b754a711acbbe5a028f4f4d09557684bfb96a799590e1d867c8d7bb81eac03b5cac69d1f4997a70c590da1577b7aff1cef62a298f591521ebe707b5461bb2f4befde75aae86b8f86ff5f6cba7cb6957829cfd1e53f38d1dfa022f81fb38dcfc6da9f6c526522973be812aff217eb805416a85b0bea751be9b45181f64d15df60309e769f5f07428b43f351503e2efdeae0761d04a43ea49ca767439e130219d7e19ca47eab01c4747a642de59d1adc0b3f13f60a3349598a38ca109c8"}}, {0x32, &(0x7f0000000b40)=@string={0x32, 0x3, "b384e6a9d76e7347e3f10c4254bdbb82ed3ac0e242e90af2dd45b7cf3758db0df0f7ff36e4eb4cdd2110e19b948cb832"}}]})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e80)=0x14)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0)
ioctl$RTC_PIE_OFF(r6, 0x7006)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRES8=r6, @ANYRESOCT=r9, @ANYRES64=r6], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000800}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x7, 0x14, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='GPL\x00', 0x6, 0x70, &(0x7f0000000dc0)=""/112, 0x0, 0xc, '\x00', r4, @fallback=0xa9be2e68695fa739, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x0, 0x8, 0x6, 0x3e9}, 0x10, r9, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[r10], &(0x7f0000001000)=[{0x5, 0x1, 0xa}, {0x5, 0x5, 0xe}, {0x8, 0x5, 0x1, 0x9}], 0x10, 0x7}, 0x94)
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000580)={0x3, 0x1, 0x15, 0xe, 0x24, &(0x7f0000000180)})
ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040))

6.560149458s ago: executing program 1 (id=415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x91, &(0x7f0000000440)=ANY=[@ANYBLOB="66643d283ac3e2fdc94cf2a49fc076e471180150ccc77b0d000000000000008b217f7f00e2cbd3bbc14c9cc2777df8895ed2c475cae74c11b6ea07b5f8f8e019ebabacae5b05c409990d55e91b0d94459c6ccecb607790d7", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
close(r1)
socket$rds(0x15, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345})
syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r9 = socket(0x18, 0x1, 0x0)
syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}})

5.563139551s ago: executing program 1 (id=416):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ae00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002000921000000"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
bind$inet(r6, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f000001b700)=""/102392, 0x18ff8)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a], [0x0, 0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea5]}, 0x45c)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x8001, 0x10000000, {0x0, 0xd06, 0x0, 0x100, 0x3bf3, 0x8, 0x7, 0x2, 0x122, 0x6000, 0x10000, r2, r3, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)

4.188417299s ago: executing program 4 (id=418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000010000000600000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000400000000000000000007f00"], 0x50)
r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$selinux_context(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x4b, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004200007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e82f07e4c25ab18300b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
getdents64(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000)

3.587224416s ago: executing program 4 (id=419):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000841}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3}, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4a}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK, @TCA_IPT_INDEX={0x0, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x0, 0x3, 0x6}, @TCA_IPT_TARG={0x0, 0x6, {0xce, 'nat\x00', 0x3, 0x2000, "8906cae13b01bd94b369"}}, @TCA_IPT_TARG={0x0, 0x6, {0x2f1a, 'filter\x00', 0x0, 0x3, "177fc23d94f121ce1d4ae98630514d3a9d7e91368a5546e967a3fbce1313fae460bb2dc864761800e02de64fc6f0628d8f199abc6821185d7b5ff39d8ef6d321eb489d220ccaeedfbf93df0e998af3ab201f57faeab0369d298a"}}]}, {0x0, 0x6, "1a2c3ed72f1416a52175186862989f01dba95a06a2f8251000c288258ac6ae848ecb00ccf0532b77f47e1790d77ae21e3f803a7bfb0d830841a83f01966db474aac95cba40b0184f2162c31ef4c73f98026063be1b1a5d1145c36b051157f7e39e98e3bf69f81cb230ded5ef5dde36dc93bb3c3198561621fd6bda68118fcb7eae76"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x5}}}}, @m_connmark={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x7, 0x80, 0x0, 0xe3, 0x8001}, 0x1}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x200, 0x8, 0x5, 0x7, 0xb980}, 0x8}}]}, {0x0, 0x6, "18efd522352816dc0824b7d1c1e2c962ae63e0703f67becd055154d0755550becb83c965cd8320bfef546a79086d2eddb76139876653368409698c2995495b7ce13405e17d457f39579a36186a9e02576979f065f6b234cac8d7722e"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x5, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x80a0000, 0x114000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

3.188171766s ago: executing program 4 (id=420):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000040)=0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400103a00fe8000000000000000000000000000bbff020000000000000000000000010000907800"/74], 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000640)=@svm={0xc, 0x1, 0x1080, {0x5000}, {"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"}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0xc}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf0}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7c}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x9, 0x2}}]}}]}, 0xac}}, 0x4040415)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

3.112859721s ago: executing program 1 (id=421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
r2 = socket(0x1, 0x5, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0xe000200c})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect(r4, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000002e0000009500245e8b36a84f4e08000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r7, 0xfffffffc)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x2c, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3.060742901s ago: executing program 4 (id=422):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fsopen(0x0, 0x1)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r4 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00')
execveat$binfmt(r3, r4, &(0x7f0000000140)={[&(0x7f00000000c0)='-\\\x00', &(0x7f0000000100)='\x00']}, &(0x7f0000000380)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='+\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='+\x00', &(0x7f0000000300)='+[*^/#\x00', &(0x7f0000000340)='&+\x00']}, 0x400)
syz_usb_disconnect(r0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

2.561538186s ago: executing program 3 (id=423):
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b52, 0x2c)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r0, 0x5437, 0x0)

2.181419978s ago: executing program 3 (id=424):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r4, 0x4)
close(0x3)
r5 = socket$alg(0x26, 0x5, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}]}}]}, 0x48}}, 0x4048000)

2.113345826s ago: executing program 3 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x4, 0x72, 0x100000000000, r0})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f04ebbeef, 0x40010, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x7})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0xb, &(0x7f0000000480)=[{0x6, 0x0, 0x2, 0x7fff7ffc}, {0x8, 0xff, 0x1, 0x3}, {0x0, 0x6, 0x81, 0xfffffffc}, {0xffff, 0xb2, 0x1, 0x6}, {0x7, 0x1, 0x8, 0x8001}, {0x1000, 0x10, 0x23, 0x8001}, {0x31, 0x6, 0x3, 0x9}, {0xfff8, 0x8, 0x2, 0x10000}, {0xa3c6, 0x0, 0x5, 0x3}, {0x1, 0x8, 0x5, 0x9}, {0x2, 0xf5, 0x0, 0x6}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x410100)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
lsetxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x8, 0x810001}, {0x7f, 0x8}]}, 0x18, 0x0)

1.790886217s ago: executing program 2 (id=426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x6c2800, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000001c0)="6897deef5cf7c272ac01465ddc11f42b", 0x10)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x20, 0x2e}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x1000, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)

1.06659203s ago: executing program 3 (id=427):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, 0x8)
io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000097e3075ad39065cd72319ca29942e7fbecc18690de53b500639afa8e9e4138760902effa0ff4e653bd043116c5"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6cbc74c748ab888abb0d94", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000350000000a001a0008021100000000000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x4048804)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

882.944719ms ago: executing program 3 (id=428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'wrr\x00', 0x12, 0x4000ffc, 0x54}, 0x2c)
r4 = socket(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r3, @ANYRES8=<r6=>r4, @ANYRES8=<r7=>r2], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r4}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ip6gre0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="991882171b00f8e174104c401b5c6e16376d0680842ec2689f4f706c138f5c0233b684f38f7e709676c24ed22e3ee906ca6907e6814230e73888d67ff91506c28b841cab6d0ba101b435c72fb61027616aaa9f6dc16bbdd3a241e1c0bbc6803d37f23da68b33f3d428fd164006", 0x6d}, {&(0x7f0000000540)="ca6a7a2e2bde76b83e0eb2c9a76c8ca2849f82a49924de29be257e0a64903c6a94925a4e9f03d74d5ef37f9f77903fd7fe3544b3858132c3d2eeb30a199b58f273cf53d4ecf1f6722c37243378f7ec867f4c3540bd76f9e4271e058a33b08f2a266899ff6b2c45aee669be4a402a1e649410d80f6f6f45d7640e7110369b82bfb88f68d0af14bdf18ba0a9", 0x8b}, {&(0x7f0000000600)="71df4cb53889360780894ccf389eed4adb3faaf0b421b64db77db89d33b93113928096244ac5418cfe03e0889e87a755548a9554d968cb77130fe3e95a48440fb71e78a1a1833f281a6cefddc189e1e0cd8d69a3ade7d9e120ddb65b39c2b4a48a26ea9d5ab520dfccfc1cf6b2da8b4f47f14f9452bf4905d874f392f22165e7f9c499941d46300300569867896154bc174e294210a02bd61a74c875d54515cee5ca87e6c8404246d3af39b1744d50658e8e8b0b4bba068db5fce215264e810190d438ae4513a3ba974d762093c0d493f9e73f2e5c8c0437b3ab6ddd83e6b56dd49fe6df7c7bf80c813da6c58acc01c24405", 0xf2}, {&(0x7f0000000700)="bc61e33254bc85c7b3a4136a2791252cd5f51f5d4aace6429ae4bce2ad738ac54d68ec3b2ac38f74846a2e88f664f6fedcbede1d8fbb710ede64ca3eeee337d498eb873fb0bd3ee6c067bc1dbe459d11c92b7e67f2719d4dc9e8a731057c327d875ce8d1f6c375095df9a64d66a6ebbbc8e8d2c394ee029b551e22bbc293f01edfe3e2476b4c8d62c56ae7527ba8", 0x8e}, {&(0x7f00000007c0)="3eb99c4e36416521604feec32ea17b9f8960eb38df6ee782775a7fa3d246ee7eabccd7ceaa8fa58c563c305074265489ab001976f01a713013d0a3c681c8b1d6eef962ddfaf8552c93ff8c5b3eb2dd70f11973d65c29ea3a2d60357e87c1d3f6b1e36171d0ece7e876f2d86832412d1b7ed059df302564025c409a423bdf9c133d94a70443708fe14efc06def7e5fa18c7eb928981d119ba92d04261faa9cb82c461d06249c91aa735f958ae5ffdf56a08038d03f97abb4e08832fd2ffbc464407305fa4bf2e4f1c5be97cd64ead6ec1dee970f2931bcc30bb59867ebbb5bbb38f", 0xe1}, {&(0x7f0000000140)="c5fb14f6a8d5e5f8575a0d71169f507b3222bccd68b0a251e6ddb65f6ce2", 0x1e}, {&(0x7f00000008c0)="ea15091abf72e7cf813c545951c98037918aa930176d6664d025bac7a3ccda15a1f7c96344e7e8477f2dc760ccaa8e2ae3515930e0621aedcfdc746877fc366ca3f5fc7f5bc1f25ad487fadcc66e5570ed1abb148cc426f05cf90d73f1700c3ee58a3ef745af5fc19761fecdcb5829e7a632fcb65cbc5f4ffb81706252809291a572b468ebcf254d869aa2a1f391891a6abe11e2dfd13e8d3cf89dd35e3908aa1492ee4e8cb882905635d0ba770c3e3fcdafcf1409993f8edc79ee76894033c98346bc114c89cabc8d78a82839851c2986e2f330c6110dfb7a8363e13b331cd9d6b6b0ec9d06f909800323a0ca0735ae39807e24", 0xf4}], 0x7, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x4bae}, @iv={0x38, 0x117, 0x2, 0x21, "98a69e8689bb76a2e7ab93a466dbab7cc6387db785e14b68d2c0443a1d855a7251"}, @iv={0x100, 0x117, 0x2, 0xea, "99e15882a3999990501efef16fb1ab8dd40248169a23619990c638707beba2f60a0caebf56b0e349c3ce685fe4d2d66ac6e3b6c6b47814a597d60e7a0a024ff3c86cfb826e5f2a507a2568019976e981a5af160dcba49902b98c328839e6ac3086a3842d717bc871ad03d586850cb151edff5d899c03d18c81709752106f3b0ff16aace9b747359631944fbf4f830a3f43634ce6b31be9dc2a26b526c1ed72cc80bcf8f8becf6971592d86a3fdab8ec4aa58a1b63dcf3ec98cb96731f036a408f3f6934a4e74c5b5edf39148812fff00a3d503c785702d50ffc8e1b5787ddf2c47e4c03ecedc382886a7"}, @iv={0xc0, 0x117, 0x2, 0xa5, "c7799d43d0007dd2475052d2b5f80765420ecc65f3a22a5142b3d855e9b516cbd7e1d8a05495e85e15b75f8b6415a7c755aa02e8e1735fb6ea9e93bb4d94a1201e3d89d4c06c1aa23dd9d833d8d8831e56baa6eb02370f177df94c3622803f927868b4c3ee27c3263b3940f172efcc45815f3001d37776d97533c4e50be663689c009aff6217eda56eb13514a30055e247fe0c2575f9394f0a5942799b2babded5962b6beb"}, @iv={0xf0, 0x117, 0x2, 0xdb, "2853737cbcd34604fee3cbd7a5621ab10b45d1835c236b837e4cc1c7022d5a4a3e62fa16cce2ef8ecdd1dc4a44fb42aacf5958334bcb4a10c1753244eb9467a9887c70ca7fe1dfd43ab29057d8a5bd3f92af6d1daf98f5bf11bc6d08c0d336c80f1001accc64a0552e91352bbc7928b758637ad9b5a928cd77500946e8568466855f8dae0b9aa2b4d2d1eb59a37835b3654b66980ce339d7939f99581facc393e5f68bd3bc6f2c48bfa5c7454a6253c635e140b3df549ebb9c0e3f87376b0ad05cb716d19194d1a2af6202961b70cb5cbfcb8a5ef0645e7ef00f33"}, @iv={0x100, 0x117, 0x2, 0xe9, "119a3b0ec48a1e7b624f0b930ba6ae226e9e88b775037d03e427b9b1c4efdb3badb264aff119871635ad2ec85f98676de67f0579ce99e4bd6cbded80887aeeb22dbf4b0dfe5eb5e45d522faed3654c2f9ed613af0ffdeb5268fb401ebfdba7ce97457b5bdbc8ca9ddcb94bd1679cf1d54baede1eae041a3f3063de79f5f4a4bf58d8296fd994d2d55ae231de3d2901b991053180692f3370624ce3f23b8ecd72b6f8f522f03340e6995f727f4300d932a5f82b3b4c803f531bd2b3d374c05c6bfea6e0b64a2e79c25bb7b6bfe77d195e7ba0cb0e7c3362c514f3c25de89745c8359b1687b4f6abe6ba"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x418, 0x20004010}], 0x1, 0x20040894)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRES32=r7, @ANYRES16=r5, @ANYRESOCT=r4], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket(0x23, 0x6, 0xffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000400"/120], 0x78)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r12, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x29}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x200008c4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$NBD_DO_IT(r2, 0xab03)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000406010100000000000000000100000905000100070000001f4f741d7ba740a428070017f60ddc725ecfcb8f97e4c5ed2347de60af5a45a961ce46828a05b18c7a1211eb2c25a1edf2f6d73eec3794a619deb359215c255df374a548cb5cfa3828f7378bf1d6d5bf317bfb730036e7bd0a44c791efb13c3f4454d1a8bbdcccfd83388e8bb5916c35139fa8e2059b3e60eb106a99c3e302ffa2734f850d91c0405e59cb4e99d3db8ffafe44934645996b47f570d775aadacced055a5a48de56e14021c5cc7855a2449cfbf8762b13ba55de1f"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

