last executing test programs:

9m24.233241165s ago: executing program 2 (id=62):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = fanotify_init(0x0, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
fanotify_mark(r3, 0x21, 0x101a, r3, 0x0)
fanotify_mark(r3, 0x22, 0x4000103b, r3, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x9)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@delchain={0x9b0, 0x65, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x18}, {0xb, 0x17c9cedaef6c3850}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7d}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc508}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x8a8, 0x2, [@TCA_BPF_ACT={0x6c, 0x1, [@m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x38, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0x10, 0x1, 0x0, 0x3, 0x5, 0x8001, 0x5, 0x0, 0x3, 0x4, 0x3, 0x6, 0x8, 0x6, 0x5, 0x71, 0x40, 0x0, 0xfffff000, 0x80000001, 0x9, 0x1, 0x9f1, 0x1, 0x5, 0x7f, 0xf, 0x4, 0x595, 0x8, 0x229, 0xacb, 0xebdf, 0xfffffffc, 0x7, 0x2, 0x2, 0x10001, 0x6, 0x0, 0x1, 0xe, 0x2, 0x6, 0x7fdc1630, 0xffff, 0x2, 0x4, 0x400, 0x5, 0xb, 0x8, 0x0, 0x100, 0x8, 0x0, 0x800, 0x9, 0x0, 0x87, 0x10001, 0x401, 0x8001, 0x4, 0x6, 0x9, 0xd, 0x395, 0x80, 0x0, 0xffff5d22, 0xffffffff, 0xcc6b, 0xe00000, 0x3, 0x0, 0x9, 0x7, 0x9, 0x3, 0x5, 0x8001, 0x4, 0x5a, 0x0, 0x5, 0x4, 0x8, 0x8, 0x1, 0x1, 0x2, 0x60000000, 0x9, 0x4, 0x100, 0x4, 0x3, 0x1, 0x0, 0x7, 0x7, 0x7ca, 0x7fff, 0x4, 0x6, 0x1, 0x1, 0x40e, 0x5, 0x7, 0x9, 0x0, 0x3, 0x6, 0x3255, 0x3497, 0x5, 0x5, 0x2, 0xb0, 0x4, 0x8, 0x8000, 0x7, 0x71, 0x0, 0xfc31, 0x9, 0x5, 0x6, 0x8, 0x8000, 0x5f, 0x76, 0x80, 0x8, 0x4, 0x2, 0x6, 0x3, 0x1, 0x5, 0x7, 0x81, 0x0, 0x2, 0xda, 0x8, 0xffff311c, 0x3, 0x8, 0x5b94, 0x83, 0x6, 0x6, 0x7, 0x7, 0x7, 0xc8, 0x894, 0x5e1, 0x1ff, 0x80, 0x401, 0x691, 0x7f, 0x8001, 0xff, 0x81, 0x4, 0x4a34, 0x3, 0x9, 0x8ed, 0x2e29, 0x49f, 0x1, 0x9, 0x2e, 0xfffffffc, 0x5a, 0x800, 0x6a73a8d3, 0x7cea, 0x7f, 0xffffffff, 0x3, 0x616afe1, 0xa8a, 0x1, 0xffffffff, 0x45, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0x2, 0xbd, 0x3, 0xfb, 0x0, 0x9, 0x9, 0x0, 0x7, 0x1, 0x6, 0x9, 0x8, 0xf353, 0x8, 0xf, 0xc, 0x68a, 0x1000, 0xd9, 0x7f, 0x3, 0xa76f, 0x6, 0x80, 0x6, 0x4, 0x7, 0x4, 0x5, 0x3, 0x6, 0x6, 0x101, 0xe56, 0x7, 0xb, 0x4, 0xe0f6, 0x2, 0x3, 0x80, 0x0, 0x0, 