last executing test programs:

7.653575994s ago: executing program 4 (id=462):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000001540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x5c, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_VNI={0x8, 0x7, 0x59}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x28b80, 0x0)
r7 = epoll_create(0x1)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf})
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdir(0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48)
close(r8)

6.16520013s ago: executing program 3 (id=466):
syz_open_dev$usbfs(0x0, 0x77, 0x11d101)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x7, 0x1200)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000140)={0x7})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r3, 0x0, 0xd1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x48, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fdatasync(0xffffffffffffffff)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000040)={0x42, 0x6, 0x0, 0x10, "155c224b2130b356833a93f7128480a6328d7dc6ddfac5b653319d6643fb7c539ce30dcf27673f505152"})

5.390917243s ago: executing program 3 (id=468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20008040)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x10087, 0x0, 0x40})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.228761527s ago: executing program 2 (id=469):
r0 = io_uring_setup(0x1196, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

4.962224075s ago: executing program 4 (id=470):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getrlimit(0x8, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4.905234851s ago: executing program 3 (id=471):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x21, 0x0, 0x2})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x40, 0xb41ca42, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

3.991927134s ago: executing program 2 (id=472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='task_rename\x00', r3}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="00006003ffffffff2ae8aa4ab3683eaaaaaaaa00080025f400280064600001069078ffffffff7f0400014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000790780002"], 0x3a)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

3.955765544s ago: executing program 4 (id=473):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
setpgid(0x0, r1) (async)
r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 64)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = getpid() (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000e60606010200000000000000000a00000a080006400000000605000100070000000900020073797a3100000000ebd247fba3fbef165d"], 0x30}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) (async, rerun: 32)
r6 = syz_pidfd_open(r4, 0x0) (rerun: 32)
setns(r6, 0x8020000) (async)
r7 = fcntl$dupfd(r3, 0x406, r3) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)={'gretap0\x00', <r8=>0x0, 0x7f06, 0x8, 0x2, 0xabe1, {{0x41, 0x4, 0x3, 0x4, 0x104, 0x65, 0x0, 0xe0, 0x4, 0x0, @local, @loopback, {[@generic={0x86, 0x10, "18ead2532e0237bd4005529ab9b6"}, @timestamp_addr={0x44, 0x3c, 0xb1, 0x1, 0xc, [{@loopback, 0x5}, {@rand_addr=0x64010102, 0x10}, {@multicast1, 0x3}, {@multicast2, 0x7}, {@empty, 0x25d8}, {@loopback, 0x6}, {@loopback, 0x2}]}, @cipso={0x86, 0x39, 0x2, [{0x2, 0xd, "5d2c1ccbc6b358295ca5da"}, {0x0, 0x10, "4b47ad81707cc2825a8ad420e576"}, {0x5, 0x9, "15c71f432b6302"}, {0x2, 0x6, "eedc9872"}, {0x1, 0x7, "c21405c800"}]}, @rr={0x7, 0x7, 0xea, [@multicast1]}, @generic={0x44, 0x6, "5f3280f8"}, @timestamp_addr={0x44, 0x44, 0x54, 0x1, 0x6, [{@empty, 0x8}, {@multicast1, 0x9}, {@private=0xa010101, 0x101}, {@broadcast, 0x4}, {@remote, 0x200}, {@multicast2, 0x128}, {@multicast2, 0x7}, {@multicast1, 0x3d}]}, @ssrr={0x89, 0x7, 0xbc, [@local]}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x7, [{@multicast1, 0xf}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x2f, 0x0, 0x3, 0x80000000, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x6, 0x4}}) (async, rerun: 64)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x1f) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r9, 0x100000000000f7) (async)
keyctl$revoke(0x3, r2) (async, rerun: 32)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upJate e\x00'/23], 0x17, 0xfffffffffffffff9) (async, rerun: 32)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

3.924195192s ago: executing program 1 (id=474):
io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x11, 0x264})
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x200, @remote, 0x7}, 0x1c, 0x0}}], 0x400000000000264, 0x14000001)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = inotify_init1(0x800)
close(r4)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x5411, 0xfffffffffffffffa)

3.649827584s ago: executing program 4 (id=475):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000880)=""/81)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a40)=ANY=[@ANYBLOB="30060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x630}, 0x1, 0x0, 0x0, 0x4c1c0}, 0x8800)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="030027bd7000fbdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804)

3.586916325s ago: executing program 0 (id=476):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001140000000040500010006000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x54}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r11, 0x607, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8000812)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

3.549355692s ago: executing program 4 (id=477):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001140000000040500010006000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x54}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r11, 0x607, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8000812)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

3.526892412s ago: executing program 2 (id=478):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80801)
mknod(0x0, 0x8001420, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r4, 0x1, 0x5, 0x7be}, 0x50)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001940)={0x6, 0x118, 0xfa00, {{0x9, 0x4, "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", 0x9, 0x2, 0x5, 0x8, 0x80, 0x4b, 0x8}}}, 0x120)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b0000000400000001000084020000000a00000003000000000000010000000000000001050000000000000011000b020000006100492e610061005f00"], 0x0, 0x57}, 0x28)
ioctl$TCFLSH(r6, 0x540b, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)

3.023539641s ago: executing program 0 (id=479):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)

3.021340195s ago: executing program 3 (id=480):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0c49a50000000000faffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.927881555s ago: executing program 1 (id=481):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11})
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x1}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xa)
socket(0x10, 0x80002, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0x4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)

2.645851541s ago: executing program 2 (id=482):
syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002340)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20000850)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
fcntl$setstatus(r6, 0x4, 0x40800)
r7 = syz_io_uring_setup(0x4170, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3, 0x1}, &(0x7f0000002300)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x792, &(0x7f00000001c0)=[{0x0}], 0x1})
io_uring_enter(r7, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000002240)=@nullb, r1, &(0x7f0000002280))
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRESHEX=r8, @ANYRES32, @ANYBLOB], 0x50)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f04890105"], 0x7)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}})
mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10c820, 0x0)

1.651090221s ago: executing program 4 (id=483):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0x1, 0x17e5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000001c0)='P')

1.587970991s ago: executing program 2 (id=484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="84020000", @ANYRES32=r4, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000080)={'team_slave_0\x00', @random="0131be7839ff"})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd700005000000020000000900010073797a30000000001400020067656e657665300000001100000000006e6d3b9f1efeb4a5d382759bfecc80fe40ea96364ced9cb6428caea3e4337068f8e7507f9978fba3ac31eec35adfd63a59cfd410d1ac1c2eb456ae705913245299ad49f9c49359de84c0ba30ff69263fffb4abfa"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x5, 0x0, 0x0, 0x0, 0x0}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@fallback=r9, 0x1f, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], <r10=>0x0}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl0\x00', <r11=>0x0, 0x80, 0x10, 0x6, 0x5, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x2, @loopback, {[@end, @generic={0x88, 0x5, "25adc5"}, @ssrr={0x89, 0xf, 0x31, [@empty, @private=0xa010100, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@ifindex=r11, 0xffffffffffffffff, 0x2a, 0xa, 0xffffffffffffffff, @void, @value, @void, @void, r10}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='\r\x00\x00\x00 \x00\x00\x00', @ANYRES32=r3, @ANYBLOB="940dc2a1a118c64495bbcb1f494932bf925bfc22d9d328820b933eb3ea9b83b9549fe7d82bf2a4a1338a17f09f9be7f18f98117cb52dcbcc36bd2b0154b6612c1647a6b7c55fe09b3b2f155b88e33e8b0cd5376c0bf9edf4ea5d3eede80a528f632e21cddabc30849da90686dd43a30271046be6bb255f456b6823428472b9105fcdfafcf7298d0def28baa09d00", @ANYRES32, @ANYRES64=r10], 0x20)

1.529161601s ago: executing program 0 (id=485):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r0, r0, 0x0, 0xc3)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0xc67068b36fc532a4)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x103)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x190)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000bc0)={0x8, 0x2, 0x102bf, 0x2, 0x3})

1.424396288s ago: executing program 1 (id=486):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)

1.363925153s ago: executing program 0 (id=487):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f00000004c0)=""/78, 0x4e}, {&(0x7f0000000740)}], 0x8, &(0x7f0000000840)=""/68, 0x44}, 0x299}, {{&(0x7f00000008c0)=@nfc_llcp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001980)=""/135, 0x87}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/165, 0xa5}, {&(0x7f0000002c40)=""/39, 0x27}, {&(0x7f0000002c80)=""/247, 0xf7}], 0x7}, 0x8}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002e80)=""/65, 0x41}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x2, &(0x7f0000003f40)=""/212, 0xd4}}, {{&(0x7f0000004040)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004280)=[{&(0x7f00000040c0)=""/147, 0x93}, {&(0x7f0000004180)=""/17, 0x11}, {&(0x7f0000004240)=""/47, 0x2f}], 0x3, &(0x7f00000042c0)=""/166, 0xa6}, 0x1}, {{0x0, 0x0, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/183, 0xb7}, 0x1}, {{&(0x7f0000004580)=@nfc_llcp, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004600)=""/181, 0xb5}], 0x1, &(0x7f0000004800)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000005800)=""/4096, 0x1000}], 0x1}, 0x81}, {{&(0x7f0000006840), 0x80, &(0x7f0000008c40)=[{&(0x7f00000068c0)=""/117, 0x75}, {0x0}, {&(0x7f0000006a40)=""/246, 0xf6}, {&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/66, 0x42}, {&(0x7f0000008bc0)=""/82, 0x52}], 0x7, &(0x7f0000008cc0)=""/128, 0x80}, 0x3}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000008dc0)=""/214, 0xd6}], 0x1, &(0x7f0000008f00)=""/4096, 0x1000}, 0x2}], 0x9, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800)
syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

1.123172186s ago: executing program 1 (id=488):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x72]}, 0x8, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0], 0x4)

850.360305ms ago: executing program 1 (id=489):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001140000000040500010006000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x54}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r11, 0x607, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8000812)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

353.289566ms ago: executing program 3 (id=490):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x21, 0x0, 0x2})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x40, 0xb41ca42, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

351.095008ms ago: executing program 2 (id=491):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x2b8}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

299.971408ms ago: executing program 1 (id=492):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80801)
mknod(0x0, 0x8001420, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r4, 0x1, 0x5, 0x7be}, 0x50)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001940)={0x6, 0x118, 0xfa00, {{0x9, 0x4, "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", 0x9, 0x2, 0x5, 0x8, 0x80, 0x4b, 0x8}}}, 0x120)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b0000000400000001000084020000000a00000003000000000000010000000000000001050000000000000011000b020000006100492e610061005f00"], 0x0, 0x57}, 0x28)
ioctl$TCFLSH(r6, 0x540b, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)

180.714858ms ago: executing program 0 (id=493):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x3}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

68.129551ms ago: executing program 3 (id=494):
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = dup(0xffffffffffffffff)
mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r1, 0x0)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0)

0s ago: executing program 0 (id=495):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
pwrite64(r1, 0x0, 0x0, 0x14f)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)

kernel console output (not intermixed with test programs):