822.462264ms ago: executing program 1 (id=429):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
fadvise64(r1, 0x85f5, 0x4000000005, 0x4)

820.486075ms ago: executing program 2 (id=430):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000006080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
r1 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0xc024200, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x141b82, 0xc)
write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10)

585.321312ms ago: executing program 4 (id=431):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000280)={0x1, 0x4}, 0x8)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000380), 0x0, 0x4004800)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
io_uring_setup(0x5c82, &(0x7f0000000140)={0x0, 0xcc52, 0x8000, 0x2, 0x297, 0x0, r0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000029000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0xcd}]})
r5 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x2000, 0x1}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
utimensat(r8, 0x0, &(0x7f0000000080), 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socket(0xa, 0x3, 0xff)

387.414949ms ago: executing program 3 (id=432):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040}, 0x40010)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078010000004700000300000000001100000a010101ac1e0001440c0101ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000060000000000000000ac1e000100000000ac141400ab8ef0ce"], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010080000000fedbdf250f00000014000380080003000000000008000100810000001c0007800c00040080000000000000000c0003"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000fc1200000008000300", @ANYRES32=r9, @ANYBLOB="040013000a000600080211000001"], 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x810)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "26ce069ad6e542eca9e4b560ea4b6163"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "e7950d012bb0b45bf6e1eaae73613eb4"}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x4c080)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r12 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r3)

21.995265ms ago: executing program 2 (id=433):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$packet(0x11, 0x3, 0x300)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x1000000})
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x3, 0x80000000, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3, 0x4], [0x1, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x3, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0xc956, 0x40000008, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x8949, 0x0, 0x2]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x29, &(0x7f0000000040)="e4fc481d446b0bad51069ec0dc7f2a5f77e2e15e9ce98224bfcdd68b7fcd07cd99211328e0682f8fa6", 0x5})
openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 4 (id=434):
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b52, 0x2c)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r0, 0x5437, 0x0)

kernel console output (not intermixed with test programs):