0x5, 0x8, 0xa0f, 0x1, 0x4, 0x3, 0x80, 0x92, 0x1, 0x9, 0x8e7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69e9a317}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x876a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0xc, 0x1, 0x0, 0x4, 0x0, 0x81, 0x8000, 0x8, 0x9, 0x3, 0x7, 0xe471, 0x3, 0x1, 0x7f, 0x7, 0x2, 0x4, 0x7, 0x1, 0xfffffff3, 0x8, 0x2, 0x6, 0x1, 0xccdb, 0x0, 0x7fff, 0xb6, 0x4, 0xa, 0xffffffc0, 0x3, 0x7fff, 0x5, 0x0, 0x3, 0x9, 0x81, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x5, 0x700000, 0x9, 0x2c, 0x800, 0xbf9acc6, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x53, 0x10, 0x8, 0x10000, 0x679, 0x28, 0x0, 0x6, 0x1, 0x6, 0x1, 0x9, 0xffff, 0x6, 0x6, 0xc6cc, 0x2, 0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0xa, 0x6, 0x8, 0xb518, 0x5, 0x7fffffff, 0x6a91, 0x6, 0xfffffff9, 0x6, 0xdb, 0x2, 0x261a20ef, 0x5, 0x5, 0x9, 0x800, 0x4, 0x5, 0x1d96bfed, 0x0, 0x6, 0xffffffb8, 0x9, 0x7f, 0x40, 0x9, 0xfffffff6, 0x6, 0x20, 0x3109a588, 0x80000000, 0xf, 0xfffffffc, 0x7, 0x1, 0x4, 0x8001, 0x80000000, 0xd, 0x8000, 0x5, 0x45c5, 0x81, 0xd, 0x9, 0x780, 0x0, 0x7ff, 0x7fff, 0x10001, 0x9, 0x3, 0x9, 0x1, 0x6, 0x3, 0x8000, 0xd, 0x8, 0x81, 0x7, 0xfd09, 0x0, 0xc, 0x0, 0x4, 0x866, 0xd05, 0xce1a, 0x1df, 0x7, 0x4, 0x7f, 0x1000, 0x7ff, 0x98, 0x80000001, 0x4851, 0x5, 0x8, 0x401, 0x0, 0x9, 0x800, 0xf, 0x5, 0x7, 0x4, 0x55, 0x85, 0x2, 0x7fff, 0x10000, 0x4, 0xfffffffe, 0x0, 0x6, 0x0, 0x8, 0x80000000, 0x0, 0x1, 0x7, 0x200, 0x7, 0x8, 0x10, 0x6, 0x76c, 0x2, 0x65, 0xfffffff8, 0xa78, 0xffffffff, 0xffffffff, 0xffffffff, 0x10000, 0x2, 0xfffffff9, 0x1, 0x8, 0x80000001, 0x100, 0x0, 0x9, 0x7, 0x4, 0x7, 0x4, 0x8e9, 0x4, 0x3, 0x7, 0x2cad9d15, 0xfffffff2, 0x8, 0x5798, 0x8, 0xa0b3, 0x6, 0xfffffff3, 0x5, 0x2, 0x6, 0x400, 0x0, 0xf9, 0x3, 0x3ff, 0x4, 0x10001, 0x7f, 0x1, 0xcda, 0x8, 0x4, 0x2a1c, 0x2, 0x800, 0xb4, 0xd0cb, 0x2, 0x4, 0x96, 0x1, 0xbc, 0x8001, 0x800000, 0x8, 0xffff, 0x1, 0x34, 0x5, 0x9]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_ACT={0x6c, 0x3, [@m_nat={0x68, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x40, 0x6, "dd0f5786dd0b12332010fe53672bced00059efb4616a5dbb49a0f1c638075cac3781f005bc13bd82519fa93cf0913003afef14d8366ef7e7c419ea6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x9b0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)