audit: type=1400 audit(1764388832.494:172): avc:  denied  { open } for  pid=6037 comm="syz.2.31" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   76.917007][ T5891] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   76.972415][   T30] audit: type=1400 audit(1764388832.494:173): avc:  denied  { ioctl } for  pid=6037 comm="syz.2.31" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   77.002732][   T30] audit: type=1400 audit(1764388832.714:174): avc:  denied  { create } for  pid=6042 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.023006][   T30] audit: type=1400 audit(1764388832.734:175): avc:  denied  { bind } for  pid=6042 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.077055][ T6044] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET)
[   77.101070][   T30] audit: type=1400 audit(1764388832.734:176): avc:  denied  { listen } for  pid=6042 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.115080][ T5891] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   77.122447][   T30] audit: type=1400 audit(1764388832.734:177): avc:  denied  { accept } for  pid=6042 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.173738][ T5891] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8
[   77.197622][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10
[   77.211301][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64
[   77.214377][ T6048] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   77.235912][ T5891] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.269517][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   77.292834][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.323032][ T6034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   77.339582][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   77.485472][ T5891] usb 5-1: invalid MIDI in EP 0
[   77.711578][ T5891] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[   77.743659][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   77.770219][ T5891] usb 5-1: USB disconnect, device number 3
[   77.923857][   T10] usb 2-1: Using ep0 maxpacket: 16
[   78.033593][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.044773][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.085479][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   78.120999][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37'.
[   78.124634][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   78.173581][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.199961][   T10] usb 2-1: config 0 descriptor??
[   78.459434][ T6061] Zero length message leads to an empty skb
[   81.125468][   T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   81.173578][   T10] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[   81.187820][   T10] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   81.202135][   T10] microsoft 0003:045E:07DA.0001: no inputs found
[   81.208550][   T10] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[   81.221241][   T10] usb 2-1: USB disconnect, device number 4
[   81.415769][   T30] kauditd_printk_skb: 9 callbacks suppressed
[   81.415783][   T30] audit: type=1400 audit(1764388837.134:187): avc:  denied  { connect } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   81.502701][   T30] audit: type=1400 audit(1764388837.164:188): avc:  denied  { setopt } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   81.525151][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   81.634050][   T30] audit: type=1400 audit(1764388837.174:189): avc:  denied  { create } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   82.053789][   T30] audit: type=1400 audit(1764388837.184:190): avc:  denied  { create } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   82.074716][   T30] audit: type=1400 audit(1764388837.184:191): avc:  denied  { bind } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   82.094377][   T30] audit: type=1400 audit(1764388837.384:192): avc:  denied  { ioctl } for  pid=6076 comm="syz.3.42" path="socket:[10324]" dev="sockfs" ino=10324 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   82.123683][   T30] audit: type=1400 audit(1764388837.434:193): avc:  denied  { bind } for  pid=6076 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   82.182580][   T30] audit: type=1400 audit(1764388837.894:194): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   82.333080][   T30] audit: type=1400 audit(1764388838.044:195): avc:  denied  { name_bind } for  pid=6090 comm="syz.4.45" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   82.541998][   T30] audit: type=1400 audit(1764388838.074:196): avc:  denied  { node_bind } for  pid=6090 comm="syz.4.45" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   84.634011][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   85.805291][ T6141] fuse: Unknown parameter 'user_id00000000000000000000'
[   86.633011][ T5913] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   86.868779][ T5913] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   86.888762][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0
[   86.955001][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   86.965491][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   86.965506][   T30] audit: type=1400 audit(1764388842.684:217): avc:  denied  { shutdown } for  pid=6150 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.029622][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   87.070540][ T5913] usb 2-1: Product: syz
[   87.145070][   T30] audit: type=1400 audit(1764388842.714:218): avc:  denied  { read } for  pid=6150 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.169487][ T5913] usb 2-1: Manufacturer: syz
[   87.174773][   T30] audit: type=1400 audit(1764388842.894:219): avc:  denied  { connect } for  pid=6195 comm="syz.3.64" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.194844][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.216801][ T5913] usb 2-1: SerialNumber: syz
[   87.325778][ T5913] usb 2-1: config 0 descriptor??
[   87.500274][ T6201] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   87.553678][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.575496][ T5913] usb 2-1: selecting invalid altsetting 0
[   87.618694][ T6200] Cannot find set identified by id 0 to match
[   87.717483][   T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   87.763879][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.763959][ T5913] usb 2-1: USB disconnect, device number 5
[   87.791998][   T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   87.826380][   T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   87.843780][   T30] audit: type=1400 audit(1764388843.554:220): avc:  denied  { read write } for  pid=6208 comm="syz.4.70" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   88.074717][   T10] usb 1-1: Manufacturer: syz
[   88.190473][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   88.689576][   T30] audit: type=1400 audit(1764388843.554:221): avc:  denied  { open } for  pid=6208 comm="syz.4.70" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   88.712358][    C0] vkms_vblank_simulate: vblank timer overrun
[   88.719982][   T10] usb 1-1: config 0 descriptor??
[   88.793827][   T10] rc_core: IR keymap rc-hauppauge not found
[   88.799845][   T10] Registered IR keymap rc-empty
[   88.805719][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   88.816748][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[   88.867004][ T5819] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   88.886097][ T5819] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   88.926910][ T5819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   89.030824][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   89.050508][   T30] audit: type=1400 audit(1764388844.764:222): avc:  denied  { read } for  pid=6219 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   89.087426][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   89.127119][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   89.196455][ T5819] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   89.219356][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   89.243623][ T5819] usb 3-1: Product: syz
[   89.247842][ T5819] usb 3-1: Manufacturer: syz
[   89.390022][   T30] audit: type=1400 audit(1764388845.044:223): avc:  denied  { listen } for  pid=6208 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.414736][ T5134] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   89.424451][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   89.424476][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   89.424488][ T5134] Workqueue: hci0 hci_rx_work
[   89.424519][ T5134] Call Trace:
[   89.424527][ T5134]  <TASK>
[   89.424535][ T5134]  dump_stack_lvl+0x16c/0x1f0
[   89.424555][ T5134]  sysfs_warn_dup+0x7f/0xa0
[   89.424579][ T5134]  sysfs_create_dir_ns+0x24b/0x2b0
[   89.424603][ T5134]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   89.424626][ T5134]  ? find_held_lock+0x2b/0x80
[   89.424652][ T5134]  ? do_raw_spin_unlock+0x172/0x230
[   89.424667][ T5134]  kobject_add_internal+0x2c4/0x9b0
[   89.424682][ T5134]  kobject_add+0x16e/0x240
[   89.424698][ T5134]  ? __pfx_kobject_add+0x10/0x10
[   89.424718][ T5134]  ? do_raw_spin_unlock+0x172/0x230
[   89.424738][ T5134]  ? kobject_put+0xab/0x5a0
[   89.424762][ T5134]  device_add+0x288/0x1aa0
[   89.424780][ T5134]  ? __pfx_dev_set_name+0x10/0x10
[   89.424796][ T5134]  ? __pfx_device_add+0x10/0x10
[   89.424809][ T5134]  ? mgmt_send_event_skb+0x2fb/0x460
[   89.424829][ T5134]  hci_conn_add_sysfs+0x17e/0x230
[   89.424844][ T5134]  le_conn_complete_evt+0x1260/0x2150
[   89.424876][ T5134]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   89.424899][ T5134]  ? hci_event_packet+0x459/0x11c0
[   89.424924][ T5134]  hci_le_conn_complete_evt+0x23c/0x370
[   89.424942][ T5134]  hci_le_meta_evt+0x357/0x5e0
[   89.424952][ T5134]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   89.424970][ T5134]  hci_event_packet+0x685/0x11c0
[   89.424991][ T5134]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   89.425008][ T5134]  ? __pfx_hci_event_packet+0x10/0x10
[   89.425033][ T5134]  ? do_raw_read_unlock+0x44/0xe0
[   89.425053][ T5134]  ? hci_send_to_sock+0x11b/0x780
[   89.425074][ T5134]  hci_rx_work+0x2c9/0xeb0
[   89.425092][ T5134]  process_one_work+0x9cf/0x1b70
[   89.425110][ T5134]  ? __pfx_process_one_work+0x10/0x10
[   89.425130][ T5134]  ? assign_work+0x1a0/0x250
[   89.425150][ T5134]  worker_thread+0x6c8/0xf10
[   89.425175][ T5134]  ? __kthread_parkme+0x19e/0x250
[   89.425200][ T5134]  ? __pfx_worker_thread+0x10/0x10
[   89.425211][ T5134]  kthread+0x3c5/0x780
[   89.425222][ T5134]  ? __pfx_kthread+0x10/0x10
[   89.425233][ T5134]  ? rcu_is_watching+0x12/0xc0
[   89.425247][ T5134]  ? __pfx_kthread+0x10/0x10
[   89.425258][ T5134]  ret_from_fork+0x675/0x7d0
[   89.425271][ T5134]  ? __pfx_kthread+0x10/0x10
[   89.425288][ T5134]  ret_from_fork_asm+0x1a/0x30
[   89.425325][ T5134]  </TASK>
[   89.425354][ T5134] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   89.682645][ T5134] Bluetooth: hci0: failed to register connection device
[   89.731446][ T6212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   89.783915][   T30] audit: type=1400 audit(1764388845.044:224): avc:  denied  { accept } for  pid=6208 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.831285][ T5819] cdc_wdm 3-1:1.0: skipping garbage
[   89.843820][ T5819] cdc_wdm 3-1:1.0: skipping garbage
[   89.865403][   T30] audit: type=1400 audit(1764388845.484:225): avc:  denied  { sys_module } for  pid=6226 comm="syz.3.73" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   89.886616][ T5819] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   89.893644][ T5819] cdc_wdm 3-1:1.0: Unknown control protocol
[   89.986457][   T30] audit: type=1400 audit(1764388845.704:226): avc:  denied  { read write } for  pid=6198 comm="syz.0.66" name="event4" dev="devtmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   90.010003][    C0] vkms_vblank_simulate: vblank timer overrun
[   90.041736][    T9] usb 1-1: USB disconnect, device number 2
[   90.129606][    C0] wdm_int_callback: 5197 callbacks suppressed
[   90.129626][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.142298][    C0] wdm_int_callback: 5197 callbacks suppressed
[   90.142320][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.155702][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.162318][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.169266][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.175878][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.182377][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.188984][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.195316][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.201910][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.208537][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.215113][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.221668][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.228240][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.234725][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.241295][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.247681][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.254247][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.260947][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   90.267515][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   90.463189][ T5913] usb 3-1: USB disconnect, device number 2
[   90.468501][ T6243] dummy0: entered promiscuous mode
[   90.476220][ T6243] bond_slave_0: entered promiscuous mode
[   90.482481][ T6243] bond_slave_0: left promiscuous mode
[   90.530816][ T6243] dummy0: left promiscuous mode
[   90.543249][ T6244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.413768][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   91.573843][ T5913] usb 4-1: Using ep0 maxpacket: 16
[   91.581033][ T5913] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   91.591894][ T5913] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   91.602029][ T5913] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.615330][ T5913] usb 4-1: config 1 interface 0 has no altsetting 0
[   91.623875][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   91.633142][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.642015][ T5913] usb 4-1: Product: syz
[   91.646402][ T5913] usb 4-1: Manufacturer: syz
[   91.651066][ T5913] usb 4-1: SerialNumber: syz
[   92.147325][ T5913] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   92.347861][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   92.347875][   T30] audit: type=1400 audit(1764388848.064:232): avc:  denied  { read write } for  pid=6254 comm="syz.3.79" name="lp0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   92.646035][   T30] audit: type=1400 audit(1764388848.064:233): avc:  denied  { open } for  pid=6254 comm="syz.3.79" path="/dev/usb/lp0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   92.713208][   T30] audit: type=1400 audit(1764388848.094:234): avc:  denied  { watch watch_reads } for  pid=6254 comm="syz.3.79" path="/18" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   95.466187][    T9] usb 4-1: USB disconnect, device number 4
[   95.500981][    T9] usblp0: removed
[   95.612440][ T5819] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   95.752812][   T30] audit: type=1400 audit(1764388851.354:235): avc:  denied  { override_creds } for  pid=6283 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   95.880697][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[   95.891401][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   95.891418][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   95.891425][ T5823] Workqueue: hci1 hci_rx_work
[   95.891454][ T5823] Call Trace:
[   95.891459][ T5823]  <TASK>
[   95.891463][ T5823]  dump_stack_lvl+0x16c/0x1f0
[   95.891476][ T5823]  sysfs_warn_dup+0x7f/0xa0
[   95.891491][ T5823]  sysfs_create_dir_ns+0x24b/0x2b0
[   95.891506][ T5823]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   95.891519][ T5823]  ? find_held_lock+0x2b/0x80
[   95.891537][ T5823]  ? do_raw_spin_unlock+0x172/0x230
[   95.891552][ T5823]  kobject_add_internal+0x2c4/0x9b0
[   95.891567][ T5823]  kobject_add+0x16e/0x240