isconnect, device number 3
[   86.492449][ T5916] usb 3-1: USB disconnect, device number 7
[   86.581055][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   86.638277][   T30] audit: type=1400 audit(1769076230.453:232): avc:  denied  { create } for  pid=6194 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   86.878177][ T6200] sp0: Synchronizing with TNC
[   87.145440][   T30] audit: type=1400 audit(1769076230.453:233): avc:  denied  { connect } for  pid=6194 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   87.164727][   T30] audit: type=1400 audit(1769076230.659:234): avc:  denied  { name_bind } for  pid=6194 comm="syz.0.66" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   87.188201][   T30] audit: type=1400 audit(1769076230.659:235): avc:  denied  { node_bind } for  pid=6194 comm="syz.0.66" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   87.292127][   T30] audit: type=1400 audit(1769076231.099:236): avc:  denied  { create } for  pid=6204 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.436742][   T30] audit: type=1400 audit(1769076231.117:237): avc:  denied  { bind } for  pid=6204 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.456717][   T30] audit: type=1400 audit(1769076231.117:238): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.487304][   T30] audit: type=1400 audit(1769076231.117:239): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.509396][   T30] audit: type=1400 audit(1769076231.117:240): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.737805][ T6215] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.70'.
[   87.923561][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'.
[   87.959599][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'.
[   88.002292][ T5869] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   88.039196][ T5869] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   88.218915][ T6215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6215 comm=syz.1.70
[   88.994682][ T6241] overlayfs: missing 'lowerdir'
[   90.028165][ T6263] netlink: 'syz.2.83': attribute type 3 has an invalid length.
[   90.324063][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   90.955242][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   91.169363][ T5869] usb 5-1: Using ep0 maxpacket: 8
[   91.200736][ T5869] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[   91.209041][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.109716][ T5869] usb 5-1: config 0 has no interface number 0
[   92.116450][ T5869] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[   92.128596][ T5869] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[   92.145260][ T5869] usb 5-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.162892][ T5869] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[   92.172209][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.182857][ T5869] usb 5-1: Product: syz
[   92.187873][ T5869] usb 5-1: Manufacturer: syz
[   92.192476][ T5869] usb 5-1: SerialNumber: syz
[   92.199381][ T5869] usb 5-1: config 0 descriptor??
[   92.205873][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   92.238489][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   92.238504][   T30] audit: type=1400 audit(1769076235.729:265): avc:  denied  { getopt } for  pid=6284 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   92.473044][   T30] audit: type=1400 audit(1769076235.953:266): avc:  denied  { connect } for  pid=6294 comm="syz.3.94" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.602628][ T6266] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   92.818253][   T30] audit: type=1400 audit(1769076235.953:267): avc:  denied  { setopt } for  pid=6294 comm="syz.3.94" laddr=fe80::12 lport=58 faddr=fe80::25 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.848448][ T6266] CIFS: Unable to determine destination address
[   92.857648][   T30] audit: type=1400 audit(1769076236.028:268): avc:  denied  { read } for  pid=6262 comm="syz.4.84" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   92.890388][ T5869] ath6kl: Failed to submit usb control message: -71
[   92.899155][ T6057] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   92.909300][   T30] audit: type=1400 audit(1769076236.028:269): avc:  denied  { open } for  pid=6262 comm="syz.4.84" path="/21/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   92.964489][   T30] audit: type=1400 audit(1769076236.047:270): avc:  denied  { ioctl } for  pid=6262 comm="syz.4.84" path="/21/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   92.988745][ T5869] ath6kl: unable to send the bmi data to the device: -71
[   92.988769][ T5869] ath6kl: Unable to send get target info: -71
[   93.019315][ T5869] ath6kl: Failed to init ath6kl core: -71
[   93.027628][   T30] audit: type=1400 audit(1769076236.066:271): avc:  denied  { append } for  pid=6294 comm="syz.3.94" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.081914][ T5869] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71
[   93.092748][ T6057] usb 1-1: Using ep0 maxpacket: 16
[   93.102504][ T6057] usb 1-1: unable to get BOS descriptor or descriptor too short
[   93.111849][ T6057] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[   93.128951][ T6057] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[   93.149686][ T6057] usb 1-1: config 13 has no interface number 0
[   93.157659][ T5869] usb 5-1: USB disconnect, device number 4
[   93.166777][ T6057] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[   93.270250][   T30] audit: type=1400 audit(1769076236.692:272): avc:  denied  { connect } for  pid=6301 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.388718][ T6057] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.415304][   T30] audit: type=1400 audit(1769076236.720:273): avc:  denied  { ioctl } for  pid=6301 comm="syz.3.95" path="socket:[10027]" dev="sockfs" ino=10027 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.536244][ T6057] usb 1-1: config 13 interface 50 has no altsetting 0
[   93.713014][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   93.976175][ T6057] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[   93.986652][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.997709][   T30] audit: type=1400 audit(1769076236.730:274): avc:  denied  { write } for  pid=6301 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.017472][ T6057] usb 1-1: Product: syz
[   94.021738][ T6057] usb 1-1: Manufacturer: syz
[   94.030248][ T6057] usb 1-1: SerialNumber: syz
[   94.065972][ T6293] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   94.156437][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.166484][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.181082][ T5876] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   94.196818][ T5876] usb 2-1: config 1 has no interface number 1
[   94.207353][ T5876] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.221149][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.230646][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.239353][ T5876] usb 2-1: Product: syz
[   94.243592][ T5876] usb 2-1: Manufacturer: syz
[   94.248819][ T5876] usb 2-1: SerialNumber: syz
[   94.477337][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.477428][ T6312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.489225][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.590470][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'.
[   94.667646][ T5876] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc
[   94.865019][ T5876] usb 2-1: USB disconnect, device number 4
[   95.316392][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   96.042207][ T5876] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.119311][ T5876] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.129892][ T6057] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   96.140684][ T6057] usb 1-1: MIDIStreaming interface descriptor not found
[   96.175761][ T6057] usb 1-1: USB disconnect, device number 7
[   96.251475][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   96.372166][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.543381][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.546505][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   96.569655][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   96.696938][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.723825][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   96.739034][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   96.748093][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   96.759674][ T5876] usb 2-1: Using ep0 maxpacket: 16
[   96.767966][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   96.785802][ T5916] usb 5-1: Product: syz
[   96.790007][ T5916] usb 5-1: Manufacturer: syz
[   96.799793][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   96.805430][ T5916] cdc_wdm 5-1:1.0: skipping garbage
[   96.821718][ T5916] cdc_wdm 5-1:1.0: skipping garbage
[   96.825655][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   96.841265][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   96.848348][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.879410][ T5876] usb 2-1: Product: syz
[   96.887771][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol
[   96.888009][ T5876] usb 2-1: Manufacturer: syz
[   96.888026][ T5876] usb 2-1: SerialNumber: syz
[   96.944958][ T5876] usb 2-1: config 0 descriptor??
[   96.986519][ T6057] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   97.061057][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   97.062455][ T5876] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   97.081735][ T5876] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   97.212255][ T6057] usb 1-1: Using ep0 maxpacket: 32
[   97.270318][ T5883] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   97.279593][ T6057] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   97.296732][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.307003][ T6057] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.331997][ T5876] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   97.341142][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   97.341971][ T5876] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   97.359302][ T6057] usb 1-1: config 0 has no interface number 0
[   97.367988][ T5876] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[   97.370114][ T6057] usb 1-1: config 0 interface 196 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.378184][ T5876] em28xx 2-1:0.0: No AC97 audio processor
[   97.388272][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.403301][ T5876] usb 2-1: USB disconnect, device number 5
[   97.416126][ T5876] em28xx 2-1:0.0: Disconnecting em28xx
[   97.417826][ T6057] usb 1-1: config 0 interface 196 has no altsetting 0
[   97.450005][ T5876] em28xx 2-1:0.0: Freeing device
[   97.456775][ T5883] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   97.471539][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   97.487566][ T6057] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   97.507526][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.515649][ T5883] usb 4-1: Product: syz
[   97.520590][ T5883] usb 4-1: Manufacturer: syz
[   97.529340][ T6057] usb 1-1: Product: syz
[   97.537892][ T6057] usb 1-1: Manufacturer: syz
[   97.551131][ T6057] usb 1-1: SerialNumber: syz
[   97.557393][ T5883] cdc_wdm 4-1:1.0: skipping garbage
[   97.563317][ T5883] cdc_wdm 4-1:1.0: skipping garbage
[   97.574782][ T6057] usb 1-1: config 0 descriptor??
[   97.584429][ T5883] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[   97.592584][ T6057] ipheth 1-1:0.196: Unable to find alternate settings interface
[   97.600497][ T5883] cdc_wdm 4-1:1.0: Unknown control protocol
[   97.822668][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   97.822706][   T30] audit: type=1400 audit(1769076240.948:288): avc:  denied  { setopt } for  pid=6339 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   97.844509][ T5876] usb 1-1: USB disconnect, device number 8
[   97.861210][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.270347][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   98.270429][ T5973] usb 5-1: USB disconnect, device number 5
[   98.277095][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   98.288817][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   98.605019][   T30] audit: type=1400 audit(1769076241.650:289): avc:  denied  { mounton } for  pid=6370 comm="syz.4.113" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.002613][ T6373] kernel read not supported for file /cpuacct.usage_percpu (pid: 6373 comm: syz.1.112)
[   99.002662][   T30] audit: type=1400 audit(1769076241.669:290): avc:  denied  { write } for  pid=6370 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   99.034526][   T30] audit: type=1800 audit(1769076242.080:291): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.112" name="cpuacct.usage_percpu" dev="mqueue" ino=10261 res=0 errno=0
[  100.352820][ T5973] usb 4-1: USB disconnect, device number 4
[  100.374690][ T6395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.692142][   T30] audit: type=1400 audit(1769076243.605:292): avc:  denied  { create } for  pid=6392 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  100.958410][ T6400] FAULT_INJECTION: forcing a failure.
[  100.958410][ T6400] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  100.971810][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) 
[  100.971826][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  100.971832][ T6400] Call Trace:
[  100.971835][ T6400]  <TASK>
[  100.971839][ T6400]  dump_stack_lvl+0x100/0x190
[  100.971857][ T6400]  should_fail_ex.cold+0x5/0xa
[  100.971870][ T6400]  _copy_to_user+0x32/0xd0
[  100.971886][ T6400]  simple_read_from_buffer+0xcb/0x170
[  100.971901][ T6400]  proc_fail_nth_read+0x1af/0x230
[  100.971916][ T6400]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.971934][ T6400]  ? rw_verify_area+0xce/0x6d0
[  100.971944][ T6400]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.971958][ T6400]  vfs_read+0x1e4/0xb30
[  100.971972][ T6400]  ? __pfx_vfs_read+0x10/0x10
[  100.971982][ T6400]  ? find_held_lock+0x2b/0x80
[  100.971997][ T6400]  ? __fget_files+0x215/0x3d0
[  100.972012][ T6400]  ? __fget_files+0x21f/0x3d0
[  100.972029][ T6400]  ksys_read+0x12a/0x250
[  100.972040][ T6400]  ? __pfx_ksys_read+0x10/0x10
[  100.972051][ T6400]  ? fput+0x79/0x100
[  100.972065][ T6400]  ? __sys_getsockname+0xce/0x110
[  100.972081][ T6400]  do_syscall_64+0xc9/0xf80
[  100.972094][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.972106][ T6400] RIP: 0033:0x7f9287f5b58e
[  100.972115][ T6400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  100.972125][ T6400] RSP: 002b:00007f9288e6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  100.972137][ T6400] RAX: ffffffffffffffda RBX: 00007f9288e6d6c0 RCX: 00007f9287f5b58e
[  100.972143][ T6400] RDX: 000000000000000f RSI: 00007f9288e6d0a0 RDI: 0000000000000009
[  100.972149][ T6400] RBP: 00007f9288e6d090 R08: 0000000000000000 R09: 0000000000000000
[  100.972155][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.972161][ T6400] R13: 00007f9288216038 R14: 00007f9288215fa0 R15: 00007ffd3b207db8
[  100.972175][ T6400]  </TASK>
[  101.174448][   T30] audit: type=1400 audit(1769076243.633:293): avc:  denied  { ioctl } for  pid=6392 comm="syz.0.118" path="socket:[11288]" dev="sockfs" ino=11288 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.659450][   T30] audit: type=1400 audit(1769076244.522:294): avc:  denied  { mounton } for  pid=6404 comm="syz.0.123" path="/22/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.126358][ T6057] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  102.384048][ T6057] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  102.392966][ T6057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.405383][ T6057] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  102.833126][ T6057] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.880885][ T6057] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  102.907342][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  102.915370][ T6057] usb 2-1: Product: syz
[  102.934405][ T6057] usb 2-1: Manufacturer: syz
[  102.941648][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  102.965681][ T6057] cdc_wdm 2-1:1.0: skipping garbage
[  102.971647][ T6057] cdc_wdm 2-1:1.0: skipping garbage
[  102.989089][ T6057] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  102.999440][   T30] audit: type=1400 audit(1769076245.784:295): avc:  denied  { bind } for  pid=6426 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  103.030085][ T6057] cdc_wdm 2-1:1.0: Unknown control protocol
[  103.186558][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  103.379505][ T5876] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  103.397972][ T5876] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.409512][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  103.420792][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  103.430914][ T5876] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.460726][ T5876] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  103.480667][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.653530][ T6441] netlink: 56 bytes leftover after parsing attributes in process `syz.4.131'.
[  103.908851][   T30] audit: type=1400 audit(1769076246.636:296): avc:  denied  { name_bind } for  pid=6418 comm="syz.2.125" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  103.988602][ T5876] usb 3-1: usb_control_msg returned -32
[  104.507106][ T5876] usbtmc 3-1:16.0: can't read capabilities
[  104.517923][    C0] cdc_wdm 2-1:1.0: Unexpected error -71
[  104.524126][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.530727][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.537155][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.543753][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.551309][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.557918][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.564594][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.570215][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'.
[  104.571190][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.571574][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.592661][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.600220][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.606826][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.613147][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.619746][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.626132][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  104.632328][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'.
[  104.632721][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  104.647623][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  104.657682][ T5876] usb 2-1: USB disconnect, device number 6
[  104.710153][ T6055] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  104.730713][ T6055] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  104.848247][ T6419] could not allocate digest TFM handle sha1-ce
[  105.078831][   T30] audit: type=1400 audit(1769076247.739:297): avc:  denied  { ioctl } for  pid=6418 comm="syz.2.125" path=2F6465762F6364632D77646D30202864656C6574656429 dev="devtmpfs" ino=2909 ioctlcmd=0x5b03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  105.380753][ T6464] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  105.640930][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'.