9m21.968967223s ago: executing program 2 (id=65):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0x3ff, 0x0, 0x18, 0x2000002, {0xfffffffc}, {0xffffffff, 0xfffffffd, 0x1}, {0x9, 0xffff0000}, {0x6}, 0x1, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x4000000, 0x2000000, 0x2000, 0x0, 0x100, 0x0, 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
unshare(0x6a040000)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})

9m20.925428235s ago: executing program 2 (id=66):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
clock_adjtime(0x1, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000300)={0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

9m17.04435958s ago: executing program 2 (id=83):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001840), 0x3b, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m15.731848243s ago: executing program 2 (id=77):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x163)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r3 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00')
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x76)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680})
getsockname$llc(r2, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r6, r6, 0x0, 0x200000)
lseek(0xffffffffffffffff, 0x8000000010007, 0x0)

9m13.76094072s ago: executing program 2 (id=81):
socket$inet6(0xa, 0x80001, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x400, 0x6}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0xee00, 0x0, 0x0)
ftruncate(r1, 0x6000809)
sendfile(r0, r1, 0x0, 0x7ffff004)

9m13.161749344s ago: executing program 32 (id=81):
socket$inet6(0xa, 0x80001, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x400, 0x6}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0xee00, 0x0, 0x0)
ftruncate(r1, 0x6000809)
sendfile(r0, r1, 0x0, 0x7ffff004)

6m54.353148647s ago: executing program 4 (id=325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000300)={0x8, 'netpci0\x00', {'hsr0\x00'}, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x700})
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0)

6m52.338808989s ago: executing program 4 (id=329):
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}})
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040085}, 0x8890)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c, 0x40, 0x0, 0x0)
listen(0xffffffffffffffff, 0x80)
r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00')
read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)

6m51.307719441s ago: executing program 4 (id=331):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400), 0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000900))

6m50.114022561s ago: executing program 4 (id=335):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002c80)={0x2020}, 0x2020)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x40000002}]}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01040000000000000000010000000900010073797a310000000030000000030a050000000000000000000100ffff0900010073797a310000000008000b400000000308000a40000000041400000011000100000000000000000000003206d71ffbe37ed98a7c998d286b2fbcb7ad0f6981365c37e1ca2304d0e062fb5ed2e9753ef7cb1d830201c67e286ec3c96f9ea8a17d2b736f20acddbaf0d15b7908b64e61376a5dae69e7aabc4db0b81084ecd4680cd38417a0e4ab"], 0x78}}, 0x200000d4)

6m47.848741832s ago: executing program 4 (id=338):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000280), &(0x7f0000000040)=@ng={0x4, 0x22, "e4d93f8c4263143ef456744e18a605103ab75ab7"}, 0x16, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x200040c4)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="d1", 0x1}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4eae, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x442}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f00000000c0)={0x0, 0x5a4}, 0x8)

6m46.808496596s ago: executing program 4 (id=340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b5", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="211000000300000008"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

6m31.057519819s ago: executing program 33 (id=340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b5", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="211000000300000008"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

13.885537802s ago: executing program 5 (id=1759):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fanotify_init(0x200, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="a29c4cc9", 0x4}], 0x1)

11.390369787s ago: executing program 5 (id=1768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYRESOCT=0x0], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x24044884)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

10.073108451s ago: executing program 6 (id=1775):
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000013000100000000000000000067636861636861323000000000000000000000000000000000543a78d9fb50abfde8edabeae2f000"/215], 0xe0}}, 0x0)

8.642060236s ago: executing program 0 (id=1776):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)
read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020)

8.630933343s ago: executing program 3 (id=1777):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x82, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x410901, 0x0)
read$fb(r6, &(0x7f00000000c0)=""/41, 0x29)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8)

8.45474601s ago: executing program 5 (id=1779):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

8.401385291s ago: executing program 6 (id=1780):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0xa, 0x3, 0xff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
socket$netlink(0x10, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r3, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14)

7.686446742s ago: executing program 3 (id=1781):
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)=@newsa={0x13c, 0x10, 0x1, 0x70bd2b, 0x100, {{@in=@multicast1, @in=@remote, 0x1, 0x794, 0x4e23, 0x4, 0x0, 0x60, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x7, 0xfffffffffdfffff8, 0x4}, {0x5, 0x0, 0x1f, 0x1ff}, {0x2, 0x2}, 0x70bd27, 0x3504, 0x2, 0x4, 0xfd, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}, 0x0, 0x100}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x8000)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030305000000000000000000010000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x540, 0xfc, 0x1, {0x22, 0x15}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={0x0})
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20091500"], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.864827613s ago: executing program 1 (id=1782):
syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
write(r0, &(0x7f0000000040)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefb", 0x18)