[   95.891580][ T5823]  ? __pfx_kobject_add+0x10/0x10
[   95.891592][ T5823]  ? do_raw_spin_unlock+0x172/0x230
[   95.891604][ T5823]  ? kobject_put+0xab/0x5a0
[   95.891619][ T5823]  device_add+0x288/0x1aa0
[   95.891633][ T5823]  ? __pfx_dev_set_name+0x10/0x10
[   95.891648][ T5823]  ? __pfx_device_add+0x10/0x10
[   95.891661][ T5823]  ? mgmt_send_event_skb+0x2fb/0x460
[   95.891680][ T5823]  hci_conn_add_sysfs+0x17e/0x230
[   95.891691][ T5823]  le_conn_complete_evt+0x1260/0x2150
[   95.891710][ T5823]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   95.891725][ T5823]  ? hci_event_packet+0x459/0x11c0
[   95.891743][ T5823]  hci_le_conn_complete_evt+0x23c/0x370
[   95.891762][ T5823]  hci_le_meta_evt+0x357/0x5e0
[   95.891771][ T5823]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   95.891788][ T5823]  hci_event_packet+0x685/0x11c0
[   95.891803][ T5823]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   95.891813][ T5823]  ? __pfx_hci_event_packet+0x10/0x10
[   95.891829][ T5823]  ? kcov_remote_start+0x3c9/0x6d0
[   95.891842][ T5823]  ? lockdep_hardirqs_on+0x7c/0x110
[   95.891856][ T5823]  hci_rx_work+0x2c9/0xeb0
[   95.891873][ T5823]  process_one_work+0x9cf/0x1b70
[   95.891890][ T5823]  ? __pfx_process_one_work+0x10/0x10
[   95.891905][ T5823]  ? assign_work+0x1a0/0x250
[   95.891917][ T5823]  worker_thread+0x6c8/0xf10
[   95.891933][ T5823]  ? __pfx_worker_thread+0x10/0x10
[   95.891945][ T5823]  kthread+0x3c5/0x780
[   95.891955][ T5823]  ? __pfx_kthread+0x10/0x10
[   95.891966][ T5823]  ? rcu_is_watching+0x12/0xc0
[   95.891980][ T5823]  ? __pfx_kthread+0x10/0x10
[   95.891991][ T5823]  ret_from_fork+0x675/0x7d0
[   95.892000][ T5823]  ? __pfx_kthread+0x10/0x10
[   95.892010][ T5823]  ret_from_fork_asm+0x1a/0x30
[   95.892032][ T5823]  </TASK>
[   95.892044][ T5823] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   96.143037][ T5823] Bluetooth: hci1: failed to register connection device
[   96.193512][ T5819] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   96.218706][ T5819] usb 5-1: can't read configurations, error -22
[   96.664405][ T5819] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   96.864148][   T30] audit: type=1400 audit(1764388852.584:236): avc:  denied  { connect } for  pid=6301 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   96.893400][ T5819] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   96.913188][ T5819] usb 5-1: can't read configurations, error -22
[   96.934640][ T5819] usb usb5-port1: attempt power cycle
[   96.945114][   T30] audit: type=1400 audit(1764388852.604:237): avc:  denied  { write } for  pid=6301 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   97.063640][ T5972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   97.104234][   T30] audit: type=1400 audit(1764388852.814:238): avc:  denied  { write } for  pid=6301 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   97.214017][ T5972] usb 3-1: Using ep0 maxpacket: 8
[   97.222069][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.241620][ T5972] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   97.261966][ T5972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   97.284462][ T5819] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   97.285153][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.317634][ T5819] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   97.331521][ T5972] usb 3-1: config 0 descriptor??
[   97.338493][ T5819] usb 5-1: can't read configurations, error -22
[   97.371452][   T30] audit: type=1400 audit(1764388853.084:239): avc:  denied  { write } for  pid=6307 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   97.392041][ T6308] process 'syz.1.93' launched './file0' with NULL argv: empty string added
[   97.443617][   T30] audit: type=1400 audit(1764388853.104:240): avc:  denied  { execute } for  pid=6307 comm="syz.1.93" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   97.485251][ T5819] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   97.493626][   T30] audit: type=1400 audit(1764388853.114:241): avc:  denied  { execute_no_trans } for  pid=6307 comm="syz.1.93" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   97.566161][ T6295] netlink: 116 bytes leftover after parsing attributes in process `syz.3.89'.
[   97.578371][ T5819] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   97.586484][ T5819] usb 5-1: can't read configurations, error -22
[   97.593069][ T5819] usb usb5-port1: unable to enumerate USB device
[   97.891113][   T30] audit: type=1400 audit(1764388853.604:242): avc:  denied  { create } for  pid=6313 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   98.220903][    T9] usb 3-1: USB disconnect, device number 3
[   98.344448][   T30] audit: type=1400 audit(1764388854.044:243): avc:  denied  { append } for  pid=6318 comm="syz.1.96" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   98.369595][ T6319] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[   99.248484][   T30] audit: type=1400 audit(1764388854.114:244): avc:  denied  { create } for  pid=6318 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  100.085518][ T5972] libceph: connect (1)[c::]:6789 error -101
[  100.113970][ T5972] libceph: mon0 (1)[c::]:6789 connect error
[  100.211930][   T30] audit: type=1400 audit(1764388855.914:245): avc:  denied  { write } for  pid=6336 comm="syz.1.101" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.472667][ T6339] ceph: No mds server is up or the cluster is laggy
[  100.482877][   T30] audit: type=1400 audit(1764388855.914:246): avc:  denied  { open } for  pid=6336 comm="syz.1.101" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.585968][ T5972] libceph: connect (1)[c::]:6789 error -101
[  100.638428][ T5972] libceph: mon0 (1)[c::]:6789 connect error
[  101.159515][ T5972] libceph: connect (1)[c::]:6789 error -101
[  101.169489][ T5972] libceph: mon0 (1)[c::]:6789 connect error
[  101.275053][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[  101.296410][   T30] audit: type=1400 audit(1764388857.004:247): avc:  denied  { append } for  pid=6330 comm="syz.2.99" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  101.435343][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  101.445235][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  101.445259][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  101.445271][ T5823] Workqueue: hci4 hci_rx_work
[  101.445300][ T5823] Call Trace:
[  101.445305][ T5823]  <TASK>
[  101.445312][ T5823]  dump_stack_lvl+0x16c/0x1f0
[  101.445339][ T5823]  sysfs_warn_dup+0x7f/0xa0
[  101.445362][ T5823]  sysfs_create_dir_ns+0x24b/0x2b0
[  101.445384][ T5823]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  101.445403][ T5823]  ? find_held_lock+0x2b/0x80
[  101.445428][ T5823]  ? do_raw_spin_unlock+0x172/0x230
[  101.445448][ T5823]  kobject_add_internal+0x2c4/0x9b0
[  101.445471][ T5823]  kobject_add+0x16e/0x240
[  101.445487][ T5823]  ? __pfx_kobject_add+0x10/0x10
[  101.445506][ T5823]  ? do_raw_spin_unlock+0x172/0x230
[  101.445524][ T5823]  ? kobject_put+0xab/0x5a0
[  101.445545][ T5823]  device_add+0x288/0x1aa0
[  101.445566][ T5823]  ? __pfx_dev_set_name+0x10/0x10
[  101.445588][ T5823]  ? __pfx_device_add+0x10/0x10
[  101.445608][ T5823]  ? mgmt_send_event_skb+0x2fb/0x460
[  101.445637][ T5823]  hci_conn_add_sysfs+0x17e/0x230
[  101.445654][ T5823]  le_conn_complete_evt+0x1260/0x2150
[  101.445684][ T5823]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  101.445706][ T5823]  ? hci_event_packet+0x459/0x11c0
[  101.445733][ T5823]  hci_le_conn_complete_evt+0x23c/0x370
[  101.445762][ T5823]  hci_le_meta_evt+0x357/0x5e0
[  101.445776][ T5823]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  101.445803][ T5823]  hci_event_packet+0x685/0x11c0
[  101.445827][ T5823]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  101.445842][ T5823]  ? __pfx_hci_event_packet+0x10/0x10
[  101.445868][ T5823]  ? kcov_remote_start+0x3c9/0x6d0
[  101.445888][ T5823]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.445908][ T5823]  hci_rx_work+0x2c9/0xeb0
[  101.445938][ T5823]  process_one_work+0x9cf/0x1b70
[  101.445964][ T5823]  ? __pfx_process_one_work+0x10/0x10
[  101.445988][ T5823]  ? assign_work+0x1a0/0x250
[  101.446005][ T5823]  worker_thread+0x6c8/0xf10
[  101.446032][ T5823]  ? __pfx_worker_thread+0x10/0x10
[  101.446049][ T5823]  kthread+0x3c5/0x780
[  101.446066][ T5823]  ? __pfx_kthread+0x10/0x10
[  101.446083][ T5823]  ? rcu_is_watching+0x12/0xc0
[  101.446103][ T5823]  ? __pfx_kthread+0x10/0x10
[  101.446117][ T5823]  ret_from_fork+0x675/0x7d0
[  101.446134][ T5823]  ? __pfx_kthread+0x10/0x10
[  101.446148][ T5823]  ret_from_fork_asm+0x1a/0x30
[  101.446178][ T5823]  </TASK>
[  101.446281][ T5823] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  101.738936][ T5823] Bluetooth: hci4: failed to register connection device
[  102.869987][   T30] audit: type=1400 audit(1764388858.574:248): avc:  denied  { read } for  pid=6373 comm="syz.2.109" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  103.031903][   T30] audit: type=1400 audit(1764388858.574:249): avc:  denied  { ioctl } for  pid=6373 comm="syz.2.109" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  103.056612][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.098463][   T30] audit: type=1400 audit(1764388858.584:250): avc:  denied  { create } for  pid=6375 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  103.117782][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.364417][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.416679][   T30] audit: type=1400 audit(1764388859.124:251): avc:  denied  { associate } for  pid=6375 comm="syz.4.111" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  103.438036][   T30] audit: type=1400 audit(1764388859.124:252): avc:  denied  { kexec_image_load } for  pid=6375 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  103.475793][   T30] audit: type=1400 audit(1764388859.164:253): avc:  denied  { bind } for  pid=6384 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.575027][ T6387] team0: Cannot enslave team device to itself
[  103.637423][   T30] audit: type=1400 audit(1764388859.194:254): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  103.657541][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  103.698287][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.714517][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  103.801516][ T5913] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  103.803674][   T30] audit: type=1400 audit(1764388859.284:255): avc:  denied  { mount } for  pid=6384 comm="syz.0.112" name="/" dev="hugetlbfs" ino=11241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  103.996219][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.093416][   T30] audit: type=1804 audit(1764388859.394:256): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.112" name="file0" dev="hugetlbfs" ino=11243 res=1 errno=0
[  104.094177][ T5913] usb 3-1: config 0 descriptor??
[  104.156437][   T30] audit: type=1804 audit(1764388859.404:257): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.112" name="file0" dev="hugetlbfs" ino=11243 res=1 errno=0
[  104.363679][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  104.525247][ T5972] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.613617][    T9] usb 2-1: Using ep0 maxpacket: 32
[  104.715473][ T5972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[  104.748622][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64
[  104.823710][ T5972] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  104.832960][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.853287][ T5972] usb 4-1: Product: syz
[  104.866242][ T5972] usb 4-1: Manufacturer: syz
[  104.885809][ T5972] usb 4-1: SerialNumber: syz
[  104.910880][ T5819] libceph: connect (1)[c::]:6789 error -101
[  104.916110][ T5972] usb 4-1: config 0 descriptor??
[  104.918223][ T5819] libceph: mon0 (1)[c::]:6789 connect error
[  104.930079][ T5819] libceph: connect (1)[c::]:6789 error -101
[  104.938101][ T5819] libceph: mon0 (1)[c::]:6789 connect error
[  104.945566][ T6402] ceph: No mds server is up or the cluster is laggy
[  106.203193][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.232305][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.495198][ T6412] ALSA: mixer_oss: invalid OSS volume ''
[  106.811054][ T5819] usb 4-1: USB disconnect, device number 5
[  106.906667][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  106.992717][    T9] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  107.011664][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  107.060908][    T9] usb 2-1: can't read configurations, error -71
[  107.646385][ T5913] usb 3-1: USB disconnect, device number 4
[  107.795330][ T5823] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  107.871689][  T978] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  107.894875][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.044837][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  108.044849][   T30] audit: type=1400 audit(1764388863.764:267): avc:  denied  { setopt } for  pid=6432 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  108.080077][ T6433] ipvlan1: entered promiscuous mode
[  108.154916][  T978] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  108.163933][    T9] usb 2-1: Using ep0 maxpacket: 8
[  108.183737][  T978] usb 1-1: config 5 has no interface number 0
[  108.190516][  T978] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  108.219020][ T6436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=6436 comm=syz.3.125
[  108.236181][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  108.248743][  T978] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  108.259637][    T9] usb 2-1: config 179 has no interface number 0
[  108.260049][   T30] audit: type=1400 audit(1764388863.924:268): avc:  denied  { name_bind } for  pid=6432 comm="syz.3.125" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  108.266307][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  108.332369][  T978] usb 1-1: config 5 interface 123 has no altsetting 0
[  108.343798][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  108.358540][  T978] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  108.368983][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.379145][  T978] usb 1-1: Product: syz
[  108.383449][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  108.413321][  T978] usb 1-1: Manufacturer: syz
[  108.429071][  T978] usb 1-1: SerialNumber: syz
[  108.434144][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  108.551508][   T30] audit: type=1400 audit(1764388863.934:269): avc:  denied  { audit_read } for  pid=6432 comm="syz.3.125" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  108.594765][   T30] audit: type=1400 audit(1764388864.034:270): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  108.695507][    T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  108.709227][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  108.718629][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.283698][   T30] audit: type=1400 audit(1764388864.154:271): avc:  denied  { create } for  pid=6439 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  109.307282][   T30] audit: type=1400 audit(1764388864.154:272): avc:  denied  { ioctl } for  pid=6439 comm="syz.4.128" path="socket:[9924]" dev="sockfs" ino=9924 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  109.365537][ T6421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  109.476993][   T30] audit: type=1400 audit(1764388865.194:273): avc:  denied  { getopt } for  pid=6442 comm="syz.4.129" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  109.553861][ T6443] tipc: Started in network mode
[  109.564222][ T6443] tipc: Node identity ea944ea480a4, cluster identity 4711
[  109.598738][ T6443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.634629][ T6443] syzkaller0: entered promiscuous mode
[  109.698123][ T6443] syzkaller0: entered allmulticast mode
[  109.736195][ T6443] tipc: Resetting bearer <eth:syzkaller0>
[  109.742370][   T30] audit: type=1400 audit(1764388865.454:274): avc:  denied  { mount } for  pid=6444 comm="syz.2.130" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  109.743259][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'.