[  106.049757][ T6055] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  106.906241][   T90] usb 3-1: USB disconnect, device number 8
[  106.960010][ T6055] usb 5-1: Using ep0 maxpacket: 8
[  106.978604][ T6055] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  107.003828][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.045015][ T6055] usb 5-1: Product: syz
[  107.049276][ T6055] usb 5-1: Manufacturer: syz
[  107.053870][ T6055] usb 5-1: SerialNumber: syz
[  107.120875][ T6055] usb 5-1: config 0 descriptor??
[  107.137363][ T6055] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  107.182922][   T30] audit: type=1400 audit(1769076249.704:298): avc:  denied  { read write } for  pid=6480 comm="syz.0.142" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  107.742018][ T6492] netlink: 136 bytes leftover after parsing attributes in process `syz.1.143'.
[  107.840085][ T6055] gspca_sonixj: reg_w1 err -110
[  107.845098][ T6055] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  108.992613][   T30] audit: type=1400 audit(1769076249.732:299): avc:  denied  { open } for  pid=6480 comm="syz.0.142" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  109.122352][   T30] audit: type=1400 audit(1769076250.059:300): avc:  denied  { kexec_image_load } for  pid=6485 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  110.554146][ T6515] binder: 6509:6515 ioctl 400c620e 200000000080 returned -22
[  110.563326][   T30] audit: type=1400 audit(1769076252.856:301): avc:  denied  { ioctl } for  pid=6509 comm="syz.3.147" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  111.249781][ T5883] libceph: connect (1)[c::]:6789 error -101
[  111.301358][ T6516] ceph: No mds server is up or the cluster is laggy
[  111.395407][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  111.417718][   T30] audit: type=1400 audit(1769076252.893:302): avc:  denied  { write } for  pid=6509 comm="syz.3.147" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  111.561826][ T5888] usb 5-1: USB disconnect, device number 6
[  112.007272][ T5883] libceph: connect (1)[c::]:6789 error -101
[  112.018167][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  112.038860][   T30] audit: type=1400 audit(1769076252.903:303): avc:  denied  { open } for  pid=6509 comm="syz.3.147" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  112.064062][   T30] audit: type=1400 audit(1769076252.931:304): avc:  denied  { ioctl } for  pid=6509 comm="syz.3.147" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  112.090446][   T30] audit: type=1400 audit(1769076253.202:305): avc:  denied  { ioctl } for  pid=6509 comm="syz.3.147" path="socket:[10642]" dev="sockfs" ino=10642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.188958][ T6526] fuse: Unknown parameter 'group_i00000000000000000000'
[  112.209301][   T30] audit: type=1400 audit(1769076254.390:306): avc:  denied  { mounton } for  pid=6525 comm="syz.0.149" path="/30/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  112.302286][   T30] audit: type=1400 audit(1769076254.493:307): avc:  denied  { write } for  pid=6527 comm="syz.4.150" name="file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.344731][ T6528] capability: warning: `syz.4.150' uses deprecated v2 capabilities in a way that may be insecure
[  112.451885][   T30] audit: type=1400 audit(1769076254.530:308): avc:  denied  { open } for  pid=6527 comm="syz.4.150" path="/30/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.482687][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.152'.
[  112.749030][ T6539] autofs: Unknown parameter '0x0000000000000000'
[  112.765168][ T6539] netlink: 64 bytes leftover after parsing attributes in process `syz.3.152'.
[  112.774122][ T6539] block nbd0: not configured, cannot reconfigure
[  114.969049][   T30] audit: type=1400 audit(1769076256.850:309): avc:  denied  { name_connect } for  pid=6546 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  115.142927][   T30] audit: type=1400 audit(1769076256.962:310): avc:  denied  { shutdown } for  pid=6546 comm="syz.2.156" lport=37537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  115.219734][ T6566] FAULT_INJECTION: forcing a failure.
[  115.219734][ T6566] name failslab, interval 1, probability 0, space 0, times 0
[  115.247955][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.4.160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.247993][ T6566] Tainted: [L]=SOFTLOCKUP
[  115.247999][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  115.248008][ T6566] Call Trace:
[  115.248014][ T6566]  <TASK>
[  115.248021][ T6566]  dump_stack_lvl+0x100/0x190
[  115.248050][ T6566]  should_fail_ex.cold+0x5/0xa
[  115.248069][ T6566]  should_failslab+0xc2/0x120
[  115.248092][ T6566]  __kmalloc_cache_noprof+0x80/0x810
[  115.248109][ T6566]  ? lockdep_hardirqs_on+0x78/0x100
[  115.248127][ T6566]  ? udmabuf_create+0xc0/0x1490
[  115.248148][ T6566]  ? udmabuf_create+0xc0/0x1490
[  115.248163][ T6566]  udmabuf_create+0xc0/0x1490
[  115.248182][ T6566]  ? __lock_acquire+0x4a5/0x2630
[  115.248210][ T6566]  ? __pfx_udmabuf_create+0x10/0x10
[  115.248227][ T6566]  ? find_held_lock+0x2b/0x80
[  115.248248][ T6566]  ? __might_fault+0xc5/0x140
[  115.248265][ T6566]  ? __might_fault+0xc5/0x140
[  115.248293][ T6566]  udmabuf_ioctl+0x18f/0x300
[  115.248309][ T6566]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  115.248334][ T6566]  ? selinux_file_ioctl+0x139/0x290
[  115.248353][ T6566]  ? selinux_file_ioctl+0xb4/0x290
[  115.248372][ T6566]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  115.248390][ T6566]  __x64_sys_ioctl+0x18e/0x210
[  115.248408][ T6566]  do_syscall_64+0xc9/0xf80
[  115.248428][ T6566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.248445][ T6566] RIP: 0033:0x7f21cd19acb9
[  115.248459][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.248475][ T6566] RSP: 002b:00007f21ce098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.248492][ T6566] RAX: ffffffffffffffda RBX: 00007f21cd415fa0 RCX: 00007f21cd19acb9
[  115.248503][ T6566] RDX: 00002000000001c0 RSI: 0000000040187542 RDI: 0000000000000003
[  115.248513][ T6566] RBP: 00007f21ce098090 R08: 0000000000000000 R09: 0000000000000000
[  115.248522][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.248532][ T6566] R13: 00007f21cd416038 R14: 00007f21cd415fa0 R15: 00007ffda2b9b1b8
[  115.248555][ T6566]  </TASK>
[  115.655877][ T6570] FAULT_INJECTION: forcing a failure.
[  115.655877][ T6570] name failslab, interval 1, probability 0, space 0, times 0
[  115.668658][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.3.162 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.668683][ T6570] Tainted: [L]=SOFTLOCKUP
[  115.668687][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  115.668693][ T6570] Call Trace:
[  115.668698][ T6570]  <TASK>
[  115.668702][ T6570]  dump_stack_lvl+0x100/0x190
[  115.668722][ T6570]  should_fail_ex.cold+0x5/0xa
[  115.668735][ T6570]  should_failslab+0xc2/0x120
[  115.668751][ T6570]  __kmalloc_cache_noprof+0x80/0x810
[  115.668771][ T6570]  ? ovs_ct_limit_cmd_set+0x30a/0xa70
[  115.668789][ T6570]  ? ovs_ct_limit_cmd_set+0x30a/0xa70
[  115.668803][ T6570]  ovs_ct_limit_cmd_set+0x30a/0xa70
[  115.668820][ T6570]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  115.668836][ T6570]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290
[  115.668855][ T6570]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290
[  115.668876][ T6570]  genl_family_rcv_msg_doit+0x214/0x300
[  115.668896][ T6570]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  115.668918][ T6570]  ? bpf_lsm_capable+0x9/0x10
[  115.668934][ T6570]  ? security_capable+0x80/0x260
[  115.668951][ T6570]  ? ns_capable+0xd2/0xf0
[  115.668968][ T6570]  genl_rcv_msg+0x560/0x800
[  115.668979][ T6570]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.668990][ T6570]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  115.669013][ T6570]  netlink_rcv_skb+0x159/0x420
[  115.669029][ T6570]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.669040][ T6570]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.669061][ T6570]  ? netlink_deliver_tap+0x1ae/0xcc0
[  115.669078][ T6570]  genl_rcv+0x28/0x40
[  115.669093][ T6570]  netlink_unicast+0x5aa/0x870
[  115.669111][ T6570]  ? __pfx_netlink_unicast+0x10/0x10
[  115.669126][ T6570]  ? __asan_memset+0x23/0x50
[  115.669137][ T6570]  ? __build_skb_around+0x278/0x390
[  115.669152][ T6570]  netlink_sendmsg+0x8b0/0xda0
[  115.669170][ T6570]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.669185][ T6570]  ? PageHuge+0x180/0x180
[  115.669201][ T6570]  ____sys_sendmsg+0xa54/0xc30
[  115.669220][ T6570]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.669240][ T6570]  ? ___sys_sendmsg+0x118/0x1e0
[  115.669253][ T6570]  ___sys_sendmsg+0x190/0x1e0
[  115.669265][ T6570]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.669282][ T6570]  ? find_held_lock+0x2b/0x80
[  115.669306][ T6570]  __sys_sendmsg+0x170/0x220
[  115.669320][ T6570]  ? __pfx___sys_sendmsg+0x10/0x10
[  115.669339][ T6570]  ? trace_csd_function_exit+0x71/0x1b0
[  115.669359][ T6570]  do_syscall_64+0xc9/0xf80
[  115.669372][ T6570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.669384][ T6570] RIP: 0033:0x7f2c4bb9acb9
[  115.669394][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.669409][ T6570] RSP: 002b:00007f2c4cb22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.669420][ T6570] RAX: ffffffffffffffda RBX: 00007f2c4be15fa0 RCX: 00007f2c4bb9acb9
[  115.669427][ T6570] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000005
[  115.669433][ T6570] RBP: 00007f2c4cb22090 R08: 0000000000000000 R09: 0000000000000000
[  115.669439][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.669445][ T6570] R13: 00007f2c4be16038 R14: 00007f2c4be15fa0 R15: 00007ffe67e22b08
[  115.669459][ T6570]  </TASK>
[  116.283648][ T6578] binder: 6572:6578 ioctl 400c620e 200000000080 returned -22
[  116.602824][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  116.731111][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  116.731121][   T30] audit: type=1400 audit(1769076258.637:314): avc:  denied  { write } for  pid=6583 comm="syz.0.166" path="socket:[11741]" dev="sockfs" ino=11741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  116.760898][ T6584] Bluetooth: MGMT ver 1.23
[  116.805850][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  116.816774][ T5876] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.837078][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0
[  116.844561][   T30] audit: type=1400 audit(1769076258.740:315): avc:  denied  { watch } for  pid=6587 comm="syz.4.168" path="/34/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  116.878623][ T5876] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  116.897696][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.911425][   T30] audit: type=1400 audit(1769076258.740:316): avc:  denied  { watch_sb watch_reads } for  pid=6587 comm="syz.4.168" path="/34/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  116.951541][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.961329][ T5876] usb 3-1: config 0 descriptor??
[  117.019811][   T30] audit: type=1400 audit(1769076258.740:317): avc:  denied  { execute } for  pid=6587 comm="syz.4.168" path="/34/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  117.126851][ T5931] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  117.146604][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.165894][ T5888] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  117.178375][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  117.198863][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.230149][ T5931] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  117.232415][ T5888] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  117.265385][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  117.294260][ T5931] usb 4-1: Product: syz
[  117.309455][ T5931] usb 4-1: Manufacturer: syz
[  117.339433][ T5931] cdc_wdm 4-1:1.0: skipping garbage
[  117.358765][ T5931] cdc_wdm 4-1:1.0: skipping garbage
[  117.375396][ T6600] fido_id[6600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  117.397999][ T5931] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  117.428223][ T5931] cdc_wdm 4-1:1.0: Unknown control protocol
[  117.435855][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.446346][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.572838][   T30] audit: type=1400 audit(1769076259.422:318): avc:  denied  { setattr } for  pid=6577 comm="syz.2.164" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  117.677376][ T6602] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[  117.904832][ T6602] ip6gre1: entered promiscuous mode
[  117.950339][ T6602] ip6gre1: entered allmulticast mode
[  118.183142][   T30] audit: type=1400 audit(1769076259.928:319): avc:  denied  { ioctl } for  pid=6605 comm="syz.1.172" path="socket:[11762]" dev="sockfs" ino=11762 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  118.202265][ T6609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'.
[  118.412135][   T30] audit: type=1400 audit(1769076260.208:320): avc:  denied  { write } for  pid=6577 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.517154][ T5876] usbhid 3-1:0.0: can't add hid device: -71
[  118.517227][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  118.538461][ T5876] usb 3-1: USB disconnect, device number 9
[  118.672479][ T6177] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  118.680514][ T5869] usb 4-1: USB disconnect, device number 5
[  118.732158][ T6177] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  118.750490][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  118.761742][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.769250][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.852868][ T6622] bridge0: entered allmulticast mode
[  118.876812][ T6622] netlink: 'syz.1.174': attribute type 2 has an invalid length.
[  118.937755][ T6625] bridge_slave_1: left allmulticast mode
[  118.950968][ T6625] bridge_slave_1: left promiscuous mode
[  118.962996][   T30] audit: type=1400 audit(1769076260.723:321): avc:  denied  { read open } for  pid=6626 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.993925][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.030863][ T5931] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  119.049555][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.057613][   T30] audit: type=1400 audit(1769076260.751:322): avc:  denied  { getattr } for  pid=6626 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.087355][ T5931] usb 5-1: Product: syz
[  119.091804][ T5931] usb 5-1: Manufacturer: syz
[  119.098098][ T5931] usb 5-1: SerialNumber: syz
[  119.219044][ T6625] bridge_slave_0: left allmulticast mode
[  119.225466][ T6625] bridge_slave_0: left promiscuous mode
[  119.234773][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.759656][ T5931] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  121.071812][   T30] audit: type=1400 audit(1769076262.696:323): avc:  denied  { add_name } for  pid=6624 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.097236][ T5931] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  121.119756][ T5931] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  121.214654][ T5931] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  121.323243][ T5931] usb 5-1: USB disconnect, device number 7
[  121.725159][ T6661] binder: 6655:6661 ioctl 400c620e 200000000080 returned -22
[  122.888048][ T5931] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  123.062330][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  123.084743][ T5931] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  123.113524][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.136548][ T5931] usb 2-1: config 0 descriptor??
[  123.251115][ T6177] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  123.519698][ T6177] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  123.553835][ T6177] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.620169][ T6695] autofs: Unknown parameter '|��Em�z��ѓi�1w'
[  123.660365][ T6177] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  123.734316][ T6177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.871691][ T5931] usbhid 2-1:0.0: can't add hid device: -71
[  123.888724][ T6177] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  123.889865][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  123.908903][ T6177] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  123.914174][ T5931] usb 2-1: USB disconnect, device number 7
[  123.930823][ T6177] usb 1-1: Product: syz
[  123.959380][ T6177] usb 1-1: Manufacturer: syz
[  123.977952][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  123.997952][ T6177] cdc_wdm 1-1:1.0: skipping garbage
[  124.010420][ T6177] cdc_wdm 1-1:1.0: skipping garbage
[  124.037118][ T6177] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  124.046716][ T6177] cdc_wdm 1-1:1.0: Unknown control protocol
[  124.071853][ T6697] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  124.130476][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  124.130490][   T30] audit: type=1400 audit(1769076265.559:329): avc:  denied  { getopt } for  pid=6699 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.191730][ T5883] usb 5-1: Using ep0 maxpacket: 32
[  124.198137][ T5883] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  124.213077][ T5883] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  124.245173][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  124.254925][ T5883] usb 5-1: config 1 has no interface number 0
[  124.266548][ T5883] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.277672][ T5883] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  124.292518][ T5883] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  124.302689][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.326561][ T5883] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  124.394028][ T6705] FAULT_INJECTION: forcing a failure.
[  124.394028][ T6705] name failslab, interval 1, probability 0, space 0, times 0
[  124.408163][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.1.190 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.408189][ T6705] Tainted: [L]=SOFTLOCKUP
[  124.408195][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  124.408204][ T6705] Call Trace:
[  124.408210][ T6705]  <TASK>
[  124.408215][ T6705]  dump_stack_lvl+0x100/0x190
[  124.408243][ T6705]  should_fail_ex.cold+0x5/0xa
[  124.408258][ T6705]  should_failslab+0xc2/0x120
[  124.408274][ T6705]  ? tomoyo_encode2+0xfb/0x3c0
[  124.408289][ T6705]  __kmalloc_noprof+0xf6/0x9c0
[  124.408305][ T6705]  ? tomoyo_encode2+0xfb/0x3c0
[  124.408318][ T6705]  tomoyo_encode2+0xfb/0x3c0
[  124.408339][ T6705]  tomoyo_encode+0x29/0x50
[  124.408354][ T6705]  tomoyo_realpath_from_path+0x18c/0x690
[  124.408377][ T6705]  tomoyo_path_number_perm+0x23c/0x580
[  124.408399][ T6705]  ? tomoyo_path_number_perm+0x22e/0x580
[  124.408417][ T6705]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  124.408449][ T6705]  ? find_held_lock+0x2b/0x80
[  124.408466][ T6705]  ? hook_file_ioctl_common+0x146/0x410
[  124.408486][ T6705]  ? __fget_files+0x215/0x3d0
[  124.408508][ T6705]  ? __fget_files+0x21f/0x3d0
[  124.408530][ T6705]  security_file_ioctl+0xd3/0x230
[  124.408546][ T6705]  __x64_sys_ioctl+0xb7/0x210
[  124.408557][ T6705]  do_syscall_64+0xc9/0xf80
[  124.408570][ T6705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.408581][ T6705] RIP: 0033:0x7fb332b9acb9
[  124.408591][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.408601][ T6705] RSP: 002b:00007fb33397c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.408616][ T6705] RAX: ffffffffffffffda RBX: 00007fb332e15fa0 RCX: 00007fb332b9acb9
[  124.408627][ T6705] RDX: 0000200000000040 RSI: 00000000c0305602 RDI: 0000000000000003
[  124.408642][ T6705] RBP: 00007fb33397c090 R08: 0000000000000000 R09: 0000000000000000
[  124.408651][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.408660][ T6705] R13: 00007fb332e16038 R14: 00007fb332e15fa0 R15: 00007ffedda9a1b8
[  124.408683][ T6705]  </TASK>
[  124.408707][ T6705] ERROR: Out of memory at tomoyo_realpath_from_path.
[  124.626028][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  124.749933][ T5883] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  124.825023][ T5869] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  124.852582][   T30] audit: type=1400 audit(1769076266.232:330): avc:  denied  { bind } for  pid=6682 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.874912][ T5883] usb 1-1: USB disconnect, device number 9
[  124.875985][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.918133][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  124.932384][ T5869] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.934516][   T30] audit: type=1400 audit(1769076266.307:331): avc:  denied  { create } for  pid=6708 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  124.978086][ T5869] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  124.994123][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  125.011592][   T30] audit: type=1400 audit(1769076266.335:332): avc:  denied  { write } for  pid=6708 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  125.116886][ T5869] usb 4-1: Product: syz
[  125.121580][ T5869] usb 4-1: Manufacturer: syz
[  125.131467][ T5869] cdc_wdm 4-1:1.0: skipping garbage
[  125.136752][ T5869] cdc_wdm 4-1:1.0: skipping garbage
[  125.143320][ T5869] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  125.149215][ T5869] cdc_wdm 4-1:1.0: Unknown control protocol
[  125.541063][   T30] audit: type=1400 audit(1769076266.597:333): avc:  denied  { getopt } for  pid=6708 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  125.572306][   T30] audit: type=1400 audit(1769076266.597:334): avc:  denied  { bind } for  pid=6708 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  125.611299][ T5888] usb 5-1: USB disconnect, device number 8
[  125.622453][ T5888] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  125.822764][ T6708] delete_channel: no stack
[  125.941875][ T6720] tipc: Started in network mode
[  125.969890][ T6720] tipc: Node identity 2a50eee8d818, cluster identity 4711
[  125.978871][ T6720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.052315][ T6725] syzkaller0: entered promiscuous mode
[  126.100336][ T6725] syzkaller0: entered allmulticast mode
[  126.138329][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[  126.147094][ T6718] tipc: Resetting bearer <eth:syzkaller0>
[  126.154892][ T5869] usb 4-1: USB disconnect, device number 6
[  126.204320][ T6718] tipc: Disabling bearer <eth:syzkaller0>
[  126.531332][   T30] audit: type=1400 audit(1769076267.804:335): avc:  denied  { create } for  pid=6733 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  126.627386][   T30] audit: type=1400 audit(1769076267.878:336): avc:  denied  { ioctl } for  pid=6733 comm="syz.2.199" path="socket:[11117]" dev="sockfs" ino=11117 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  126.802052][   T30] audit: type=1400 audit(1769076267.888:337): avc:  denied  { create } for  pid=6733 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  127.440663][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  127.457797][ T5916] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  127.476310][ T5916] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  127.837248][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  127.844043][ T5869] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  127.860289][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.913643][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.958263][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.958288][ T5869] usb 4-1: Product: syz
[  127.958302][ T5869] usb 4-1: Manufacturer: syz
[  127.958318][ T5869] usb 4-1: SerialNumber: syz
[  127.964835][ T6751] fido_id[6751]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  128.513028][   T30] audit: type=1400 audit(1769076269.656:338): avc:  denied  { search } for  pid=6762 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.170696][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[  130.478552][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  130.478582][   T30] audit: type=1400 audit(1769076271.498:365): avc:  denied  { read append } for  pid=6774 comm="syz.2.206" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  130.783057][   T30] audit: type=1400 audit(1769076271.498:366): avc:  denied  { open } for  pid=6774 comm="syz.2.206" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  130.825314][ T5869] usb 4-1: 0:2 : does not exist
[  130.874655][ T5869] usb 4-1: USB disconnect, device number 7
[  130.891699][   T30] audit: type=1400 audit(1769076271.592:367): avc:  denied  { map } for  pid=6774 comm="syz.2.206" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  131.011228][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.097873][   T30] audit: type=1400 audit(1769076271.592:368): avc:  denied  { write execute } for  pid=6774 comm="syz.2.206" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  131.386625][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.486551][   T30] audit: type=1400 audit(1769076271.667:369): avc:  denied  { create } for  pid=6779 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  131.525221][ T6055] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  131.607063][   T30] audit: type=1400 audit(1769076271.732:370): avc:  denied  { write } for  pid=6779 comm="syz.0.207" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.722375][ T6055] usb 2-1: no configurations
[  131.724805][   T30] audit: type=1400 audit(1769076271.732:371): avc:  denied  { open } for  pid=6779 comm="syz.0.207" path="/dev/comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.727001][ T6055] usb 2-1: can't read configurations, error -22
[  131.857361][ T6055] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  131.880415][   T30] audit: type=1400 audit(1769076271.742:372): avc:  denied  { remove_name } for  pid=6778 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.921677][   T30] audit: type=1400 audit(1769076271.742:373): avc:  denied  { unlink } for  pid=6778 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  132.113146][   T30] audit: type=1400 audit(1769076271.742:374): avc:  denied  { read write } for  pid=5821 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  132.138887][ T6055] usb 2-1: no configurations
[  132.149160][ T6055] usb 2-1: can't read configurations, error -22
[  132.163980][ T6055] usb usb2-port1: attempt power cycle
[  132.251624][ T6821] tipc: Started in network mode
[  132.261318][ T6821] tipc: Node identity 1af7b1201be7, cluster identity 4711
[  132.280703][ T6821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.300019][ T6821] syzkaller0: entered promiscuous mode
[  132.314474][ T6821] syzkaller0: entered allmulticast mode
[  132.467835][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.3.216'.
[  132.503050][ T6825] tipc: Resetting bearer <eth:syzkaller0>
[  132.535885][ T6820] tipc: Resetting bearer <eth:syzkaller0>
[  132.553288][ T6055] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  132.561834][ T6820] tipc: Disabling bearer <eth:syzkaller0>
[  132.585300][ T6055] usb 2-1: no configurations
[  132.590464][ T6055] usb 2-1: can't read configurations, error -22
[  132.830499][ T6055] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  132.953277][ T6055] usb 2-1: no configurations
[  132.968771][ T6055] usb 2-1: can't read configurations, error -22
[  132.996832][ T6055] usb usb2-port1: unable to enumerate USB device
[  133.044771][ T6841] xt_hashlimit: size too large, truncated to 1048576
[  133.107187][ T6848] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  133.123265][ T6848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.193674][ T6850] binder: 6843:6850 ioctl 400c620e 200000000080 returned -22
[  133.733618][ T6856] FAULT_INJECTION: forcing a failure.
[  133.733618][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.746878][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.3.227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.746897][ T6856] Tainted: [L]=SOFTLOCKUP
[  133.746901][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  133.746907][ T6856] Call Trace:
[  133.746911][ T6856]  <TASK>
[  133.746915][ T6856]  dump_stack_lvl+0x100/0x190
[  133.746933][ T6856]  should_fail_ex.cold+0x5/0xa
[  133.746946][ T6856]  _copy_from_user+0x2e/0xd0
[  133.746962][ T6856]  copy_msghdr_from_user+0x9f/0x4f0
[  133.746974][ T6856]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  133.746997][ T6856]  ___sys_sendmsg+0x106/0x1e0
[  133.747014][ T6856]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.747031][ T6856]  ? find_held_lock+0x2b/0x80
[  133.747059][ T6856]  __sys_sendmsg+0x170/0x220
[  133.747081][ T6856]  ? __pfx___sys_sendmsg+0x10/0x10
[  133.747117][ T6856]  do_syscall_64+0xc9/0xf80
[  133.747135][ T6856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.747147][ T6856] RIP: 0033:0x7f2c4bb9acb9
[  133.747156][ T6856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.747167][ T6856] RSP: 002b:00007f2c4cb22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.747178][ T6856] RAX: ffffffffffffffda RBX: 00007f2c4be15fa0 RCX: 00007f2c4bb9acb9
[  133.747185][ T6856] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  133.747191][ T6856] RBP: 00007f2c4cb22090 R08: 0000000000000000 R09: 0000000000000000
[  133.747198][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.747204][ T6856] R13: 00007f2c4be16038 R14: 00007f2c4be15fa0 R15: 00007ffe67e22b08
[  133.747218][ T6856]  </TASK>
[  136.135231][   T30] kauditd_printk_skb: 95 callbacks suppressed
[  136.135242][   T30] audit: type=1400 audit(1769076276.793:470): avc:  denied  { create } for  pid=6885 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.190190][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  136.234505][   T30] audit: type=1400 audit(1769076276.830:471): avc:  denied  { create } for  pid=6880 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.475361][   T30] audit: type=1400 audit(1769076276.868:472): avc:  denied  { read write } for  pid=6888 comm="syz.0.236" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  136.499305][   T30] audit: type=1400 audit(1769076276.868:473): avc:  denied  { open } for  pid=6888 comm="syz.0.236" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  136.526742][   T30] audit: type=1400 audit(1769076276.896:474): avc:  denied  { read } for  pid=6888 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.575923][   T30] audit: type=1400 audit(1769076277.083:475): avc:  denied  { setopt } for  pid=6888 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  136.581832][ T6897] capability: warning: `syz.2.239' uses 32-bit capabilities (legacy support in use)
[  136.634465][   T30] audit: type=1400 audit(1769076277.251:476): avc:  denied  { read } for  pid=6896 comm="syz.2.239" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  136.636197][ T6897] program syz.2.239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.668865][   T30] audit: type=1400 audit(1769076277.251:477): avc:  denied  { open } for  pid=6896 comm="syz.2.239" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  136.753961][ T6901] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  137.459954][ T6055] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.547110][   T30] audit: type=1400 audit(1769076278.074:478): avc:  denied  { setopt } for  pid=6903 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.584075][   T30] audit: type=1400 audit(1769076278.140:479): avc:  denied  { map } for  pid=6912 comm="syz.4.244" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  137.630145][ T6055] usb 4-1: Using ep0 maxpacket: 8
[  137.639029][ T6055] usb 4-1: unable to get BOS descriptor or descriptor too short
[  137.647942][ T6055] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  137.671248][ T6055] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  137.685782][ T6055] usb 4-1: config 4 has no interface number 0
[  137.702089][ T6055] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  137.712761][ T6055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.726461][ T6057] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  137.732470][ T6055] usb 4-1: Product: syz
[  137.749881][ T6055] usb 4-1: Manufacturer: syz
[  137.754512][ T6055] usb 4-1: SerialNumber: syz
[  137.765743][ T6918] evm: overlay not supported
[  137.789432][ T6918] 9p: Bad value for 'uname'
[  137.875752][ T6057] usb 1-1: device descriptor read/64, error -71
[  137.918684][ T5817] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  138.090872][ T5817] usb 3-1: Using ep0 maxpacket: 32
[  138.097791][ T5817] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  138.109175][ T5817] usb 3-1: config 0 has no interface number 0
[  138.118906][ T5817] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  138.119638][ T6055] uvcvideo 4-1:4.147: Found UVC 0.00 device syz (04f2:b746)
[  138.137478][ T5817] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  138.141043][ T6055] uvcvideo 4-1:4.147: No valid video chain found.
[  138.152356][ T5817] usb 3-1: config 0 interface 48 has no altsetting 0
[  138.165813][ T6057] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  138.173468][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  138.199706][ T5817] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  138.200302][ T6055] usb 4-1: USB disconnect, device number 8
[  138.209193][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.229512][ T5817] usb 3-1: config 0 descriptor??
[  138.325199][ T6057] usb 1-1: device descriptor read/64, error -71
[  138.358182][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  138.366865][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.377769][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  138.386901][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.399008][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  138.411522][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  138.419559][ T5916] usb 5-1: Product: syz
[  138.423750][ T5916] usb 5-1: Manufacturer: syz
[  138.432636][ T5916] cdc_wdm 5-1:1.0: skipping garbage
[  138.437892][ T5916] cdc_wdm 5-1:1.0: skipping garbage
[  138.443635][ T6057] usb usb1-port1: attempt power cycle
[  138.450928][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  138.456939][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol
[  138.675891][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.687444][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.833403][ T5817] usb 3-1: string descriptor 0 read error: -71
[  138.846630][ T5817] as10x_usb: device has been detected
[  138.852912][ T5817] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  138.860276][ T6057] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  138.871358][ T5817] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  138.885318][ T5916] usb 5-1: USB disconnect, device number 9
[  138.900055][ T5817] as10x_usb: error during firmware upload part1
[  138.907059][ T6057] usb 1-1: device descriptor read/8, error -71
[  138.915664][ T5817] Registered device nBox DVB-T Dongle
[  138.919951][ T5817] usb 3-1: USB disconnect, device number 10
[  138.976313][ T5817] Unregistered device nBox DVB-T Dongle
[  138.986235][ T5817] as10x_usb: device has been disconnected
[  139.064744][ T6934] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[  139.125646][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'.
[  139.155622][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.173826][ T6936] bond1: entered allmulticast mode
[  139.186743][ T6057] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  139.231422][ T6057] usb 1-1: device descriptor read/8, error -71
[  139.390595][ T6057] usb usb1-port1: unable to enumerate USB device
[  140.097974][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'.
[  140.112065][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6949 comm=syz.2.254
[  140.707979][ T6970] mmap: syz.1.265 (6970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  141.565480][ T6057] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  141.775265][ T6057] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  141.805274][ T6057] usb 1-1: config 0 has no interface number 0
[  141.957876][ T6057] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  142.031913][ T6057] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  142.062932][ T6057] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  142.087914][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.099927][ T6985] syz.1.270 (6985) used greatest stack depth: 19104 bytes left
[  142.108520][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  142.108533][   T30] audit: type=1400 audit(1769076282.368:505): avc:  denied  { ioctl } for  pid=6983 comm="syz.1.270" path="socket:[13578]" dev="sockfs" ino=13578 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  142.117839][ T6057] usb 1-1: config 0 descriptor??
[  142.195500][ T6976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.224951][ T6057] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  142.423484][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.454301][   T30] audit: type=1400 audit(1769076282.686:506): avc:  denied  { read } for  pid=7007 comm="syz.4.277" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  142.470720][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.552109][   T30] audit: type=1400 audit(1769076282.686:507): avc:  denied  { open } for  pid=7007 comm="syz.4.277" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  142.622975][ T7009] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  142.630474][ T7009] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  142.676159][   T30] audit: type=1400 audit(1769076282.770:508): avc:  denied  { append } for  pid=7007 comm="syz.4.277" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  142.743059][   T30] audit: type=1400 audit(1769076282.817:509): avc:  denied  { write } for  pid=6975 comm="syz.0.267" name="iowarrior0" dev="devtmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  142.843941][ T7009] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  142.863295][ T7009] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  142.869724][ T7009] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  142.880229][ T7009] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  142.887774][ T7009] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  142.894738][ T7009] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  142.903352][ T7009] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  142.910681][ T7009] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  142.916947][ T7009] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  142.991704][ T7009] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  143.010776][ T7009] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  143.024120][ T7009] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.067464][ T7009] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.114832][ T5916] usb 1-1: USB disconnect, device number 14