[  109.808243][ T6442] tipc: Resetting bearer <eth:syzkaller0>
[  109.820867][   T30] audit: type=1400 audit(1764388865.484:275): avc:  denied  { ioctl } for  pid=6444 comm="syz.2.130" path="socket:[11421]" dev="sockfs" ino=11421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.858128][ T6442] tipc: Disabling bearer <eth:syzkaller0>
[  110.265206][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7
[  110.278963][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  110.464184][    T9] usb 3-1: Using ep0 maxpacket: 32
[  110.482955][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  110.496517][    T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  110.506113][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.516033][    T9] usb 3-1: Product: syz
[  110.520284][    T9] usb 3-1: Manufacturer: syz
[  110.525411][    T9] usb 3-1: SerialNumber: syz
[  110.534962][    T9] usb 3-1: config 0 descriptor??
[  110.561812][  T978] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  110.602906][    T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  110.643732][  T978] usb 1-1: USB disconnect, device number 3
[  110.649742][   T30] audit: type=1400 audit(1764388866.344:276): avc:  denied  { nlmsg_write } for  pid=6419 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  110.684021][ T5972] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  110.704558][    T9] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  110.756887][ T6447] FAULT_INJECTION: forcing a failure.
[  110.756887][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.796744][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) 
[  110.796767][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  110.796775][ T6447] Call Trace:
[  110.796780][ T6447]  <TASK>
[  110.796786][ T6447]  dump_stack_lvl+0x16c/0x1f0
[  110.796806][ T6447]  should_fail_ex+0x512/0x640
[  110.796830][ T6447]  _copy_from_user+0x2e/0xd0
[  110.796852][ T6447]  kstrtouint_from_user+0xd6/0x1d0
[  110.796867][ T6447]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  110.796893][ T6447]  ? __lock_acquire+0xb8a/0x1c90
[  110.796920][ T6447]  proc_fail_nth_write+0x83/0x220
[  110.796940][ T6447]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  110.796969][ T6447]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  110.796987][ T6447]  vfs_write+0x2a0/0x11d0
[  110.797007][ T6447]  ? __pfx___mutex_lock+0x10/0x10
[  110.797026][ T6447]  ? __pfx_vfs_write+0x10/0x10
[  110.797049][ T6447]  ? __fget_files+0x20e/0x3c0
[  110.797075][ T6447]  ksys_write+0x12a/0x250
[  110.797091][ T6447]  ? __pfx_ksys_write+0x10/0x10
[  110.797114][ T6447]  do_syscall_64+0xcd/0xfa0
[  110.797132][ T6447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.797150][ T6447] RIP: 0033:0x7f2853d8e1ff
[  110.797164][ T6447] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  110.797179][ T6447] RSP: 002b:00007f2854ce6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  110.797196][ T6447] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2853d8e1ff
[  110.797206][ T6447] RDX: 0000000000000001 RSI: 00007f2854ce60a0 RDI: 0000000000000004
[  110.797216][ T6447] RBP: 00007f2854ce6090 R08: 0000000000000000 R09: 0000000000000000
[  110.797224][ T6447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  110.797233][ T6447] R13: 00007f2853fe6038 R14: 00007f2853fe5fa0 R15: 00007fff98fca908
[  110.797258][ T6447]  </TASK>
[  111.333579][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  111.343076][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.446815][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  111.469015][ T5972] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  111.499119][    T9] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8
[  111.523717][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.553883][ T5972] usb 5-1: config 0 descriptor??
[  111.656087][    T9] usb 3-1: USB disconnect, device number 5
[  112.290806][ T6482] lo: entered allmulticast mode
[  112.301775][ T6482] tunl0: entered allmulticast mode
[  112.309619][ T6482] gre0: entered allmulticast mode
[  112.318100][ T6482] gretap0: entered allmulticast mode
[  112.336677][ T5913] usb 2-1: USB disconnect, device number 7
[  112.336742][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  112.351117][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  112.419121][ T6482] erspan0: entered allmulticast mode
[  112.532528][ T6482] ip_vti0: entered allmulticast mode
[  112.671464][ T6482] ip6_vti0: entered allmulticast mode
[  112.685406][ T6482] sit0: entered allmulticast mode
[  112.694541][ T6482] ip6tnl0: entered allmulticast mode
[  112.703374][ T6482] ip6gre0: entered allmulticast mode
[  112.784842][ T6482] syz_tun: entered allmulticast mode
[  113.349874][ T6482] ip6gretap0: entered allmulticast mode
[  113.389966][ T6482] bridge0: entered allmulticast mode
[  113.626159][ T6482] vcan0: entered allmulticast mode
[  113.660920][ T6482] bond0: entered allmulticast mode
[  113.668415][ T6482] bond_slave_0: entered allmulticast mode
[  113.676600][ T6482] bond_slave_1: entered allmulticast mode
[  113.698010][ T5913] usb 5-1: USB disconnect, device number 8
[  113.741372][ T6482] team0: entered allmulticast mode
[  113.754725][ T6482] team_slave_0: entered allmulticast mode
[  113.784923][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.806483][ T6509] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[  113.843719][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  113.843731][   T30] audit: type=1400 audit(1764388869.514:279): avc:  denied  { read } for  pid=6504 comm="syz.2.141" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  113.925637][ T6482] team_slave_1: entered allmulticast mode
[  113.947046][ T6482] dummy0: entered allmulticast mode
[  113.952644][   T30] audit: type=1400 audit(1764388869.524:280): avc:  denied  { bind } for  pid=6504 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  113.980319][ T6482] nlmon0: entered allmulticast mode
[  114.000043][ T6482] caif0: entered allmulticast mode
[  114.005698][   T30] audit: type=1400 audit(1764388869.624:281): avc:  denied  { setopt } for  pid=6504 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  114.071437][ T6482] batadv0: entered allmulticast mode
[  114.080872][ T6482] vxcan0: entered allmulticast mode
[  114.127328][ T6482] vxcan1: entered allmulticast mode
[  114.134460][ T6482] veth0: entered allmulticast mode
[  114.140136][   T30] audit: type=1400 audit(1764388869.804:282): avc:  denied  { name_connect } for  pid=6504 comm="syz.2.141" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  114.172730][ T6482] veth1: entered allmulticast mode
[  114.180368][ T6482] wg0: entered allmulticast mode
[  114.193937][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  114.213184][ T6482] wg1: entered allmulticast mode
[  114.297186][ T6482] wg2: entered allmulticast mode
[  114.309823][ T6482] veth0_to_bridge: entered allmulticast mode
[  114.364429][ T6482] veth1_to_bridge: entered allmulticast mode
[  114.383460][ T6482] veth0_to_bond: entered allmulticast mode
[  114.383642][ T5913] usb 5-1: Using ep0 maxpacket: 16
[  114.385252][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  114.426581][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  114.434664][ T6482] veth1_to_bond: entered allmulticast mode
[  114.435945][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.442700][ T6482] veth0_to_team: entered allmulticast mode
[  114.500174][ T6504] delete_channel: no stack
[  114.656066][ T5913] usb 5-1: Product: syz
[  114.658315][ T6482] veth1_to_team: entered allmulticast mode
[  114.660984][ T5913] usb 5-1: Manufacturer: syz
[  114.668390][ T6482] veth0_to_batadv: entered allmulticast mode
[  114.677130][ T5913] usb 5-1: SerialNumber: syz
[  114.692027][ T5913] usb 5-1: config 0 descriptor??
[  114.703197][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  114.714340][ T5913] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  114.715274][ T6482] batadv_slave_0: entered allmulticast mode
[  114.739523][ T6482] veth1_to_batadv: entered allmulticast mode
[  114.747850][ T6482] batadv_slave_1: entered allmulticast mode
[  114.756012][ T6482] xfrm0: entered allmulticast mode
[  114.762015][ T6482] veth0_to_hsr: entered allmulticast mode
[  114.770249][ T6482] hsr_slave_0: entered allmulticast mode
[  114.777845][ T6482] veth1_to_hsr: entered allmulticast mode
[  114.785179][ T6482] hsr_slave_1: entered allmulticast mode
[  114.792189][ T6482] hsr0: entered allmulticast mode
[  114.799688][ T6482] veth1_virt_wifi: entered allmulticast mode
[  114.808142][ T6482] veth0_virt_wifi: entered allmulticast mode
[  114.817935][ T6482] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  114.826120][ T6482] veth1_vlan: entered allmulticast mode
[  114.834968][ T6482] veth0_vlan: entered allmulticast mode
[  114.842408][ T6482] vlan0: entered allmulticast mode
[  114.850010][ T6482] vlan1: entered allmulticast mode
[  114.856656][ T6482] macvlan0: entered allmulticast mode
[  114.865653][ T6482] macvlan1: entered allmulticast mode
[  114.872540][ T6482] ipvlan0: entered allmulticast mode
[  114.879615][ T6482] ipvlan1: left promiscuous mode
[  114.885361][ T6482] ipvlan1: entered allmulticast mode
[  114.891040][ T6482] veth1_macvtap: entered allmulticast mode
[  114.898954][ T6482] veth0_macvtap: entered allmulticast mode
[  114.907396][ T6482] macvtap0: entered allmulticast mode
[  114.915657][   T30] audit: type=1400 audit(1764388870.634:283): avc:  denied  { create } for  pid=6507 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  114.938370][ T6482] macsec0: entered allmulticast mode
[  114.943919][  T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.959350][ T6482] geneve0: entered allmulticast mode
[  114.963829][   T30] audit: type=1400 audit(1764388870.654:284): avc:  denied  { setopt } for  pid=6507 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  114.994737][ T6482] geneve1: entered allmulticast mode
[  115.065742][ T6482] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  115.109406][   T30] audit: type=1400 audit(1764388870.814:285): avc:  denied  { read } for  pid=6507 comm="syz.4.142" laddr=fe80::f lport=47476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  115.125350][  T978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  115.140408][  T978] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  115.151104][ T6482] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  115.159086][  T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  115.165697][ T6482] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  115.168227][  T978] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  115.176051][ T5913] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  115.187666][  T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  115.204692][  T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  115.217057][ T6482] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  115.227216][ T6482] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  115.236735][ T6482] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.247231][ T6482] gre1: entered allmulticast mode
[  115.258958][ T6490] syzkaller0: entered promiscuous mode
[  115.264523][ T6490] syzkaller0: entered allmulticast mode
[  115.287496][ T6509] 8021q: adding VLAN 0 to HW filter on device team0
[  115.304979][ T6509] bond0: (slave team0): Enslaving as an active interface with an up link
[  115.324908][  T978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  115.326714][ T5913] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  115.343630][  T978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  115.343656][  T978] usb 1-1: Product: syz
[  115.343671][  T978] usb 1-1: Manufacturer: syz
[  115.350399][ T6520] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.358292][ T5913] em28xx 5-1:0.0: board has no eeprom
[  115.365655][  T978] cdc_wdm 1-1:1.0: skipping garbage
[  115.378554][  T978] cdc_wdm 1-1:1.0: skipping garbage
[  115.388478][  T978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  115.401982][  T978] cdc_wdm 1-1:1.0: Unknown control protocol
[  115.474375][ T5913] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  115.504877][ T5913] em28xx 5-1:0.0: dvb set to bulk mode.
[  115.538144][ T5891] em28xx 5-1:0.0: Binding DVB extension
[  115.584236][ T5913] usb 5-1: USB disconnect, device number 9
[  115.661989][ T5913] em28xx 5-1:0.0: Disconnecting em28xx
[  115.700423][ T5891] em28xx 5-1:0.0: Registering input extension
[  115.707940][ T5913] em28xx 5-1:0.0: Closing input extension
[  115.768128][ T5913] em28xx 5-1:0.0: Freeing device
[  115.804195][  T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  115.825742][    C0] wdm_int_callback: 1090 callbacks suppressed
[  115.825765][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  115.838440][    C0] wdm_int_callback: 1090 callbacks suppressed
[  115.838460][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  115.839815][ T6520] Cannot find add_set index 1 as target
[  115.844946][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  115.862775][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  115.870927][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  115.877551][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  115.883680][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  115.895444][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  116.000373][ T5913] usb 1-1: USB disconnect, device number 4
[  116.033724][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'.
[  116.197644][ T6535] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  116.253007][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.266797][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.285615][  T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.306578][  T978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.334085][   T10] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[  116.363351][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.373706][   T10] usb 3-1: config 0 has no interface number 0
[  116.379872][   T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=b2.84
[  116.397949][  T978] usb 2-1: config 0 descriptor??
[  116.426347][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.447688][   T10] usb 3-1: config 0 descriptor??
[  116.463937][   T10] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  116.522650][   T10] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  116.787936][   T30] audit: type=1400 audit(1764388872.484:286): avc:  denied  { map } for  pid=6544 comm="syz.3.152" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  116.888311][   T10] usb 3-1: USB disconnect, device number 6
[  116.915813][  T978] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[  116.958523][   T30] audit: type=1400 audit(1764388872.524:287): avc:  denied  { execute } for  pid=6544 comm="syz.3.152" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  117.050532][  T978] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  117.260878][ T5913] usb 2-1: USB disconnect, device number 8
[  117.443770][   T30] audit: type=1400 audit(1764388873.144:288): avc:  denied  { execute } for  pid=6544 comm="syz.3.152" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  117.576268][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz.2.153'.
[  117.842664][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[  118.326056][ T6571] GUP no longer grows the stack in syz.1.158 (6571): 200000004000-20000000a000 (200000002000)
[  118.336745][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) 
[  118.336772][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.336779][ T6571] Call Trace:
[  118.336784][ T6571]  <TASK>
[  118.336788][ T6571]  dump_stack_lvl+0x16c/0x1f0
[  118.336804][ T6571]  gup_vma_lookup+0x1d2/0x220
[  118.336818][ T6571]  __get_user_pages+0x241/0x3530
[  118.336835][ T6571]  ? __pfx___schedule+0x10/0x10
[  118.336852][ T6571]  ? lockdep_hardirqs_on+0x7c/0x110
[  118.336863][ T6571]  ? __pfx___get_user_pages+0x10/0x10
[  118.336882][ T6571]  get_user_pages_remote+0x243/0xab0
[  118.336896][ T6571]  ? irqentry_exit_to_user_mode+0x2f0/0x310
[  118.336909][ T6571]  ? __pfx_get_user_pages_remote+0x10/0x10
[  118.336926][ T6571]  ? __access_remote_vm+0x505/0xaa0