[  143.264136][   T30] audit: type=1400 audit(1769076283.462:510): avc:  denied  { getopt } for  pid=7028 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  143.563114][ T5916] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  144.506719][   T30] audit: type=1400 audit(1769076284.622:511): avc:  denied  { name_bind } for  pid=7017 comm="syz.1.279" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  144.551823][ T5916] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  144.728944][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout
[  144.739289][   T30] audit: type=1400 audit(1769076284.641:512): avc:  denied  { node_bind } for  pid=7017 comm="syz.1.279" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  144.859239][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.977802][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  145.019336][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.064038][ T5916] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  145.073238][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.073258][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout
[  145.073277][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.100035][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  145.130972][ T5916] usb 1-1: Product: syz
[  145.150871][ T5916] usb 1-1: Manufacturer: syz
[  145.164929][   T30] audit: type=1400 audit(1769076285.230:513): avc:  denied  { create } for  pid=7045 comm="syz.2.288" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  145.209720][ T5916] cdc_wdm 1-1:1.0: skipping garbage
[  145.224488][ T5916] cdc_wdm 1-1:1.0: skipping garbage
[  145.238498][ T5916] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  145.247093][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  145.262541][   T30] audit: type=1400 audit(1769076285.258:514): avc:  denied  { read write } for  pid=7045 comm="syz.2.288" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  145.294105][ T5916] cdc_wdm 1-1:1.0: Unknown control protocol
[  145.446827][ T7055] 9p: Bad value for 'wfdno'
[  146.407334][ T7065] tc_dump_action: action bad kind
[  146.489516][ T6055] usb 1-1: USB disconnect, device number 15
[  146.564308][ T7068] Bluetooth: MGMT ver 1.23
[  146.771497][ T7073] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.294'.
[  146.829750][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  147.017190][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.319771][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.319792][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout
[  147.319802][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.465198][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  147.501339][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  147.501360][   T30] audit: type=1400 audit(1769076287.419:554): avc:  denied  { read } for  pid=7078 comm="syz.0.297" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  147.746562][   T30] audit: type=1400 audit(1769076287.447:555): avc:  denied  { open } for  pid=7078 comm="syz.0.297" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  148.001290][   T30] audit: type=1400 audit(1769076287.466:556): avc:  denied  { ioctl } for  pid=7078 comm="syz.0.297" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  148.234077][   T30] audit: type=1400 audit(1769076288.083:557): avc:  denied  { create } for  pid=7085 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  148.341558][ T7096] tipc: Started in network mode
[  148.346530][ T7096] tipc: Node identity 84e, cluster identity 4711
[  148.352953][   T30] audit: type=1400 audit(1769076288.195:558): avc:  denied  { create } for  pid=7085 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  148.384800][   T30] audit: type=1400 audit(1769076288.195:559): avc:  denied  { setopt } for  pid=7085 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  148.407619][ T7096] tipc: Node number set to 2126
[  148.438177][ T7088] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  148.469926][ T7101] ieee802154 phy0 wpan0: encryption failed: -22
[  148.504103][   T30] audit: type=1400 audit(1769076288.317:560): avc:  denied  { write } for  pid=7085 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  148.603922][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'.
[  148.615099][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'.
[  148.627156][ T5973] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  148.637547][   T30] audit: type=1400 audit(1769076288.448:561): avc:  denied  { read write } for  pid=7103 comm="syz.4.302" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  148.662186][ T5973] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  148.704136][   T30] audit: type=1400 audit(1769076288.448:562): avc:  denied  { open } for  pid=7103 comm="syz.4.302" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  148.801522][ T5916] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  148.876357][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  148.997268][ T5916] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  149.007185][ T5916] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  149.019931][   T24] usb 3-1: device descriptor read/64, error -71
[  149.030322][ T7120] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  149.038441][   T30] audit: type=1400 audit(1769076288.850:563): avc:  denied  { mount } for  pid=7112 comm="syz.1.304" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  149.487007][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout
[  149.508820][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0
[  149.517877][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[  149.524277][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  149.528581][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout
[  149.546758][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  149.555976][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  149.564402][ T5916] usb 1-1: Product: syz
[  149.569121][ T5916] usb 1-1: Manufacturer: syz
[  149.574003][ T5916] usb 1-1: SerialNumber: syz
[  149.596931][ T5916] usb 1-1: config 0 descriptor??
[  149.606837][ T5916] hub 1-1:0.0: bad descriptor, ignoring hub
[  149.613020][ T5916] hub 1-1:0.0: probe with driver hub failed with error -5
[  149.632736][ T5916] usb 1-1: selecting invalid altsetting 0
[  149.690216][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout
[  149.752990][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  149.827652][ T5973] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  149.913330][   T24] usb 3-1: device descriptor read/64, error -71
[  149.967980][ T5916] usb 1-1: USB disconnect, device number 16
[  150.032430][   T24] usb usb3-port1: attempt power cycle
[  150.236185][ T5973] usb 5-1: config 0 has no interfaces?
[  150.250766][ T5973] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  150.259874][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.274389][ T5973] usb 5-1: Product: syz
[  150.282669][ T5973] usb 5-1: Manufacturer: syz
[  150.287303][ T5973] usb 5-1: SerialNumber: syz
[  150.333283][ T5973] usb 5-1: config 0 descriptor??
[  150.554779][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  150.660321][ T7137] CIFS mount error: No usable UNC path provided in device string!
[  150.660321][ T7137] 
[  150.671532][ T7137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  150.673510][   T24] usb 3-1: device descriptor read/8, error -71
[  150.759628][ T5973] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  150.911941][ T6057] usb 5-1: USB disconnect, device number 10
[  151.036041][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  151.052385][ T5973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.105187][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  151.175654][ T5973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.400930][ T5973] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  151.429546][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.464765][ T5973] usb 4-1: Product: syz
[  151.483147][ T5973] usb 4-1: Manufacturer: syz
[  151.505039][ T5973] usb 4-1: SerialNumber: syz
[  151.679935][ T5973] usb 4-1: config 0 descriptor??
[  152.223794][   T24] usb 3-1: device not accepting address 14, error -71
[  152.267332][   T24] usb usb3-port1: unable to enumerate USB device
[  152.301885][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'.
[  152.311031][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'.
[  152.335229][ T6055] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  152.365028][ T6055] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  152.618078][   T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  152.813573][   T24] usb 3-1: config 4 has an invalid interface number: 118 but max is 0
[  152.822750][   T24] usb 3-1: config 4 has no interface number 0
[  152.828930][   T24] usb 3-1: config 4 interface 118 has no altsetting 0
[  152.835963][   T24] usb 3-1: New USB device found, idVendor=01c0, idProduct=05df, bcdDevice=b0.71
[  152.859728][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.888885][   T24] usbhid 3-1:4.118: couldn't find an input interrupt endpoint
[  152.902797][ T7178] netlink: 'syz.4.320': attribute type 1 has an invalid length.
[  152.910602][ T7178] netlink: 'syz.4.320': attribute type 2 has an invalid length.
[  152.918975][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  152.918988][   T30] audit: type=1400 audit(1769076292.470:579): avc:  denied  { connect } for  pid=7169 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  152.958430][   T30] audit: type=1400 audit(1769076292.517:580): avc:  denied  { mounton } for  pid=7174 comm="syz.1.322" path="/61/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  153.088328][   T30] audit: type=1400 audit(1769076292.620:581): avc:  denied  { name_bind } for  pid=7179 comm="syz.0.323" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  153.125591][   T24] usb 3-1: USB disconnect, device number 15
[  153.211721][ T7187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7187 comm=syz.0.324
[  153.234401][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[  153.614631][ T7132] overlayfs: statfs failed on './file0'
[  153.660476][ T5973] usb 4-1: USB disconnect, device number 9
[  154.894377][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'.
[  154.962389][   T30] audit: type=1400 audit(1769076294.397:582): avc:  denied  { watch watch_reads } for  pid=7207 comm="syz.0.331" path="/61" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  154.989630][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'.
[  155.018311][   T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  155.077127][   T24] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  155.093519][ T5916] IPVS: starting estimator thread 0...
[  155.215933][ T7216] IPVS: using max 48 ests per chain, 115200 per kthread
[  155.230086][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[  155.245352][   T30] audit: type=1400 audit(1769076294.659:583): avc:  denied  { sqpoll } for  pid=7222 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  155.273568][ T7211] nbd0: detected capacity change from 0 to 127
[  155.288030][ T7219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.332'.
[  155.300136][   T30] audit: type=1400 audit(1769076294.696:584): avc:  denied  { ioctl } for  pid=7222 comm="syz.0.333" path="socket:[14227]" dev="sockfs" ino=14227 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  155.328328][ T5812] block nbd0: Receive control failed (result -104)
[  155.342624][ T7232] sp0: Synchronizing with TNC
[  155.355810][ T7234] FAULT_INJECTION: forcing a failure.
[  155.355810][ T7234] name failslab, interval 1, probability 0, space 0, times 0
[  155.377955][ T7232] [U] �
[  155.382867][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.3.336 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.382895][ T7234] Tainted: [L]=SOFTLOCKUP
[  155.382901][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  155.382911][ T7234] Call Trace:
[  155.382918][ T7234]  <TASK>
[  155.382924][ T7234]  dump_stack_lvl+0x100/0x190
[  155.382954][ T7234]  should_fail_ex.cold+0x5/0xa
[  155.382973][ T7234]  should_failslab+0xc2/0x120
[  155.382996][ T7234]  ? snd_ctl_elem_add+0x3c1/0x1390
[  155.383021][ T7234]  __kmalloc_noprof+0xf6/0x9c0
[  155.383037][ T7234]  ? down_write+0x146/0x1f0
[  155.383057][ T7234]  ? __pfx_down_write+0x10/0x10
[  155.383079][ T7234]  ? snd_ctl_elem_add+0x3c1/0x1390
[  155.383103][ T7234]  snd_ctl_elem_add+0x3c1/0x1390
[  155.383137][ T7234]  snd_ctl_elem_add_user+0xc5/0x170
[  155.383160][ T7234]  ? __pfx_snd_ctl_elem_add_user+0x10/0x10
[  155.383183][ T7234]  ? find_held_lock+0x2b/0x80
[  155.383220][ T7234]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  155.383242][ T7234]  ? do_vfs_ioctl+0x226/0x13e0
[  155.383260][ T7234]  snd_ctl_ioctl+0xbdf/0x1330
[  155.383284][ T7234]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  155.383322][ T7234]  ? selinux_file_ioctl+0x139/0x290
[  155.383339][ T7234]  ? selinux_file_ioctl+0xb4/0x290
[  155.383359][ T7234]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  155.383384][ T7234]  __x64_sys_ioctl+0x18e/0x210
[  155.383402][ T7234]  do_syscall_64+0xc9/0xf80
[  155.383422][ T7234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.383438][ T7234] RIP: 0033:0x7f2c4bb9acb9
[  155.383451][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.383464][ T7234] RSP: 002b:00007f2c4cb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.383480][ T7234] RAX: ffffffffffffffda RBX: 00007f2c4be15fa0 RCX: 00007f2c4bb9acb9
[  155.383490][ T7234] RDX: 0000200000000480 RSI: 00000000c1105517 RDI: 0000000000000003
[  155.383500][ T7234] RBP: 00007f2c4cb22090 R08: 0000000000000000 R09: 0000000000000000
[  155.383510][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.383525][ T7234] R13: 00007f2c4be16038 R14: 00007f2c4be15fa0 R15: 00007ffe67e22b08
[  155.383547][ T7234]  </TASK>
[  155.610217][ T7226] block nbd4: shutting down sockets
[  156.040626][   T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  156.048249][   T30] audit: type=1400 audit(1769076295.379:585): avc:  denied  { write } for  pid=7238 comm="syz.3.338" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.072551][   T24] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.121445][   T24] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  156.182085][   T24] hid-generic 0000:0000:0000.000E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.722989][   T30] audit: type=1400 audit(1769076296.043:586): avc:  denied  { write } for  pid=7258 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.455386][   T30] audit: type=1400 audit(1769076296.043:587): avc:  denied  { nlmsg_write } for  pid=7258 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.478419][ T7256] fido_id[7256]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.655027][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.340'.
[  157.828400][   T30] audit: type=1400 audit(1769076297.082:588): avc:  denied  { connect } for  pid=7264 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  158.082862][ T5973] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  158.369663][ T5973] usb 2-1: Using ep0 maxpacket: 16
[  158.376567][ T5973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.412526][ T5973] usb 2-1: config 0 has no interfaces?
[  158.448186][ T5973] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  158.476740][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  158.484861][ T5973] usb 2-1: Product: syz
[  158.519017][ T5973] usb 2-1: Manufacturer: syz
[  158.526198][ T5973] usb 2-1: SerialNumber: syz
[  158.551944][ T5973] usb 2-1: config 0 descriptor??
[  158.563565][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  158.563582][   T30] audit: type=1326 audit(1769076297.765:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.0.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99b8b9acb9 code=0x0
[  158.614996][ T7285] cgroup: subsys name conflicts with all
[  158.728256][   T30] audit: type=1400 audit(1769076297.924:594): avc:  denied  { connect } for  pid=7289 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  158.959128][   T30] audit: type=1400 audit(1769076298.129:595): avc:  denied  { bind } for  pid=7289 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  158.966531][   T50] block nbd0: Connection timed out, retrying (0/1 alive)
[  158.994421][   T50] block nbd0: Connection timed out, retrying (0/1 alive)
[  159.001766][   T25] block nbd0: Dead connection, failed to find a fallback
[  159.009057][   T30] audit: type=1400 audit(1769076298.129:596): avc:  denied  { write } for  pid=7289 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  159.010914][   T50] block nbd0: Connection timed out, retrying (0/1 alive)
[  159.037701][   T25] block nbd0: shutting down sockets
[  159.043441][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.054345][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  159.063221][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.073207][   T50] block nbd0: Connection timed out, retrying (0/1 alive)
[  159.077565][   T30] audit: type=1400 audit(1769076298.139:597): avc:  denied  { setopt } for  pid=7289 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  159.080366][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  159.108345][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  159.116095][   T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.118250][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'.
[  159.125680][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  159.142310][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.147536][   T30] audit: type=1400 audit(1769076298.270:598): avc:  denied  { create } for  pid=7298 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  159.151858][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  159.152991][ T5803] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.191632][ T5803] Buffer I/O error on dev nbd0, logical block 0, async page read
[  159.200265][ T5803] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.209853][ T5803] Buffer I/O error on dev nbd0, logical block 1, async page read
[  159.217749][ T5803] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.227593][ T5803] Buffer I/O error on dev nbd0, logical block 2, async page read
[  159.242555][   T30] audit: type=1400 audit(1769076298.279:599): avc:  denied  { ioctl } for  pid=7298 comm="syz.4.350" path="socket:[15375]" dev="sockfs" ino=15375 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  159.257038][ T5803] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.268317][   T30] audit: type=1400 audit(1769076298.279:600): avc:  denied  { getopt } for  pid=7298 comm="syz.4.350" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  159.323186][ T5803] Buffer I/O error on dev nbd0, logical block 3, async page read
[  159.342323][ T5803] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.353381][   T24] usb 3-1: Using ep0 maxpacket: 8