[  118.336941][ T6571]  __access_remote_vm+0x250/0xaa0
[  118.336957][ T6571]  ? __pfx___access_remote_vm+0x10/0x10
[  118.336973][ T6571]  proc_pid_cmdline_read+0x4de/0x8e0
[  118.336989][ T6571]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  118.337003][ T6571]  ? rw_verify_area+0xcf/0x6c0
[  118.337019][ T6571]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  118.337031][ T6571]  vfs_readv+0x5c1/0x8b0
[  118.337049][ T6571]  ? __pfx_vfs_readv+0x10/0x10
[  118.337074][ T6571]  ? __fget_files+0x20e/0x3c0
[  118.337089][ T6571]  ? do_preadv+0x1a6/0x270
[  118.337103][ T6571]  do_preadv+0x1a6/0x270
[  118.337119][ T6571]  ? __pfx_do_preadv+0x10/0x10
[  118.337138][ T6571]  do_syscall_64+0xcd/0xfa0
[  118.337149][ T6571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.337161][ T6571] RIP: 0033:0x7f342618f749
[  118.337170][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.337180][ T6571] RSP: 002b:00007f3426fa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  118.337192][ T6571] RAX: ffffffffffffffda RBX: 00007f34263e6090 RCX: 00007f342618f749
[  118.337199][ T6571] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000e
[  118.337205][ T6571] RBP: 00007f3426213f91 R08: 0000000000000000 R09: 0000000000000000
[  118.337211][ T6571] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  118.337217][ T6571] R13: 00007f34263e6128 R14: 00007f34263e6090 R15: 00007ffd0037e1a8
[  118.337231][ T6571]  </TASK>
[  118.683771][ T6575] bridge0: entered allmulticast mode
[  118.692498][ T6575] pim6reg: entered allmulticast mode
[  118.698909][ T6575] pim6reg: left allmulticast mode
[  118.704020][ T6575] bridge0: left allmulticast mode
[  118.716885][ T5823] Bluetooth: hci4: link tx timeout
[  118.723350][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.350188][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'.
[  119.567547][ T6593] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  119.724915][ T6596] evm: overlay not supported
[  119.751254][  T978] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  119.972937][  T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.030698][  T978] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  120.062053][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.107145][  T978] usb 5-1: config 0 descriptor??
[  120.140164][  T978] pwc: Askey VC010 type 2 USB webcam detected.
[  120.299556][ T5913] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  120.745364][  T978] pwc: recv_control_msg error -32 req 02 val 2b00
[  120.752563][  T978] pwc: recv_control_msg error -32 req 02 val 2700
[  120.761656][  T978] pwc: recv_control_msg error -32 req 02 val 2c00
[  120.771955][  T978] pwc: recv_control_msg error -32 req 04 val 1000
[  120.780260][  T978] pwc: recv_control_msg error -32 req 04 val 1300
[  120.787657][  T978] pwc: recv_control_msg error -32 req 04 val 1400
[  120.793598][ T5913] usb 2-1: device descriptor read/64, error -71
[  120.796162][  T978] pwc: recv_control_msg error -32 req 02 val 2000
[  120.804902][ T5134] Bluetooth: hci4: command 0x0406 tx timeout
[  120.807540][  T978] pwc: recv_control_msg error -32 req 02 val 2100
[  120.820261][  T978] pwc: recv_control_msg error -32 req 04 val 1500
[  121.053565][  T978] pwc: recv_control_msg error -71 req 02 val 2400
[  121.073890][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  121.074387][  T978] pwc: recv_control_msg error -71 req 02 val 2600
[  121.105163][  T978] pwc: recv_control_msg error -71 req 02 val 2900
[  121.114776][  T978] pwc: recv_control_msg error -71 req 02 val 2800
[  121.122265][  T978] pwc: recv_control_msg error -71 req 04 val 1100
[  121.135969][  T978] pwc: recv_control_msg error -71 req 04 val 1200
[  121.218638][  T978] pwc: Registered as video103.
[  121.238216][  T978] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  121.274883][ T5913] usb 2-1: device descriptor read/64, error -71
[  121.376334][  T978] usb 5-1: USB disconnect, device number 10
[  121.395431][ T5913] usb usb2-port1: attempt power cycle
[  121.661882][ T6614] kvm: kvm [6610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  121.663098][ T6613] netlink: 4 bytes leftover after parsing attributes in process `'.
[  121.674341][ T6614] kvm: kvm [6610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800
[  121.783649][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  121.804713][ T5913] usb 2-1: device descriptor read/8, error -71
[  121.874019][ T6621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.173'.
[  121.963649][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  122.136535][ T5819] usb 3-1: config 0 has no interfaces?
[  122.148398][ T5819] usb 3-1: New USB device found, idVendor=06cd, idProduct=0105, bcdDevice=e2.57
[  122.211038][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.247826][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.258060][ T5819] usb 3-1: config 0 descriptor??
[  122.512313][ T5972] usb 3-1: USB disconnect, device number 7
[  122.516763][ T6634] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  123.046635][ T6639] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  123.853597][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  123.926132][ T6657] netlink: 4 bytes leftover after parsing attributes in process `'.
[  124.016666][   T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  124.033834][   T10] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  124.047212][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  124.056962][   T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  124.069854][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  124.085426][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  124.098336][   T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  124.108119][   T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  124.117796][   T10] usb 2-1: Product: syz
[  124.122127][   T10] usb 2-1: Manufacturer: syz
[  124.127256][ T5819] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  124.140563][ T6648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  124.160673][   T10] cdc_wdm 2-1:1.0: skipping garbage
[  124.176461][   T10] cdc_wdm 2-1:1.0: skipping garbage
[  124.194534][   T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  124.203723][   T10] cdc_wdm 2-1:1.0: Unknown control protocol
[  124.261887][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  124.261920][   T30] audit: type=1400 audit(1764388879.974:294): avc:  denied  { lock } for  pid=6660 comm="syz.2.187" path="socket:[11759]" dev="sockfs" ino=11759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  124.319008][ T6664] netlink: 'syz.0.186': attribute type 64 has an invalid length.
[  124.327393][ T6664] netlink: 5 bytes leftover after parsing attributes in process `syz.0.186'.
[  124.408206][ T6648] Cannot find add_set index 1 as target
[  124.464281][ T6664] gretap0: entered allmulticast mode
[  124.568302][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  124.601091][ T5972] usb 2-1: USB disconnect, device number 13
[  124.607353][ T6664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  124.639964][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  124.691007][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  124.730971][   T30] audit: type=1400 audit(1764388880.444:295): avc:  denied  { read } for  pid=6658 comm="syz.0.186" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  124.735525][ T5819] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  124.771164][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.779865][   T30] audit: type=1400 audit(1764388880.444:296): avc:  denied  { open } for  pid=6658 comm="syz.0.186" path="/35/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  124.788297][ T5819] usb 5-1: Product: syz
[  124.808275][ T5819] usb 5-1: Manufacturer: syz
[  124.812928][ T5819] usb 5-1: SerialNumber: syz
[  124.832567][ T5819] usb 5-1: config 0 descriptor??
[  124.838642][ T6655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.846360][ T6655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.854820][ T5819] usb 5-1: ucan: probing device on interface #0
[  124.962010][   T30] audit: type=1400 audit(1764388880.674:297): avc:  denied  { append } for  pid=6671 comm="syz.3.190" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.987111][   T30] audit: type=1400 audit(1764388880.674:298): avc:  denied  { setopt } for  pid=6671 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  125.016662][   T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.127529][ T6678] comedi comedi3: aio_iiro_16: I/O port conflict (0x2,8)
[  125.976146][ T6679] 9pnet_virtio: no channels available for device syz
[  126.054163][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.249155][   T43] usb 3-1: Using ep0 maxpacket: 8
[  126.327047][ T5913] usb 1-1: device descriptor read/64, error -71
[  126.366550][   T43] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=9a.32
[  126.394154][ T5819] ucan 5-1:0.0: probe with driver ucan failed with error -110
[  126.713604][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.736224][   T43] usb 3-1: config 0 descriptor??
[  126.776507][   T43] pcwd_usb: The device isn't a Human Interface Device
[  126.835500][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  126.871476][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'.
[  126.871502][   T43] usb 5-1: USB disconnect, device number 11
[  126.880456][   T30] audit: type=1400 audit(1764388882.584:299): avc:  denied  { ioctl } for  pid=6683 comm="syz.3.193" path="socket:[11805]" dev="sockfs" ino=11805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  126.886271][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.911062][    C0] vkms_vblank_simulate: vblank timer overrun
[  126.993740][ T5913] usb 1-1: device descriptor read/64, error -71
[  127.030368][ T6684] bridge_slave_0 (unregistering): left promiscuous mode
[  127.039578][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.059259][ T5819] usb 3-1: USB disconnect, device number 8
[  127.119018][ T5913] usb usb1-port1: attempt power cycle
[  127.124530][ T6696] syz_tun: entered allmulticast mode
[  128.579193][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  128.972186][ T6695] syz_tun: left allmulticast mode
[  129.015469][    T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  129.028968][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.039441][   T30] audit: type=1400 audit(1764388884.754:300): avc:  denied  { create } for  pid=6720 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  129.073093][    T9] usb 5-1: Product: syz
[  129.095045][    T9] usb 5-1: Manufacturer: syz
[  129.109817][   T30] audit: type=1400 audit(1764388884.794:301): avc:  denied  { connect } for  pid=6720 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  129.138813][    T9] usb 5-1: SerialNumber: syz
[  129.169355][    T9] usb 5-1: config 0 descriptor??
[  129.246006][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  129.257342][   T30] audit: type=1400 audit(1764388884.794:302): avc:  denied  { write } for  pid=6720 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  129.264744][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  129.342814][ T6726] comedi comedi3: aio_iiro_16: I/O port conflict (0x2,8)
[  130.124235][   T30] audit: type=1400 audit(1764388884.884:303): avc:  denied  { read } for  pid=6722 comm="syz.3.203" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  130.147613][   T30] audit: type=1400 audit(1764388884.884:304): avc:  denied  { open } for  pid=6722 comm="syz.3.203" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  130.170980][   T30] audit: type=1400 audit(1764388885.794:305): avc:  denied  { read } for  pid=6722 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  130.264663][    T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  130.281719][   T30] audit: type=1400 audit(1764388885.994:306): avc:  denied  { write } for  pid=6729 comm="syz.2.207" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  130.325874][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.337804][   T30] audit: type=1400 audit(1764388885.994:307): avc:  denied  { open } for  pid=6729 comm="syz.2.207" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  130.610446][    T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  130.640142][    T9] usb 5-1: media controller created
[  130.860870][ T6741] Cannot find set identified by id 65534 to match
[  131.353302][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[  131.446954][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  131.619461][   T30] audit: type=1400 audit(1764388887.074:308): avc:  denied  { ioctl } for  pid=6736 comm="syz.3.208" path="socket:[11900]" dev="sockfs" ino=11900 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  131.738914][ T6749] FAULT_INJECTION: forcing a failure.
[  131.738914][ T6749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.752108][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT(full) 
[  131.752130][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.752139][ T6749] Call Trace:
[  131.752145][ T6749]  <TASK>
[  131.752151][ T6749]  dump_stack_lvl+0x16c/0x1f0
[  131.752171][ T6749]  should_fail_ex+0x512/0x640
[  131.752194][ T6749]  _copy_from_user+0x2e/0xd0
[  131.752216][ T6749]  move_addr_to_kernel+0x65/0x170
[  131.752236][ T6749]  __sys_bind+0x11b/0x260
[  131.752255][ T6749]  ? __pfx___sys_bind+0x10/0x10
[  131.752272][ T6749]  ? __fget_files+0x20e/0x3c0
[  131.752298][ T6749]  ? __pfx_ksys_write+0x10/0x10
[  131.752320][ T6749]  __x64_sys_bind+0x72/0xb0
[  131.752337][ T6749]  ? lockdep_hardirqs_on+0x7c/0x110
[  131.752359][ T6749]  do_syscall_64+0xcd/0xfa0
[  131.752378][ T6749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.752395][ T6749] RIP: 0033:0x7f342618f749
[  131.752410][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.752427][ T6749] RSP: 002b:00007f3426fa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  131.752444][ T6749] RAX: ffffffffffffffda RBX: 00007f34263e6090 RCX: 00007f342618f749
[  131.752455][ T6749] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000004
[  131.752465][ T6749] RBP: 00007f3426fa4090 R08: 0000000000000000 R09: 0000000000000000
[  131.752474][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.752483][ T6749] R13: 00007f34263e6128 R14: 00007f34263e6090 R15: 00007ffd0037e1a8
[  131.752506][ T6749]  </TASK>
[  132.135830][   T30] audit: type=1400 audit(1764388887.134:309): avc:  denied  { ioctl } for  pid=6736 comm="syz.3.208" path="socket:[11901]" dev="sockfs" ino=11901 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  132.160641][   T30] audit: type=1400 audit(1764388887.194:310): avc:  denied  { ioctl } for  pid=6736 comm="syz.3.208" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  132.185725][   T30] audit: type=1400 audit(1764388887.364:311): avc:  denied  { connect } for  pid=6705 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  132.213620][   T30] audit: type=1400 audit(1764388887.464:312): avc:  denied  { setopt } for  pid=6745 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  132.284539][    T9] DVB: Unable to find symbol dib7000p_attach()
[  132.290728][    T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  132.396637][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.403032][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.762300][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[  132.775333][    T9] Registered IR keymap rc-empty
[  132.798684][    T9] dvb-usb: could not initialize remote control.
[  132.864859][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  132.960152][ T6757] mmap: syz.0.210 (6757) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.309605][    T9] usb 5-1: USB disconnect, device number 12
[  133.480754][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  133.710091][ T6775] netlink: 76 bytes leftover after parsing attributes in process `syz.2.216'.
[  133.785129][ T6776] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.802033][ T6776] xt_socket: unknown flags 0x50