[  159.361411][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  159.373238][   T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  159.382643][ T5803] Buffer I/O error on dev nbd0, logical block 0, async page read
[  159.394083][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.402387][ T5803] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  159.415830][   T24] usb 3-1: config 0 descriptor??
[  159.423488][ T5803] Buffer I/O error on dev nbd0, logical block 1, async page read
[  159.450101][ T5803] ldm_validate_partition_table(): Disk read failed.
[  159.473098][ T5803] Dev nbd0: unable to read RDB block 0
[  159.488095][ T5803]  nbd0: unable to read partition table
[  159.518179][ T5803] ldm_validate_partition_table(): Disk read failed.
[  159.543524][ T5803] Dev nbd0: unable to read RDB block 0
[  159.549233][   T90] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  159.568544][ T5803]  nbd0: unable to read partition table
[  159.673507][   T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  159.696682][ T7318] binder: 7317:7318 ioctl c0306201 0 returned -14
[  159.722684][   T90] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  159.735204][   T90] usb 5-1: config 0 has no interface number 0
[  159.751944][   T90] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  159.759111][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'.
[  159.765522][   T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.798684][   T90] usb 5-1: Product: syz
[  159.811350][   T90] usb 5-1: Manufacturer: syz
[  159.820534][   T90] usb 5-1: SerialNumber: syz
[  159.832051][   T90] usb 5-1: config 0 descriptor??
[  159.914993][ T5931] usb 3-1: USB disconnect, device number 16
[  159.929754][   T30] audit: type=1400 audit(1769076299.037:601): avc:  denied  { bind } for  pid=7317 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  159.982248][   T30] audit: type=1400 audit(1769076299.065:602): avc:  denied  { read } for  pid=7317 comm="syz.3.352" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  160.073407][   T90] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  160.088603][   T90] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.110005][   T90] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  160.125804][   T90] usb 5-1: media controller created
[  160.147513][   T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.237193][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'.
[  160.247114][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'.
[  160.261202][ T5931] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  160.272218][ T5931] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  160.436471][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[  160.538946][ T7300] netlink: 'syz.4.350': attribute type 1 has an invalid length.
[  160.647721][   T24] usb 5-1: USB disconnect, device number 11
[  160.664874][ T7339] syzkaller0: entered promiscuous mode
[  160.670618][ T7339] syzkaller0: entered allmulticast mode
[  160.715780][ T7340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.741242][ T7339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.749309][   T90] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  160.759244][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[  160.793127][ T7338] tipc: Disabling bearer <eth:syzkaller0>
[  161.019480][ T5973] usb 2-1: USB disconnect, device number 12
[  161.116094][   T90] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  161.127509][   T90] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.244163][   T90] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  161.254101][   T90] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.271617][   T90] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  161.286104][   T90] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  161.296751][   T90] usb 3-1: Product: syz
[  161.301166][   T90] usb 3-1: Manufacturer: syz
[  161.355906][   T90] cdc_wdm 3-1:1.0: skipping garbage
[  161.847272][   T90] cdc_wdm 3-1:1.0: skipping garbage
[  161.879606][   T90] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  161.883247][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  161.957703][   T90] cdc_wdm 3-1:1.0: Unknown control protocol
[  161.993985][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  162.098336][   T90] usb 3-1: USB disconnect, device number 17
[  162.138160][ T7351] syzkaller0: entered promiscuous mode
[  162.154354][ T7351] syzkaller0: entered allmulticast mode
[  162.764098][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'.
[  162.789544][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'.
[  162.800421][ T5973] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  162.813450][ T5973] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  162.961457][ T7377] fido_id[7377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  163.460988][   T90] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  163.480234][   T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  163.632643][   T90] usb 3-1: Using ep0 maxpacket: 16
[  163.655989][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.671516][   T90] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  163.684414][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  163.696002][   T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.707807][   T90] usb 3-1: Product: syz
[  163.715620][   T90] usb 3-1: Manufacturer: syz
[  163.720203][   T90] usb 3-1: SerialNumber: syz
[  163.725672][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  163.737934][   T90] usb 3-1: config 0 descriptor??
[  163.743765][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  163.761526][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  163.795947][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  163.805108][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  163.820823][   T24] usb 2-1: Product: syz
[  163.828801][   T24] usb 2-1: Manufacturer: syz
[  163.836621][   T24] usb 2-1: SerialNumber: syz
[  163.847137][   T24] usb 2-1: config 0 descriptor??
[  163.972773][   T90] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[  163.992863][   T90] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  164.018294][   T90] usb 3-1: USB disconnect, device number 18
[  164.075343][   T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  164.087787][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  164.087807][   T30] audit: type=1400 audit(1769076302.928:610): avc:  denied  { mount } for  pid=7389 comm="syz.0.369" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  164.088341][   T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  164.267658][ T7394] Cannot find add_set index 0 as target
[  164.365245][   T24] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  164.372988][   T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  164.385342][   T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  164.492286][   T30] audit: type=1400 audit(1769076303.311:611): avc:  denied  { ioctl } for  pid=7389 comm="syz.0.369" path="socket:[15600]" dev="sockfs" ino=15600 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  164.762853][ T5973] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  164.786030][   T30] audit: type=1400 audit(1769076303.339:612): avc:  denied  { bind } for  pid=7391 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  164.808770][   T24] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  164.837525][   T30] audit: type=1400 audit(1769076303.349:613): avc:  denied  { bind } for  pid=7391 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  164.856980][   T30] audit: type=1400 audit(1769076303.349:614): avc:  denied  { name_bind } for  pid=7391 comm="syz.3.370" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  164.950430][   T30] audit: type=1400 audit(1769076303.349:615): avc:  denied  { node_bind } for  pid=7391 comm="syz.3.370" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  165.007496][ T7402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  165.024568][   T30] audit: type=1400 audit(1769076303.807:616): avc:  denied  { nlmsg_read } for  pid=7401 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  165.026756][ T5973] usb 5-1: not running at top speed; connect to a high speed hub
[  165.153771][ T5973] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  165.180195][ T5973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.211715][ T5973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.257778][ T5973] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.287825][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.295879][ T5973] usb 5-1: Product: 肈駩ཤﵾꙭ聫砼㿻럘ꧺ雏춀→胲㯖龔挛⌢龝䥼톁摌㒯씪礩ꏖ觥ﳐ羱餼욏踧泇뭬ੜᩆ鷦鏸乙盏佀
[  165.319574][ T5973] usb 5-1: Manufacturer: ᐁ
[  165.337719][ T7406] netlink: 456 bytes leftover after parsing attributes in process `syz.3.376'.
[  165.530144][ T7414] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  165.538023][ T7414] audit: out of memory in audit_log_start
[  165.549622][   T30] audit: type=1400 audit(1769076304.275:617): avc:  denied  { create } for  pid=7412 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  165.591444][ T7415] binder: 7407:7415 ioctl 400c620e 200000000080 returned -22
[  166.185443][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[  166.212968][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.214899][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'.
[  166.318415][ T7383] binder: Bad value for 'max'
[  166.336758][   T24] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  166.365854][   T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  166.380742][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.402463][   T24] usb 2-1: USB disconnect, device number 13
[  166.413146][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.431816][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.453951][ T7405] mmap: syz.3.376 (7405): VmData 25972736 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data.
[  166.470131][ T5973] usb 5-1: 0:2 : does not exist
[  166.521453][ T7425] comedi comedi0: Minor 2 could not be opened
[  166.592613][ T5973] usb 5-1: USB disconnect, device number 12
[  166.660860][ T7426] blk_print_req_error: 138 callbacks suppressed
[  166.660872][ T7426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.679832][ T7426] buffer_io_error: 138 callbacks suppressed
[  166.679888][ T7426] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.693869][ T7426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.707734][ T7426] Buffer I/O error on dev nbd0, logical block 1, async page read
[  166.741702][ T7426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.751500][ T7426] Buffer I/O error on dev nbd0, logical block 2, async page read
[  166.759425][ T7426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.769302][ T7426] Buffer I/O error on dev nbd0, logical block 3, async page read
[  166.777242][ T7426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.786788][ T7426] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.818631][ T7426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.837150][ T7426] Buffer I/O error on dev nbd0, logical block 1, async page read
[  166.845228][ T7426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.854804][ T7426] Buffer I/O error on dev nbd0, logical block 2, async page read
[  166.864374][ T7426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.885006][ T7426] Buffer I/O error on dev nbd0, logical block 3, async page read
[  166.923078][ T7426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  166.947767][ T7426] Buffer I/O error on dev nbd0, logical block 0, async page read
[  166.989514][ T7426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  167.056536][ T7426] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.094680][ T7426] ldm_validate_partition_table(): Disk read failed.
[  167.103690][ T7426] Dev nbd0: unable to read RDB block 0
[  167.172424][ T7426]  nbd0: unable to read partition table
[  167.180531][ T7443] netlink: 9 bytes leftover after parsing attributes in process `syz.4.385'.
[  167.192671][ T7443] netlink: 9 bytes leftover after parsing attributes in process `syz.4.385'.
[  167.693058][   T90] Process accounting resumed
[  168.549840][ T7451] Process accounting resumed
[  169.010694][ T5973] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  169.201425][ T5931] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  169.228619][ T5823] Bluetooth: hci0: unexpected event for opcode 0x2024
[  169.236666][ T7474] ALSA: mixer_oss: invalid OSS volume ''
[  169.380939][ T5973] usb 1-1: Using ep0 maxpacket: 16
[  169.383765][ T7488] fuse: Unknown parameter '0x0000000000000003'
[  169.394305][ T5931] usb 4-1: not running at top speed; connect to a high speed hub
[  169.403943][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.419704][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.430150][ T5931] usb 4-1: config 1 interface 0 has no altsetting 0
[  169.437341][ T5973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  169.453096][ T5973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  169.463653][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.473199][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  169.482462][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.492559][ T5931] usb 4-1: Product: syz
[  169.496751][ T5931] usb 4-1: Manufacturer: syz
[  169.502563][ T5931] usb 4-1: SerialNumber: syz
[  169.509314][ T5973] usb 1-1: config 0 descriptor??
[  169.899327][ T5823] block nbd3: Receive control failed (result -32)
[  169.912822][ T7468] block nbd3: shutting down sockets
[  169.924732][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19
[  169.941226][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  169.941241][   T30] audit: type=1400 audit(1769076308.409:627): avc:  denied  { read } for  pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=3066 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  169.943824][ T5169] bcm5974 4-1:1.0: could not read from device
[  169.947352][   T30] audit: type=1400 audit(1769076308.409:628): avc:  denied  { open } for  pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3066 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  170.010726][ T5169] bcm5974 4-1:1.0: could not read from device
[  170.020118][ T5169] bcm5974 4-1:1.0: could not read from device
[  170.034508][ T5931] usb 4-1: USB disconnect, device number 10
[  170.041206][ T5169] bcm5974 4-1:1.0: could not read from device
[  170.068420][ T7507] process 'syz.0.390' launched '/dev/fd/10/./file0' with NULL argv: empty string added
[  170.082197][   T30] audit: type=1400 audit(1769076308.531:629): avc:  denied  { execute } for  pid=7463 comm="syz.0.390" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  170.132599][   T30] audit: type=1400 audit(1769076308.559:630): avc:  denied  { execute_no_trans } for  pid=7463 comm="syz.0.390" path="/73/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  170.157406][   T90] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  170.291997][   T30] audit: type=1400 audit(1769076308.737:631): avc:  denied  { write } for  pid=7463 comm="syz.0.390" path="socket:[15919]" dev="sockfs" ino=15919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  170.355156][   T90] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[  170.363357][   T90] usb 5-1: config 0 has no interface number 0
[  170.375601][   T90] usb 5-1: config 0 interface 101 has no altsetting 0
[  170.383885][   T30] audit: type=1400 audit(1769076308.821:632): avc:  denied  { connect } for  pid=7463 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  170.413622][   T90] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=d6.bb
[  170.422988][   T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.436449][   T90] usb 5-1: Product: syz
[  170.453912][   T90] usb 5-1: Manufacturer: syz
[  170.462167][   T90] usb 5-1: SerialNumber: syz
[  170.470555][   T90] usb 5-1: config 0 descriptor??
[  170.501168][   T90] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  170.653498][ T7520] netlink: 'syz.3.405': attribute type 10 has an invalid length.
[  170.679426][ T7520] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  170.713391][   T90] gspca_sn9c2028: read1 error -71
[  170.839391][   T90] gspca_sn9c2028: read1 error -71
[  170.851474][   T90] gspca_sn9c2028: read1 error -71
[  170.858063][   T90] sn9c2028 5-1:0.101: probe with driver sn9c2028 failed with error -71
[  170.888345][ T5817] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  170.903092][   T90] usb 5-1: USB disconnect, device number 13
[  170.935086][   T30] audit: type=1400 audit(1769076309.335:633): avc:  denied  { write } for  pid=7521 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  171.060702][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.073967][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  171.091580][ T5817] usb 2-1: config 1 has no interface number 0
[  171.097683][ T5817] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  171.137142][ T5817] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.146434][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.154653][ T5817] usb 2-1: Product: syz
[  171.172052][ T5817] usb 2-1: Manufacturer: syz
[  171.183195][ T5817] usb 2-1: SerialNumber: syz
[  171.216560][ T5817] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing
[  171.229716][ T5817] cdc_ncm 2-1:1.1: bind() failure
[  171.307596][   T30] audit: type=1400 audit(1769076309.691:634): avc:  denied  { getopt } for  pid=7523 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  171.527845][ T5817] usb 2-1: USB disconnect, device number 14
[  171.567771][   T30] audit: type=1400 audit(1769076309.710:635): avc:  denied  { bind } for  pid=7523 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  171.616396][   T30] audit: type=1400 audit(1769076309.981:636): avc:  denied  { mounton } for  pid=7529 comm="syz.4.408" path="/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  171.958712][ T5973] usbhid 1-1:0.0: can't add hid device: -71
[  171.969344][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  171.987650][ T5973] usb 1-1: USB disconnect, device number 17
[  172.385031][ T5973] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  172.546774][ T5973] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  172.555713][ T5973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.566817][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  172.568606][ T5973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  172.583557][ T5973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.596622][ T5973] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  172.608606][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  172.618408][ T5973] usb 2-1: Product: syz
[  172.622667][ T5973] usb 2-1: Manufacturer: syz
[  172.633278][ T5973] cdc_wdm 2-1:1.0: skipping garbage
[  172.648620][ T5973] cdc_wdm 2-1:1.0: skipping garbage
[  172.669883][ T5973] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  172.676552][ T5973] cdc_wdm 2-1:1.0: Unknown control protocol
[  172.728629][ T5817] usb 4-1: Using ep0 maxpacket: 16
[  172.729207][ T6055] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  172.737334][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.755641][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.768009][ T5817] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  172.778712][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.794950][ T5817] usb 4-1: config 0 descriptor??
[  172.853125][ T5973] usb 2-1: USB disconnect, device number 15
[  172.909024][ T6055] usb 1-1: Using ep0 maxpacket: 8
[  172.916149][ T6055] usb 1-1: config 8 has an invalid interface number: 167 but max is 0
[  172.926987][ T6055] usb 1-1: config 8 has an invalid interface number: 1 but max is 0
[  172.935364][ T6055] usb 1-1: config 8 has an invalid descriptor of length 98, skipping remainder of the config
[  172.946055][ T6055] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1
[  172.955389][ T6055] usb 1-1: config 8 has no interface number 0
[  172.961859][ T6055] usb 1-1: config 8 interface 167 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.976057][ T6055] usb 1-1: too many endpoints for config 8 interface 1 altsetting 7: 93, using maximum allowed: 30
[  172.988392][ T6055] usb 1-1: config 8 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 93
[  173.031590][ T6055] usb 1-1: config 8 interface 167 has no altsetting 0
[  173.043922][ T6055] usb 1-1: config 8 interface 1 has no altsetting 0
[  173.052576][ T6055] usb 1-1: New USB device found, idVendor=0bdb, idProduct=1002, bcdDevice=c3.9a
[  173.061911][ T6055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.070065][ T6055] usb 1-1: Product: 팼黨⢢捃獎㌱寰핹
[  173.077133][ T6055] usb 1-1: Manufacturer: ﱍ튣깤釟ݨ鞠倴⼴ꔠỶํ㰔᪨#⅐랮黦浙冈Ы⢾蛀Ϣ脈訌䶖ꇰ哱숚᯴Ვ쵦瑕⸮꼎ꝣ㜞种볱눗ꑛ뽛芍趈䱵콲ၔ踗칌㠨ᨌ㺌⧲‣뾙椪䖋乆踌晤甓ᯠ샤ⱞ楃燺蕒䃉䉴ᕡ
[  173.102547][ T6055] usb 1-1: SerialNumber: ፲᭻⮘砈瘘먰짞싺
[  173.511991][ T7554] syzkaller0: entered promiscuous mode
[  173.532843][ T7554] syzkaller0: entered allmulticast mode
[  173.635880][   T67] wlan1: Trigger new scan to find an IBSS to join
[  174.769155][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  174.961483][   T24] usb 2-1: Using ep0 maxpacket: 16
[  174.969144][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.980446][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  174.990270][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.001914][   T24] usb 2-1: config 0 descriptor??
[  175.038733][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  175.257887][ T7557] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[  175.285373][ T7557] !�9: entered promiscuous mode
[  175.678890][ T5817] usbhid 4-1:0.0: can't add hid device: -71
[  175.684966][ T5817] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  175.707063][ T5817] usb 4-1: USB disconnect, device number 11
[  176.009119][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  176.009135][   T30] audit: type=1326 audit(1769076314.078:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.043956][   T30] audit: type=1326 audit(1769076314.078:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.072110][   T30] audit: type=1326 audit(1769076314.078:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.105968][ T5169] bcm5974 2-1:0.0: could not read from device
[  176.185153][   T30] audit: type=1326 audit(1769076314.078:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.192142][ T5169] bcm5974 2-1:0.0: could not read from device
[  176.210576][   T24] usb 2-1: USB disconnect, device number 16
[  176.227781][   T30] audit: type=1326 audit(1769076314.106:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.260606][   T30] audit: type=1326 audit(1769076314.115:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.260688][ T5803] bcm5974 2-1:0.0: could not read from device
[  176.319542][   T30] audit: type=1326 audit(1769076314.190:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.345806][   T30] audit: type=1326 audit(1769076314.190:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.434697][   T30] audit: type=1326 audit(1769076314.190:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.789016][   T30] audit: type=1326 audit(1769076314.190:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bb9acb9 code=0x7ffc0000
[  176.812371][   T12] wlan1: Trigger new scan to find an IBSS to join
[  177.281343][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  177.441708][ T5931] usb 5-1: Using ep0 maxpacket: 8
[  177.455807][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short
[  177.464774][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  177.484250][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  177.503180][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  177.527450][ T5931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  177.537522][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  177.564306][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  177.579771][ T5931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  177.605786][ T5931] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  177.616913][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.628892][ T5931] usb 5-1: Product: syz
[  177.636703][ T5931] usb 5-1: Manufacturer: syz
[  177.646435][ T5931] usb 5-1: SerialNumber: syz
[  177.666707][ T5931] usb 5-1: config 0 descriptor??
[  177.678329][ T7575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.691987][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  177.913341][ T5931] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12
[  178.246096][ T5931] usb 5-1: USB disconnect, device number 14
[  178.324992][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.878174][ T6055] hub 1-1:8.1: Invalid hub with more than one config or interface
[  178.886092][ T6055] hub 1-1:8.1: probe with driver hub failed with error -22
[  179.230520][ T7594] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:0
[  179.364734][ T7594] netlink: 200072 bytes leftover after parsing attributes in process `syz.3.428'.
[  179.522956][ T7599] nbd: must specify at least one socket
[  180.038332][ T7608] tipc: Cannot configure node identity twice
[  180.052798][   T12] wlan1: Creating new IBSS network, BSSID 06:a8:94:b4:2a:11
[  180.078646][    C1] ------------[ cut here ]------------
[  180.084517][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  180.094407][    C1] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#1: syz.1.429/7595
[  180.104997][    C1] Modules linked in:
[  180.109219][    C1] CPU: 1 UID: 0 PID: 7595 Comm: syz.1.429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.120081][    C1] Tainted: [L]=SOFTLOCKUP
[  180.124446][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  180.134574][    C1] RIP: 0010:__rate_control_send_low+0x621/0x760
[  180.140875][    C1] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 c7 e0 18 f7 48 8d 3d 60 92 d9 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 cb 2e 83 f7 e9 03
[  180.160564][    C1] RSP: 0018:ffffc90000a08940 EFLAGS: 00010246
[  180.166648][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  180.174678][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c7b1e0
[  180.182703][    C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  180.190744][    C1] R10: 000000000000000c R11: 0617aaaaaaaaaaff R12: ffff888033fa7de8
[  180.198738][    C1] R13: ffff888076623128 R14: 0000000000000000 R15: dffffc0000000000
[  180.206741][    C1] FS:  0000000000000000(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000
[  180.215700][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.222296][    C1] CR2: 00007f11b5a4e020 CR3: 000000005fd26000 CR4: 00000000003526f0
[  180.230261][    C1] Call Trace:
[  180.233562][    C1]  <IRQ>
[  180.236402][    C1]  rate_control_send_low+0x2a8/0x7e0
[  180.241670][    C1]  ? rcu_is_watching+0x12/0xc0
[  180.246453][    C1]  rate_control_get_rate+0x1be/0x5c0
[  180.251737][    C1]  ieee80211_beacon_get_finish+0x45a/0x690
[  180.257558][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  180.263937][    C1]  __ieee80211_beacon_get+0x795/0x1ee0
[  180.269399][    C1]  ? __lock_acquire+0x4a5/0x2630
[  180.274342][    C1]  ieee80211_beacon_get_tim+0xa6/0x280
[  180.279805][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  180.285887][    C1]  mac80211_hwsim_beacon_tx+0x4d6/0xa00
[  180.291424][    C1]  __iterate_interfaces+0x2e6/0x650
[  180.296621][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  180.302675][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  180.308750][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  180.315769][    C1]  mac80211_hwsim_beacon+0x105/0x1b0
[  180.321056][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  180.326864][    C1]  __hrtimer_run_queues+0x516/0x990
[  180.332073][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  180.337800][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  180.343870][    C1]  hrtimer_run_softirq+0x17d/0x350
[  180.348968][    C1]  handle_softirqs+0x1ea/0x910
[  180.353769][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  180.359070][    C1]  __irq_exit_rcu+0xef/0x150
[  180.363670][    C1]  irq_exit_rcu+0x9/0x30
[  180.367906][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  180.373563][    C1]  </IRQ>
[  180.376493][    C1]  <TASK>
[  180.379411][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  180.385417][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  180.391830][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 b2 69 f6 48 89 df e8 ce 00 6a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 49 5a f6 65 8b 05 3e ca 6a 08 85 c0 74 16 5b
[  180.411450][    C1] RSP: 0018:ffffc9000f4ff788 EFLAGS: 00000246
[  180.417513][    C1] RAX: 0000000000000002 RBX: ffff88801daf29d8 RCX: 0000000000000040
[  180.425487][    C1] RDX: 0000000000000000 RSI: ffffffff8dc44a41 RDI: ffffffff8bfa35a0
[  180.433436][    C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  180.441419][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000007c
[  180.449395][    C1] R13: dffffc0000000000 R14: ffffc9000f4ffa58 R15: ffffc9000f4ffb58
[  180.457366][    C1]  folios_put_refs+0x4df/0x840
[  180.462115][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  180.467393][    C1]  ? __pfx_workingset_update_node+0x10/0x10
[  180.473265][    C1]  ? folio_mapping+0x11a/0x250
[  180.478023][    C1]  truncate_inode_pages_range+0x30c/0x1050
[  180.483812][    C1]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  180.490063][    C1]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  180.495986][    C1]  ? mark_held_locks+0x40/0x70
[  180.500767][    C1]  ? smp_call_function_many_cond+0x11ad/0x14a0
[  180.506913][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  180.512136][    C1]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  180.517603][    C1]  ? smp_call_function_many_cond+0x5cb/0x14a0
[  180.523703][    C1]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  180.529149][    C1]  ? __pfx_has_bh_in_lru+0x10/0x10
[  180.534293][    C1]  blkdev_flush_mapping+0xfb/0x2e0
[  180.539408][    C1]  blkdev_put_whole+0xc9/0xf0
[  180.544096][    C1]  bdev_release+0x47f/0x6d0
[  180.548590][    C1]  ? __pfx_blkdev_release+0x10/0x10
[  180.553794][    C1]  blkdev_release+0x15/0x20
[  180.558271][    C1]  __fput+0x3ff/0xb40
[  180.562235][    C1]  task_work_run+0x150/0x240
[  180.566816][    C1]  ? __pfx_task_work_run+0x10/0x10
[  180.571904][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  180.577102][    C1]  do_exit+0x829/0x2a30
[  180.581236][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  180.586601][    C1]  ? __pfx_do_exit+0x10/0x10
[  180.591165][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  180.596547][    C1]  do_group_exit+0xd5/0x2a0
[  180.601024][    C1]  __x64_sys_exit_group+0x3e/0x50
[  180.606042][    C1]  x64_sys_call+0x14fd/0x1510
[  180.610703][    C1]  do_syscall_64+0xc9/0xf80
[  180.615180][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.621062][    C1] RIP: 0033:0x7fb332b9acb9
[  180.625452][    C1] Code: Unable to access opcode bytes at 0x7fb332b9ac8f.
[  180.632459][    C1] RSP: 002b:00007ffedda9a4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  180.640860][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb332b9acb9
[  180.648821][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  180.656776][    C1] RBP: 00007ffedda9a55c R08: 0000000000000000 R09: 00000000000927c0
[  180.664733][    C1] R10: 00007fb332e16038 R11: 0000000000000246 R12: 0000000000000050
[  180.672691][    C1] R13: 00000000000927c0 R14: 0000000000029d42 R15: 00007ffedda9a5b0
[  180.680661][    C1]  </TASK>
[  180.683667][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  180.690932][    C1] CPU: 1 UID: 0 PID: 7595 Comm: syz.1.429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.701676][    C1] Tainted: [L]=SOFTLOCKUP
[  180.705972][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  180.716001][    C1] Call Trace:
[  180.719254][    C1]  <IRQ>
[  180.722071][    C1]  dump_stack_lvl+0x100/0x190
[  180.726737][    C1]  vpanic+0x20d/0x630
[  180.730704][    C1]  panic+0xd1/0xd1
[  180.734417][    C1]  ? __pfx_panic+0x10/0x10
[  180.738821][    C1]  ? check_panic_on_warn+0x1f/0x90
[  180.743909][    C1]  check_panic_on_warn.cold+0x19/0x34
[  180.749267][    C1]  ? __rate_control_send_low+0x610/0x760
[  180.754876][    C1]  __warn.cold+0x191/0x2f8
[  180.759265][    C1]  __report_bug+0x296/0x3d0
[  180.763747][    C1]  ? __rate_control_send_low+0x610/0x760
[  180.769356][    C1]  ? __pfx___report_bug+0x10/0x10
[  180.774358][    C1]  ? kasan_save_stack+0x3f/0x50
[  180.779202][    C1]  ? mac80211_hwsim_beacon_tx+0x4d6/0xa00
[  180.784900][    C1]  ? __iterate_interfaces+0x2e6/0x650
[  180.790261][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  180.797444][    C1]  ? mac80211_hwsim_beacon+0x105/0x1b0
[  180.802883][    C1]  ? __hrtimer_run_queues+0x516/0x990
[  180.808239][    C1]  ? hrtimer_run_softirq+0x17d/0x350
[  180.813507][    C1]  ? handle_softirqs+0x1ea/0x910
[  180.818419][    C1]  ? __irq_exit_rcu+0xef/0x150
[  180.823172][    C1]  report_bug_entry+0xe1/0x290
[  180.827917][    C1]  ? __rate_control_send_low+0x621/0x760
[  180.833523][    C1]  handle_bug+0x1c9/0x2a0
[  180.837827][    C1]  exc_invalid_op+0x17/0x50
[  180.842302][    C1]  asm_exc_invalid_op+0x1a/0x20
[  180.847124][    C1] RIP: 0010:__rate_control_send_low+0x621/0x760
[  180.853341][    C1] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 c7 e0 18 f7 48 8d 3d 60 92 d9 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 cb 2e 83 f7 e9 03
[  180.872933][    C1] RSP: 0018:ffffc90000a08940 EFLAGS: 00010246
[  180.878974][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  180.886917][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c7b1e0
[  180.894874][    C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  180.902839][    C1] R10: 000000000000000c R11: 0617aaaaaaaaaaff R12: ffff888033fa7de8
[  180.910796][    C1] R13: ffff888076623128 R14: 0000000000000000 R15: dffffc0000000000
[  180.918766][    C1]  rate_control_send_low+0x2a8/0x7e0
[  180.924039][    C1]  ? rcu_is_watching+0x12/0xc0
[  180.928779][    C1]  rate_control_get_rate+0x1be/0x5c0
[  180.934052][    C1]  ieee80211_beacon_get_finish+0x45a/0x690
[  180.939841][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  180.946148][    C1]  __ieee80211_beacon_get+0x795/0x1ee0
[  180.951586][    C1]  ? __lock_acquire+0x4a5/0x2630
[  180.956498][    C1]  ieee80211_beacon_get_tim+0xa6/0x280
[  180.961937][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  180.967996][    C1]  mac80211_hwsim_beacon_tx+0x4d6/0xa00
[  180.973525][    C1]  __iterate_interfaces+0x2e6/0x650
[  180.978707][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  180.984748][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  180.990788][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  180.997791][    C1]  mac80211_hwsim_beacon+0x105/0x1b0
[  181.003055][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.008858][    C1]  __hrtimer_run_queues+0x516/0x990
[  181.014045][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  181.019761][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[  181.025847][    C1]  hrtimer_run_softirq+0x17d/0x350
[  181.030941][    C1]  handle_softirqs+0x1ea/0x910
[  181.035688][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  181.040955][    C1]  __irq_exit_rcu+0xef/0x150
[  181.045524][    C1]  irq_exit_rcu+0x9/0x30
[  181.049745][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  181.055363][    C1]  </IRQ>
[  181.058269][    C1]  <TASK>
[  181.061172][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  181.067127][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  181.073526][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 b2 69 f6 48 89 df e8 ce 00 6a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 49 5a f6 65 8b 05 3e ca 6a 08 85 c0 74 16 5b
[  181.093120][    C1] RSP: 0018:ffffc9000f4ff788 EFLAGS: 00000246
[  181.099160][    C1] RAX: 0000000000000002 RBX: ffff88801daf29d8 RCX: 0000000000000040
[  181.107104][    C1] RDX: 0000000000000000 RSI: ffffffff8dc44a41 RDI: ffffffff8bfa35a0
[  181.115045][    C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  181.123006][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000007c
[  181.130948][    C1] R13: dffffc0000000000 R14: ffffc9000f4ffa58 R15: ffffc9000f4ffb58
[  181.138916][    C1]  folios_put_refs+0x4df/0x840
[  181.143674][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  181.148935][    C1]  ? __pfx_workingset_update_node+0x10/0x10
[  181.154811][    C1]  ? folio_mapping+0x11a/0x250
[  181.159566][    C1]  truncate_inode_pages_range+0x30c/0x1050
[  181.165352][    C1]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  181.171569][    C1]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  181.177456][    C1]  ? mark_held_locks+0x40/0x70
[  181.182219][    C1]  ? smp_call_function_many_cond+0x11ad/0x14a0
[  181.188353][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  181.193524][    C1]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  181.198960][    C1]  ? smp_call_function_many_cond+0x5cb/0x14a0
[  181.205045][    C1]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  181.210500][    C1]  ? __pfx_has_bh_in_lru+0x10/0x10
[  181.215602][    C1]  blkdev_flush_mapping+0xfb/0x2e0
[  181.220699][    C1]  blkdev_put_whole+0xc9/0xf0
[  181.225371][    C1]  bdev_release+0x47f/0x6d0
[  181.229870][    C1]  ? __pfx_blkdev_release+0x10/0x10
[  181.235042][    C1]  blkdev_release+0x15/0x20
[  181.239531][    C1]  __fput+0x3ff/0xb40
[  181.243493][    C1]  task_work_run+0x150/0x240
[  181.248062][    C1]  ? __pfx_task_work_run+0x10/0x10
[  181.253157][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  181.258348][    C1]  do_exit+0x829/0x2a30
[  181.262476][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  181.267840][    C1]  ? __pfx_do_exit+0x10/0x10
[  181.272414][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  181.277760][    C1]  do_group_exit+0xd5/0x2a0
[  181.282249][    C1]  __x64_sys_exit_group+0x3e/0x50
[  181.287270][    C1]  x64_sys_call+0x14fd/0x1510
[  181.291925][    C1]  do_syscall_64+0xc9/0xf80
[  181.296415][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.302282][    C1] RIP: 0033:0x7fb332b9acb9
[  181.306668][    C1] Code: Unable to access opcode bytes at 0x7fb332b9ac8f.
[  181.313653][    C1] RSP: 002b:00007ffedda9a4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  181.322037][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb332b9acb9
[  181.329986][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  181.337930][    C1] RBP: 00007ffedda9a55c R08: 0000000000000000 R09: 00000000000927c0
[  181.345876][    C1] R10: 00007fb332e16038 R11: 0000000000000246 R12: 0000000000000050
[  181.353859][    C1] R13: 00000000000927c0 R14: 0000000000029d42 R15: 00007ffedda9a5b0
[  181.361809][    C1]  </TASK>
[  181.365111][    C1] Kernel Offset: disabled
[  181.369411][    C1] Rebooting in 86400 seconds..