[  134.396390][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  138.484544][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  138.484556][   T30] audit: type=1400 audit(1764388894.044:316): avc:  denied  { relabelfrom } for  pid=6810 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  138.512060][   T30] audit: type=1400 audit(1764388894.054:317): avc:  denied  { relabelto } for  pid=6810 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  139.179639][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[  139.205492][   T30] audit: type=1400 audit(1764388894.924:318): avc:  denied  { create } for  pid=6827 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.231810][   T30] audit: type=1400 audit(1764388894.944:319): avc:  denied  { create } for  pid=6827 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  139.283188][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  139.375164][   T30] audit: type=1400 audit(1764388894.944:320): avc:  denied  { write } for  pid=6827 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  139.396126][   T30] audit: type=1400 audit(1764388894.994:321): avc:  denied  { write } for  pid=6827 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  139.867691][   T30] audit: type=1400 audit(1764388895.324:322): avc:  denied  { create } for  pid=6835 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  139.959018][   T30] audit: type=1400 audit(1764388895.344:323): avc:  denied  { write } for  pid=6835 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  140.346037][   T30] audit: type=1400 audit(1764388896.014:324): avc:  denied  { write } for  pid=6845 comm="syz.4.234" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  140.444318][ T6851] comedi comedi3: aio_iiro_16: I/O port conflict (0x2,8)
[  140.634337][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.250229][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  141.279010][ T5819] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  141.330853][ T6860] qrtr: Invalid version 184
[  141.348701][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.395212][ T5819] usb 3-1: Product: syz
[  141.490249][ T5819] usb 3-1: Manufacturer: syz
[  141.495152][ T5819] usb 3-1: SerialNumber: syz
[  141.604426][ T5819] usb 3-1: config 0 descriptor??
[  141.726222][ T5819] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  141.775083][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.918723][ T6847] netlink: 'syz.2.233': attribute type 10 has an invalid length.
[  141.949977][ T6847] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  142.060617][ T6872] ip6t_rpfilter: unknown options
[  142.912221][ T6879] ALSA: mixer_oss: invalid OSS volume ''
[  143.020443][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[  143.373411][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[  144.377993][ T6906] team0: Cannot enslave team device to itself
[  144.488830][   T30] audit: type=1804 audit(1764388900.174:325): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.252" name="file0" dev="hugetlbfs" ino=13193 res=1 errno=0
[  144.517157][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'.
[  144.873161][   T30] audit: type=1804 audit(1764388900.174:326): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.252" name="file0" dev="hugetlbfs" ino=13193 res=1 errno=0
[  145.083922][   T30] audit: type=1400 audit(1764388900.204:327): avc:  denied  { read } for  pid=6898 comm="syz.0.251" path="socket:[12243]" dev="sockfs" ino=12243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  145.315449][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.486275][ T5913] usb 3-1: USB disconnect, device number 9
[  145.518564][ T6921] loop2: detected capacity change from 0 to 7
[  145.529635][ T6921] Dev loop2: unable to read RDB block 7
[  145.591282][ T6921]  loop2: unable to read partition table
[  145.593562][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'.
[  145.608061][ T6921] loop2: partition table beyond EOD, truncated
[  145.844774][ T6921] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  145.989854][ T6927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6927 comm=syz.3.259
[  146.004327][ T6927] netlink: 'syz.3.259': attribute type 10 has an invalid length.
[  146.012899][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.025106][ T6927] bridge0: left allmulticast mode
[  146.037400][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.044559][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.073156][ T6927] bridge0: entered allmulticast mode
[  146.081075][ T6927] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  146.092114][ T6929] batadv_slave_0: entered promiscuous mode
[  146.316420][   T30] audit: type=1400 audit(1764388902.034:328): avc:  denied  { ioctl } for  pid=6928 comm="syz.1.260" path="socket:[13237]" dev="sockfs" ino=13237 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  146.341212][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.284764][ T6952] netlink: 76 bytes leftover after parsing attributes in process `syz.3.262'.
[  148.715982][ T6928] batadv_slave_0: left promiscuous mode
[  148.827792][ T6940] netlink: 4 bytes leftover after parsing attributes in process `'.
[  148.962680][   T30] audit: type=1400 audit(1764388904.664:329): avc:  denied  { create } for  pid=6955 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  148.997803][   T30] audit: type=1400 audit(1764388904.704:330): avc:  denied  { map } for  pid=6955 comm="syz.1.266" path="/dev/radio5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  149.023565][   T30] audit: type=1400 audit(1764388904.704:331): avc:  denied  { execute } for  pid=6955 comm="syz.1.266" path="/dev/radio5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  149.093678][   T30] audit: type=1400 audit(1764388904.704:332): avc:  denied  { ioctl } for  pid=6955 comm="syz.1.266" path="socket:[13288]" dev="sockfs" ino=13288 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  149.349007][ T6966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.267'.
[  149.795035][ T6967] netlink: 4 bytes leftover after parsing attributes in process `'.
[  150.013607][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.283685][ T5891] usb 1-1: Using ep0 maxpacket: 8
[  150.290395][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.313805][ T6984] 9pnet_fd: Insufficient options for proto=fd
[  150.434640][ T5891] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  150.676123][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.685698][ T5891] usb 1-1: config 0 descriptor??
[  150.692152][ T5891] ldusb 1-1:0.0: Interrupt in endpoint not found
[  150.775387][ T6986] netlink: 184 bytes leftover after parsing attributes in process `syz.4.276'.
[  150.802463][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'.
[  151.131553][  T911] usb 1-1: USB disconnect, device number 8
[  151.483721][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  151.508755][ T7002] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  151.531121][   T30] audit: type=1326 audit(1764388907.244:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c91b8f749 code=0x0
[  151.644976][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.645025][ T5891] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  151.645047][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.649650][ T5891] usb 4-1: config 0 descriptor??
[  151.671176][ T5891] pwc: Askey VC010 type 2 USB webcam detected.
[  151.893615][  T911] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  152.017512][ T5972] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  152.076616][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00
[  152.085373][  T911] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  152.108024][ T5891] pwc: recv_control_msg error -32 req 02 val 2700
[  152.114570][  T911] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  152.132618][   T30] audit: type=1400 audit(1764388907.844:334): avc:  denied  { mounton } for  pid=7007 comm="syz.4.284" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  152.156945][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00
[  152.164362][ T7008] tmpfs: Unknown parameter '01777777777777777777777'
[  152.225722][  T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.274436][ T5891] pwc: recv_control_msg error -32 req 04 val 1000
[  152.281057][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.292320][ T5891] pwc: recv_control_msg error -32 req 04 val 1300
[  152.302369][  T911] gspca_main: stv0680-2.14.0 probing 041e:4007
[  152.325616][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.431386][ T7010] loop9: detected capacity change from 0 to 8
[  152.558336][ T5891] pwc: recv_control_msg error -32 req 04 val 1400
[  152.703947][ T7010] Dev loop9: unable to read RDB block 8
[  152.709525][ T7010]  loop9: unable to read partition table
[  152.715451][ T7010] loop9: partition table beyond EOD, truncated
[  152.722022][ T7010] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  152.759138][ T5972] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  152.773179][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.794416][ T5972] usb 1-1: config 0 descriptor??
[  152.888643][ T7013] Illegal XDP return value 4294967294 on prog  (id 56) dev N/A, expect packet loss!
[  152.907889][ T5891] pwc: recv_control_msg error -32 req 02 val 2100
[  152.917218][ T5891] pwc: recv_control_msg error -32 req 04 val 1500
[  153.087343][   T30] audit: type=1400 audit(1764388908.804:335): avc:  denied  { create } for  pid=7003 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.142652][   T30] audit: type=1400 audit(1764388908.804:336): avc:  denied  { write } for  pid=7003 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.270278][ T5891] pwc: recv_control_msg error -71 req 02 val 2400
[  153.278050][ T5972] usbhid 1-1:0.0: can't add hid device: -71
[  153.287965][ T5972] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  153.295925][ T5891] pwc: recv_control_msg error -71 req 02 val 2600
[  153.303901][ T5891] pwc: recv_control_msg error -71 req 02 val 2900
[  153.312996][ T5972] usb 1-1: USB disconnect, device number 9
[  153.318935][ T5891] pwc: recv_control_msg error -71 req 02 val 2800
[  153.326670][ T5891] pwc: recv_control_msg error -71 req 04 val 1100
[  153.335517][ T5891] pwc: recv_control_msg error -71 req 04 val 1200
[  153.365096][ T5891] pwc: Registered as video103.
[  153.383864][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  153.477518][ T5891] usb 4-1: USB disconnect, device number 6
[  153.552620][  T911] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  153.561318][   T30] audit: type=1400 audit(1764388909.154:337): avc:  denied  { ioctl } for  pid=7003 comm="syz.1.282" path="socket:[14408]" dev="sockfs" ino=14408 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.586363][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.689978][  T911] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  153.702070][   T30] audit: type=1400 audit(1764388909.154:338): avc:  denied  { mount } for  pid=7003 comm="syz.1.282" name="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  153.899898][ T7032] team0: Cannot enslave team device to itself
[  153.954935][   T30] audit: type=1804 audit(1764388909.664:339): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.289" name="file0" dev="hugetlbfs" ino=14432 res=1 errno=0
[  153.995511][   T30] audit: type=1804 audit(1764388909.674:340): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.289" name="file0" dev="hugetlbfs" ino=14432 res=1 errno=0
[  154.458683][  T911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110
[  155.223575][  T911] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  155.294113][  T911] usb 2-1: USB disconnect, device number 14
[  156.843588][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  156.872302][ T7066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.298'.
[  156.996031][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  157.013591][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  157.053697][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  157.104636][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  157.123646][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  157.142961][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.200339][ T7071] ieee802154 phy0 wpan0: encryption failed: -22
[  157.205329][   T10] usb 3-1: config 0 descriptor??
[  157.254986][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'.
[  157.302140][ T7071] hsr_slave_0: left promiscuous mode
[  157.311052][ T7071] hsr_slave_1: left promiscuous mode
[  157.314167][  T911] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  157.352720][   T30] audit: type=1400 audit(1764388913.064:341): avc:  denied  { setopt } for  pid=7074 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  157.382911][   T30] audit: type=1400 audit(1764388913.064:342): avc:  denied  { connect } for  pid=7074 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  157.409700][   T30] audit: type=1400 audit(1764388913.124:343): avc:  denied  { write } for  pid=7074 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  157.470626][   T10] hdpvr 3-1:0.0: firmware version 0x88 dated _�=&ˆ}��nDT,����w#��������OR�����C���f(
[  157.482102][   T10] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  157.623611][  T911] usb 1-1: Using ep0 maxpacket: 32
[  157.923152][  T911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.935294][  T911] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  157.946115][  T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.954209][  T911] usb 1-1: Product: syz
[  157.958617][  T911] usb 1-1: Manufacturer: syz
[  157.963253][  T911] usb 1-1: SerialNumber: syz
[  157.970144][  T911] usb 1-1: config 0 descriptor??
[  157.977985][  T911] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  158.124969][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.135862][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.147059][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.218221][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.224492][  T911] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  158.268587][  T911] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  158.289739][  T911] usb 1-1: USB disconnect, device number 10
[  158.348053][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'.
[  158.586312][ T7087] =======================================================
[  158.586312][ T7087] WARNING: The mand mount option has been deprecated and
[  158.586312][ T7087]          and is ignored by this kernel. Remove the mand
[  158.586312][ T7087]          option from the mount to silence this warning.
[  158.586312][ T7087] =======================================================
[  158.766905][   T30] audit: type=1400 audit(1764388914.454:344): avc:  denied  { write } for  pid=7088 comm="syz.4.306" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  159.087957][   T30] audit: type=1400 audit(1764388914.454:345): avc:  denied  { open } for  pid=7088 comm="syz.4.306" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  159.159929][   T30] audit: type=1400 audit(1764388914.834:346): avc:  denied  { read write } for  pid=7094 comm="syz.2.308" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  159.379552][   T30] audit: type=1400 audit(1764388914.834:347): avc:  denied  { open } for  pid=7094 comm="syz.2.308" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  159.407505][ T7103] netlink: 76 bytes leftover after parsing attributes in process `syz.2.309'.
[  159.439236][   T30] audit: type=1400 audit(1764388914.904:348): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  159.593579][ T5819] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  159.758265][ T5819] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  159.774847][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.793172][ T5819] usb 1-1: Product: syz
[  159.802225][ T5819] usb 1-1: Manufacturer: syz
[  159.811318][ T5819] usb 1-1: SerialNumber: syz
[  160.238931][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  160.243553][ T5891] libceph: connect (1)[c::]:6789 error -101
[  160.265060][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  160.287985][ T5891] libceph: mon0 (1)[c::]:6789 connect error
[  160.493758][ T7116] ceph: No mds server is up or the cluster is laggy
[  160.733361][ T5972] libceph: connect (1)[c::]:6789 error -101
[  160.795681][ T5972] libceph: mon0 (1)[c::]:6789 connect error
[  160.823004][ T7125] ./cgroup: Can't lookup blockdev
[  160.952983][ T7126] netlink: 92 bytes leftover after parsing attributes in process `syz.0.310'.
[  161.023732][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'.
[  161.200764][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.221507][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.251131][ T7128] syz.2.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  161.303012][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'.
[  161.444903][   T30] audit: type=1400 audit(1764388917.164:349): avc:  denied  { read write } for  pid=7127 comm="syz.2.314" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  161.469586][   T30] audit: type=1400 audit(1764388917.164:350): avc:  denied  { open } for  pid=7127 comm="syz.2.314" path="/66/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  162.357409][ T7148] macsec0: entered promiscuous mode
[  163.477839][ T7153] block device autoloading is deprecated and will be removed.
[  163.662416][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  163.689881][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  163.737875][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  163.772004][ T5819] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  163.802538][ T5819] usb 1-1: USB disconnect, device number 11
[  163.932339][ T7164] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  164.383672][ T5972] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  164.598667][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.757020][ T5972] usb 5-1: config 0 has an invalid interface number: 234 but max is 0
[  164.784832][ T7182] audit_log_lost: 3 callbacks suppressed
[  164.784863][ T7182] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  164.798347][ T7182] audit: out of memory in audit_log_start
[  164.833247][ T5972] usb 5-1: config 0 has no interface number 0
[  164.901554][ T5972] usb 5-1: config 0 interface 234 has no altsetting 0
[  164.988757][ T5972] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31
[  165.104444][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.272260][ T5972] usb 5-1: Product: syz
[  165.276835][ T5972] usb 5-1: Manufacturer: syz
[  165.281943][ T5972] usb 5-1: SerialNumber: syz
[  165.289292][ T5972] usb 5-1: config 0 descriptor??
[  165.395151][ T5930] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  165.403726][ T5930] usb 4-1: config 0 has no interface number 0
[  165.410027][ T5930] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.421899][ T5930] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.431982][ T5930] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  165.558936][   T30] audit: type=1400 audit(1764388921.264:354): avc:  granted  { setsecparam } for  pid=7184 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  165.653235][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.863734][ T5930] usb 4-1: config 0 descriptor??
[  166.348058][ T5972] pegasus 5-1:0.234: probe with driver pegasus failed with error -32
[  166.476087][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'.
[  167.113772][ T5972] usb 5-1: USB disconnect, device number 13
[  167.489849][ T5930] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0003/input/input15
[  167.966678][ T5930] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[  167.985124][ T5930] usb 4-1: USB disconnect, device number 7
[  168.236966][ T7219] fido_id[7219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  168.291961][   T10] hdpvr 3-1:0.0: Could not setup controls
[  168.312189][ T7227] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  168.323637][   T30] audit: type=1400 audit(1764388924.034:355): avc:  denied  { setopt } for  pid=7214 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.345549][ T7226] binder: 7225:7226 ioctl c0306201 0 returned -14
[  168.359343][   T10] hdpvr 3-1:0.0: registering videodev failed
[  168.448566][ T5823] Bluetooth: Unknown BR/EDR signaling command 0x0d
[  168.477580][ T5823] Bluetooth: Wrong link type (-22)
[  168.545879][   T30] audit: type=1400 audit(1764388924.064:356): avc:  denied  { ioctl } for  pid=7225 comm="syz.1.338" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  168.580480][   T10] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -32
[  168.624520][ T7226] binder: 7225:7226 ioctl f517 0 returned -22
[  168.808904][   T30] audit: type=1400 audit(1764388924.144:357): avc:  denied  { ioctl } for  pid=7214 comm="syz.0.336" path="socket:[14076]" dev="sockfs" ino=14076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.963538][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  169.681438][   T30] audit: type=1400 audit(1764388925.384:358): avc:  denied  { read } for  pid=7238 comm="syz.3.342" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  169.802149][   T30] audit: type=1400 audit(1764388925.384:359): avc:  denied  { open } for  pid=7238 comm="syz.3.342" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  169.828005][ T7242] team0: Cannot enslave team device to itself
[  169.980467][ T7250] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.030904][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[  170.059881][   T30] audit: type=1804 audit(1764388925.704:360): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.340" name="file0" dev="hugetlbfs" ino=14810 res=1 errno=0
[  170.204695][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  170.245066][   T30] audit: type=1804 audit(1764388925.704:361): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.340" name="file0" dev="hugetlbfs" ino=14810 res=1 errno=0
[  170.614826][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.632724][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  170.663601][ T5930] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  170.676864][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.922840][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[  171.014644][ T5930] usb 4-1: config 0 descriptor??
[  171.031975][   T30] audit: type=1400 audit(1764388926.694:362): avc:  denied  { listen } for  pid=7260 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  171.157417][   T30] audit: type=1804 audit(1764388926.874:363): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.347" name="file0" dev="hugetlbfs" ino=14136 res=1 errno=0
[  171.178996][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.201790][   T30] audit: type=1804 audit(1764388926.904:364): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.347" name="file0" dev="hugetlbfs" ino=14136 res=1 errno=0
[  173.651529][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.665493][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.703538][   T30] audit: type=1400 audit(1764388929.314:365): avc:  denied  { bind } for  pid=7301 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  173.794959][ T5930] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  174.271671][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'.
[  174.426004][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.434667][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.446685][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.455348][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.197518][ T5930] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device
[  175.207693][ T5930] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse
[  175.219527][ T5930] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71
[  175.258851][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'.
[  175.272654][ T5930] usb 4-1: USB disconnect, device number 8
[  175.609886][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  176.012161][   T30] audit: type=1400 audit(1764388931.314:366): avc:  denied  { create } for  pid=7326 comm="syz.4.363" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  176.043682][   T10] usb 1-1: Using ep0 maxpacket: 8
[  176.067567][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.088658][   T30] audit: type=1400 audit(1764388931.314:367): avc:  denied  { link } for  pid=7326 comm="syz.4.363" name="#f" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  176.111285][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  176.120612][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.129829][   T30] audit: type=1400 audit(1764388931.314:368): avc:  denied  { rename } for  pid=7326 comm="syz.4.363" name="#10" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  176.264337][   T10] usb 1-1: config 0 descriptor??
[  176.277196][   T10] ldusb 1-1:0.0: Interrupt in endpoint not found
[  176.746255][   T30] audit: type=1400 audit(1764388932.464:369): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  176.806069][ T5891] usb 1-1: USB disconnect, device number 12
[  176.979466][   T30] audit: type=1400 audit(1764388932.694:370): avc:  denied  { map } for  pid=7338 comm="syz.4.365" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  176.994543][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[  177.045428][   T30] audit: type=1400 audit(1764388932.694:371): avc:  denied  { ioctl } for  pid=7338 comm="syz.4.365" path="socket:[14924]" dev="sockfs" ino=14924 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  177.162876][   T30] audit: type=1400 audit(1764388932.874:372): avc:  denied  { connect } for  pid=7340 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  177.374988][ T5819] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  177.407798][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.436672][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.532313][   T30] audit: type=1400 audit(1764388933.244:373): avc:  denied  { bind } for  pid=7354 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  177.554875][   T30] audit: type=1400 audit(1764388933.244:374): avc:  denied  { connect } for  pid=7354 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  177.577101][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.587373][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.601420][ T5819] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  177.610787][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.622112][ T5819] usb 5-1: config 0 descriptor??
[  177.673595][ T5891] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  177.830108][ T5891] usb 1-1: Using ep0 maxpacket: 8
[  177.845431][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0
[  177.853030][ T5891] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  177.864146][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.894104][ T5891] usb 1-1: config 0 descriptor??
[  177.973723][ T7362] netlink: 'syz.1.375': attribute type 13 has an invalid length.
[  178.059575][ T5819] megaworld 0003:07B5:0312.0005: item fetching failed at offset 1/5
[  178.085752][ T5819] megaworld 0003:07B5:0312.0005: parse failed
[  178.091917][ T5819] megaworld 0003:07B5:0312.0005: probe with driver megaworld failed with error -22
[  178.178683][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'.
[  178.210941][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.218320][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.241415][ T5819] usb 5-1: USB disconnect, device number 14
[  178.257899][   T30] audit: type=1400 audit(1764388933.974:375): avc:  denied  { compute_member } for  pid=7366 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  178.321486][ T5891] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  178.352059][ T5891] waltop 0003:172F:0502.0006: item fetching failed at offset 3/5
[  178.377973][ T5891] waltop 0003:172F:0502.0006: probe with driver waltop failed with error -22
[  178.462774][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.489518][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.649848][ T6186] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.659167][ T6186] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.670824][ T6186] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.682814][ T6186] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.089300][ T5972] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  179.111002][ T7384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.243594][ T5972] usb 2-1: Using ep0 maxpacket: 8
[  179.250262][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.263473][ T5972] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  179.272625][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.291294][ T5972] usb 2-1: config 0 descriptor??
[  179.300966][ T5972] ldusb 2-1:0.0: Interrupt in endpoint not found
[  179.478671][ T7391] kvm: pic: non byte read
[  179.485746][ T7391] kvm: pic: non byte read
[  179.491902][ T7391] kvm: pic: non byte read
[  179.503443][ T7391] kvm: pic: non byte read
[  179.522849][ T7391] kvm: pic: non byte read
[  179.533256][ T7391] kvm: pic: non byte read
[  179.540286][ T7391] kvm: pic: non byte read
[  179.563613][ T5819] usb 2-1: USB disconnect, device number 15
[  179.569765][ T7391] kvm: pic: non byte read
[  179.577097][ T7391] kvm: pic: non byte read
[  179.582683][ T7391] kvm: pic: non byte read
[  179.698385][ T7395] kernel profiling enabled (shift: 9)
[  180.315897][ T7403] sp0: Synchronizing with TNC
[  180.418883][ T5823] Bluetooth: hci4: link tx timeout
[  180.446679][ T5930] usb 1-1: USB disconnect, device number 13
[  181.007572][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.019236][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.068287][ T7418] zonefs (nullb0) ERROR: Not a zoned block device
[  182.132404][ T7423] syzkaller0: entered promiscuous mode
[  182.138298][ T7423] syzkaller0: entered allmulticast mode
[  182.303794][ T5819] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  182.524030][ T5819] usb 4-1: Using ep0 maxpacket: 16
[  182.531072][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.569831][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.692718][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.707528][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  182.707543][   T30] audit: type=1400 audit(1764388938.424:384): avc:  denied  { map } for  pid=7429 comm="syz.4.395" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  182.709046][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.714223][ T5819] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.739501][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.810197][ T7434] netlink: 76 bytes leftover after parsing attributes in process `syz.0.394'.
[  182.839224][ T7434] xt_socket: unknown flags 0x50
[  183.249773][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.272191][ T5819] usb 4-1: config 0 descriptor??
[  183.717354][ T5819] microsoft 0003:045E:07DA.0007: unknown main item tag 0x3
[  183.730215][ T5819] microsoft 0003:045E:07DA.0007: item fetching failed at offset 32/34
[  183.747830][ T5819] microsoft 0003:045E:07DA.0007: parse failed
[  183.759453][ T5819] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[  185.680278][ T5825] Bluetooth: hci3: command 0x0406 tx timeout
[  185.686610][ T5818] Bluetooth: hci0: command 0x0406 tx timeout
[  185.694934][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  185.705565][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  186.180808][ T5819] usb 4-1: USB disconnect, device number 9
[  186.470767][ T7486] netlink: 76 bytes leftover after parsing attributes in process `syz.3.404'.
[  187.085922][ T7494] FAT-fs (nbd3): unable to read boot sector
[  187.156766][   T30] audit: type=1400 audit(1764388942.874:385): avc:  denied  { mount } for  pid=7497 comm="syz.1.406" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  187.213088][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[  187.234349][   T30] audit: type=1400 audit(1764388942.894:386): avc:  denied  { mounton } for  pid=7497 comm="syz.1.406" path="/84/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  187.484679][   T30] audit: type=1400 audit(1764388943.024:387): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  187.700419][   T30] audit: type=1400 audit(1764388943.094:388): avc:  denied  { map } for  pid=7503 comm="syz.2.408" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  187.844755][ T7505] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  187.851456][ T7505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  187.865165][ T7505] vhci_hcd vhci_hcd.0: Device attached
[  187.915713][ T7506] vhci_hcd: connection closed
[  187.917904][ T6182] vhci_hcd: stop threads
[  187.938414][ T6182] vhci_hcd: release socket
[  187.949657][ T6182] vhci_hcd: disconnect device
[  187.965372][   T30] audit: type=1400 audit(1764388943.684:389): avc:  denied  { bind } for  pid=7512 comm="syz.4.410" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  188.003689][   T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  188.016231][   T30] audit: type=1400 audit(1764388943.684:390): avc:  denied  { name_bind } for  pid=7512 comm="syz.4.410" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  188.114124][   T30] audit: type=1400 audit(1764388943.684:391): avc:  denied  { node_bind } for  pid=7512 comm="syz.4.410" saddr=fe88::105 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  188.348772][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  188.380939][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  188.394385][   T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  188.403757][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.421028][   T10] usb 1-1: config 0 descriptor??
[  188.429722][ T7510] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  188.642097][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.655469][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.695939][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  188.702591][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  188.754150][   T10] usb 1-1: USB disconnect, device number 14
[  188.933617][  T911] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  189.213588][ T5819] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  189.229038][  T911] usb 5-1: Using ep0 maxpacket: 8
[  189.235716][  T911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.248513][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  189.288251][  T911] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  189.299285][  T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.337773][  T911] usb 5-1: config 0 descriptor??
[  189.365204][  T911] ldusb 5-1:0.0: Interrupt in endpoint not found
[  189.453778][   T10] usb 1-1: device descriptor read/64, error -71
[  190.236799][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  190.254680][  T911] usb 5-1: USB disconnect, device number 15
[  190.312741][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.367442][ T7542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7542 comm=syz.3.420
[  190.403591][   T10] usb 1-1: device descriptor read/64, error -71
[  190.514339][   T10] usb usb1-port1: attempt power cycle
[  190.595472][   T30] audit: type=1400 audit(1764388946.314:392): avc:  denied  { setopt } for  pid=7545 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  190.874006][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  190.960851][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[  191.094584][   T10] usb 1-1: device not accepting address 17, error -71
[  192.700294][ T7578] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.135189][ T5813] Bluetooth: hci1: unexpected cc 0x0402 length: 7 > 1
[  193.142121][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0402
[  193.845449][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  193.851788][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  193.883653][   T30] audit: type=1400 audit(1764388949.514:393): avc:  denied  { bind } for  pid=7594 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  195.601723][ T7635] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  195.671129][ T7636] team0: Cannot enslave team device to itself
[  195.709820][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'.
[  195.923588][ T5819] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  196.649510][ T5819] usb 4-1: config 9 has an invalid interface number: 1 but max is 0
[  196.683615][ T5819] usb 4-1: config 9 has no interface number 0
[  196.695702][ T5819] usb 4-1: string descriptor 0 read error: -22
[  196.701976][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36
[  196.716530][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.778081][ T5819] cx231xx 4-1:9.1: New device   @ 1.5 Mbps (2040:b140) with 1 interfaces
[  196.797488][ T5819] cx231xx 4-1:9.1: Not found matching IAD interface
[  196.983134][ T5819] usb 4-1: USB disconnect, device number 11
[  199.837625][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'.
[  200.306673][ T7687] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  204.082857][   T30] audit: type=1400 audit(1764388959.794:394): avc:  denied  { ioctl } for  pid=7725 comm="syz.1.474" path="socket:[16631]" dev="sockfs" ino=16631 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  204.265797][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  204.795850][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'.
[  205.284438][   T30] audit: type=1400 audit(1764388960.914:395): avc:  denied  { mount } for  pid=7745 comm="syz.2.482" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  205.812404][ T5813] Bluetooth: hci3: unexpected event for opcode 0x0005
[  205.819447][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  206.103817][ T5891] usb 4-1: Using ep0 maxpacket: 32
[  206.129141][   T30] audit: type=1400 audit(1764388961.804:396): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  206.169755][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0
[  206.215938][ T5891] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  206.255705][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.303298][ T5891] usb 4-1: Product: syz
[  206.321353][ T5891] usb 4-1: Manufacturer: syz
[  206.331951][ T5891] usb 4-1: SerialNumber: syz
[  206.352967][ T5891] usb 4-1: config 0 descriptor??
[  206.591321][ T5891] gs_usb 4-1:0.0: Couldn't send data format (err=-71)
[  206.613291][ T5972] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  206.634447][ T5891] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  206.696935][ T5891] usb 4-1: USB disconnect, device number 12
[  206.823657][ T5972] usb 5-1: Using ep0 maxpacket: 16
[  206.839331][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.872349][ T5972] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  206.895784][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.927661][ T5972] usb 5-1: config 0 descriptor??
[  206.984495][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  207.077158][ T5813] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  207.503170][ T7779] fuse: Bad value for 'fd'
[  207.701576][ T5972] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  208.030703][ T7793] netlink: 76 bytes leftover after parsing attributes in process `syz.3.494'.
[  208.067383][    C1] ==================================================================
[  208.075486][    C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0
[  208.083483][    C1] Read of size 1 at addr ffff88805226ffff by task syz.3.494/7790
[  208.091191][    C1] 
[  208.093512][    C1] CPU: 1 UID: 0 PID: 7790 Comm: syz.3.494 Not tainted syzkaller #0 PREEMPT(full) 
[  208.093538][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  208.093551][    C1] Call Trace:
[  208.093561][    C1]  <IRQ>
[  208.093571][    C1]  dump_stack_lvl+0x116/0x1f0
[  208.093595][    C1]  print_report+0xcd/0x630
[  208.093621][    C1]  ? __virt_addr_valid+0x81/0x610
[  208.093651][    C1]  ? __phys_addr+0xe8/0x180
[  208.093681][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  208.093710][    C1]  kasan_report+0xe0/0x110
[  208.093735][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  208.093767][    C1]  mcp2221_raw_event+0x1070/0x10a0
[  208.093797][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  208.093831][    C1]  __hid_input_report.constprop.0+0x314/0x450
[  208.093855][    C1]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  208.093887][    C1]  hid_irq_in+0x35e/0x870
[  208.093919][    C1]  __usb_hcd_giveback_urb+0x38b/0x610
[  208.093952][    C1]  usb_hcd_giveback_urb+0x39b/0x450
[  208.093985][    C1]  dummy_timer+0x1809/0x3a00
[  208.094017][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  208.094054][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  208.094076][    C1]  ? rcu_is_watching+0x12/0xc0
[  208.094105][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  208.094139][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  208.094160][    C1]  __hrtimer_run_queues+0x202/0xad0
[  208.094188][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  208.094212][    C1]  ? read_tsc+0x9/0x20
[  208.094241][    C1]  hrtimer_run_softirq+0x17d/0x350
[  208.094268][    C1]  handle_softirqs+0x219/0x8e0
[  208.094298][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  208.094328][    C1]  __irq_exit_rcu+0x109/0x170
[  208.094353][    C1]  irq_exit_rcu+0x9/0x30
[  208.094378][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  208.094412][    C1]  </IRQ>
[  208.094419][    C1]  <TASK>
[  208.094427][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  208.094451][    C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10
[  208.094486][    C1] Code: fb 09 00 00 44 8b 05 49 36 f8 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 bf d3 3a 00 fb 65 48 8b 1d ee 99 17 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[  208.094507][    C1] RSP: 0018:ffffc9001b7ef4a8 EFLAGS: 00000206
[  208.094525][    C1] RAX: 000000000000b70f RBX: ffff888073d3a480 RCX: ffffffff81c4e8df
[  208.094539][    C1] RDX: 0000000000000000 RSI: ffffffff8da2c9e6 RDI: ffffffff8bf073c0
[  208.094552][    C1] RBP: ffffc9001b7ef4f0 R08: 0000000000000001 R09: 0000000000000001
[  208.094566][    C1] R10: ffffffff90821bd7 R11: 0000000000000001 R12: ffff8880b853a380
[  208.094580][    C1] R13: ffff88802784a480 R14: ffff8880b843a380 R15: ffff8880b853b1b0
[  208.094598][    C1]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  208.094632][    C1]  ? finish_task_switch.isra.0+0x221/0xc10
[  208.094660][    C1]  ? __switch_to+0x7af/0x11b0
[  208.094687][    C1]  __schedule+0x1198/0x5de0
[  208.094716][    C1]  ? __lock_acquire+0x622/0x1c90
[  208.094739][    C1]  ? __lock_acquire+0x622/0x1c90
[  208.094761][    C1]  ? __pfx___schedule+0x10/0x10
[  208.094794][    C1]  ? find_held_lock+0x2b/0x80
[  208.094820][    C1]  ? schedule+0x2d7/0x3a0
[  208.094852][    C1]  schedule+0xe7/0x3a0
[  208.094883][    C1]  schedule_timeout+0x257/0x290
[  208.094910][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  208.094941][    C1]  ? unix_wait_for_peer+0x246/0x280
[  208.094965][    C1]  ? prepare_to_wait_exclusive+0xe4/0x2b0
[  208.094997][    C1]  unix_wait_for_peer+0x24e/0x280
[  208.095021][    C1]  ? __pfx_unix_wait_for_peer+0x10/0x10
[  208.095044][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  208.095075][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  208.095102][    C1]  unix_dgram_sendmsg+0x1419/0x17f0
[  208.095133][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  208.095165][    C1]  ____sys_sendmsg+0xa98/0xc70
[  208.095188][    C1]  ? copy_msghdr_from_user+0x10a/0x160
[  208.095216][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.095238][    C1]  ? kfree+0x252/0x6d0
[  208.095269][    C1]  ___sys_sendmsg+0x134/0x1d0
[  208.095297][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.095339][    C1]  ? __pfx___might_resched+0x10/0x10
[  208.095368][    C1]  __sys_sendmmsg+0x200/0x420
[  208.095397][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  208.095425][    C1]  ? unix_dgram_connect+0x4e5/0xc80
[  208.095459][    C1]  ? __pfx_do_futex+0x10/0x10
[  208.095492][    C1]  ? xfd_validate_state+0x61/0x180
[  208.095527][    C1]  __x64_sys_sendmmsg+0x9c/0x100
[  208.095555][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  208.095575][    C1]  do_syscall_64+0xcd/0xfa0
[  208.095597][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.095618][    C1] RIP: 0033:0x7f732bd8f749
[  208.095637][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.095657][    C1] RSP: 002b:00007f732cb75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  208.095678][    C1] RAX: ffffffffffffffda RBX: 00007f732bfe5fa0 RCX: 00007f732bd8f749
[  208.095692][    C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008
[  208.095706][    C1] RBP: 00007f732be13f91 R08: 0000000000000000 R09: 0000000000000000
[  208.095718][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.095731][    C1] R13: 00007f732bfe6038 R14: 00007f732bfe5fa0 R15: 00007fff4090db58
[  208.095753][    C1]  </TASK>
[  208.095760][    C1] 
[  208.236927][ T7792] xt_socket: unknown flags 0x50
[  208.237205][    C1] Allocated by task 7582:
[  208.618253][    C1]  kasan_save_stack+0x33/0x60
[  208.622915][    C1]  kasan_save_track+0x14/0x30
[  208.627571][    C1]  __kasan_slab_alloc+0x89/0x90
[  208.632408][    C1]  kmem_cache_alloc_node_noprof+0x28a/0x770
[  208.638292][    C1]  kmalloc_reserve+0x18b/0x2c0
[  208.643045][    C1]  __alloc_skb+0x166/0x380
[  208.647443][    C1]  __ip_append_data+0x30b3/0x41a0
[  208.652459][    C1]  ip_append_data+0x10f/0x1a0
[  208.657119][    C1]  raw_sendmsg+0xeee/0x38b0
[  208.661605][    C1]  inet_sendmsg+0x11c/0x140
[  208.666090][    C1]  ____sys_sendmsg+0x973/0xc70
[  208.670831][    C1]  ___sys_sendmsg+0x134/0x1d0
[  208.675491][    C1]  __sys_sendmmsg+0x200/0x420
[  208.680153][    C1]  __x64_sys_sendmmsg+0x9c/0x100
[  208.685076][    C1]  do_syscall_64+0xcd/0xfa0
[  208.689560][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.695434][    C1] 
[  208.697754][    C1] Freed by task 7582:
[  208.701728][    C1]  kasan_save_stack+0x33/0x60
[  208.706408][    C1]  kasan_save_track+0x14/0x30
[  208.711069][    C1]  __kasan_save_free_info+0x3b/0x60
[  208.716256][    C1]  __kasan_slab_free+0x5f/0x80
[  208.721000][    C1]  kmem_cache_free+0x2d4/0x6c0
[  208.725758][    C1]  skb_free_head+0x1b7/0x210
[  208.730334][    C1]  skb_release_data+0x795/0x9e0
[  208.735171][    C1]  sk_skb_reason_drop+0x129/0x1a0
[  208.740182][    C1]  ip_protocol_deliver_rcu+0x213/0x4c0
[  208.745627][    C1]  ip_local_deliver_finish+0x3f2/0x720
[  208.751070][    C1]  ip_local_deliver+0x18e/0x1f0
[  208.755908][    C1]  ip_rcv+0x2e0/0x600
[  208.759875][    C1]  __netif_receive_skb_one_core+0x197/0x1e0
[  208.765751][    C1]  __netif_receive_skb+0x1d/0x160
[  208.770756][    C1]  process_backlog+0x439/0x15e0
[  208.775587][    C1]  __napi_poll.constprop.0+0xba/0x550
[  208.780942][    C1]  net_rx_action+0x97f/0xef0
[  208.785511][    C1]  handle_softirqs+0x219/0x8e0
[  208.790260][    C1]  do_softirq+0xb2/0xf0
[  208.794413][    C1]  __local_bh_enable_ip+0x100/0x120
[  208.799593][    C1]  __dev_queue_xmit+0xb06/0x4490
[  208.804510][    C1]  ip_finish_output2+0xc38/0x21a0
[  208.809526][    C1]  __ip_finish_output.part.0+0x1b4/0x350
[  208.815136][    C1]  ip_output+0x35f/0xa90
[  208.819356][    C1]  ip_push_pending_frames+0x30e/0x5d0
[  208.824707][    C1]  raw_sendmsg+0x144e/0x38b0
[  208.829282][    C1]  inet_sendmsg+0x11c/0x140
[  208.833781][    C1]  ____sys_sendmsg+0x973/0xc70
[  208.838528][    C1]  ___sys_sendmsg+0x134/0x1d0
[  208.843188][    C1]  __sys_sendmmsg+0x200/0x420
[  208.847850][    C1]  __x64_sys_sendmmsg+0x9c/0x100
[  208.852769][    C1]  do_syscall_64+0xcd/0xfa0
[  208.857255][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.863141][    C1] 
[  208.865442][    C1] The buggy address belongs to the object at ffff88805226fa80
[  208.865442][    C1]  which belongs to the cache skbuff_small_head of size 704
[  208.879995][    C1] The buggy address is located 703 bytes to the right of
[  208.879995][    C1]  allocated 704-byte region [ffff88805226fa80, ffff88805226fd40)
[  208.894640][    C1] 
[  208.896944][    C1] The buggy address belongs to the physical page:
[  208.903327][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5226c
[  208.912064][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  208.920540][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  208.928064][    C1] page_type: f5(slab)
[  208.932025][    C1] raw: 00fff00000000040 ffff88801e6c9b40 dead000000000122 0000000000000000
[  208.940587][    C1] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000
[  208.949149][    C1] head: 00fff00000000040 ffff88801e6c9b40 dead000000000122 0000000000000000
[  208.957798][    C1] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000
[  208.966450][    C1] head: 00fff00000000002 ffffea0001489b01 00000000ffffffff 00000000ffffffff
[  208.975098][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  208.983740][