6.764270777s ago: executing program 0 (id=1783):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$afs(0x0, 0x0, 0x0, 0x4, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f0000000200))
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0)

6.527031681s ago: executing program 5 (id=1784):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x418, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r3=>0x0})
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x10)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0xff, 0x10000, 0x7ffd, 0x6, 0x3, 0xc72d, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9c, 0x104, 0x401, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xff9, 0x200000, 0xaf, 0x0, 0x7, 0x0, 0x4]})

5.981941707s ago: executing program 1 (id=1785):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073153a00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x1}, 0xc)

5.92776351s ago: executing program 6 (id=1786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
setreuid(0x0, 0xee01)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0)

5.82543511s ago: executing program 0 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
linkat(r0, &(0x7f0000000140)='./bus\x00', r0, 0x0, 0x1000)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)

4.259169538s ago: executing program 6 (id=1788):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000005c0)="b9ff03076804268c989e140500c9", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r10, 0xd23, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)

4.038776317s ago: executing program 0 (id=1789):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setpgid(0x0, r3)
creat(&(0x7f0000000180)='./file0\x00', 0x5f)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYRESDEC])

3.909639425s ago: executing program 3 (id=1790):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
close(r1)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48)
r2 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="baaa10f0c269048a21d81c5b19548dfd1140f0318425682de5f45b48102264122270843752c1a7fd7f963c355ebac3ef2f27bdded889bb4446c5b39ba523c0102e7830fc92226dba9c6cee2f815d5b86c9ae632c60070ca461cf01086eb9431ac8f5decefc1ba3975c4b7fd840619437926eadffcc9a6da163e827ace063667375bbfe896299b7fa06f38d0855d653dd5378087c8e87d43ffbf747dcaa77f25792e03c0665c7b14f3ca973ffa3f0345428966293c77a535304f7bd0c601fca22c3155439c070dfc9"})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000580)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0xc79, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)

3.826726719s ago: executing program 1 (id=1791):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='ACMESynth\n\x00', 0xa)
close(r2)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')

3.459907131s ago: executing program 1 (id=1792):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3f3a, 0x80008100088b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = gettid()
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000280)="4d847217153995de750bb6e9bd085ddfe94acf", &(0x7f0000002540)="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"}}, &(0x7f0000000240))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10004, 0x5, r2})
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @random="00f8ff00"}, 0x14)
r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x8800)
r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000140)={0x6, @output={0x0, 0x0, {0x8b, 0x3ae4}, 0xd, 0x1003}})
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x200100)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
r7 = socket(0x2b, 0x80002, 0x80000001)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r7], 0x1c}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7a}}], 0x2, 0x34000, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r4}, 0x18)

3.402508761s ago: executing program 3 (id=1793):
sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000006780)=ANY=[@ANYBLOB="e000000000000000180100008b0800004a2bd0d37e82e0e923f2b3ccd7c572dcab2bb8f223891aaefefd6b61706ad2b71a4450a047c320e95c41a9df7c0d92775e3868a71ae6d13a03ed33bd04419d6b964785ac1702fe42f5b0a27c513591ffd0faa79494d09c27adb9037d2c7a50d98f23d979a0fb75d44d25bf6fe1ec562706a590f2ca59a792e08bec44ee4226e43705f15ded52e275e57b960a9a57ab21260135146396241ddec7e38eaf7e6f59a0f940aa47bdc808fb7a3a1be053bc93c56ebd49d18ae226ace4d0ca4004763e5a25799647ec49b70524108c8e8f0000101000000000000015010000000001003dbd02485a9e099176cef6cb77ec023921d8d7ab559efbb64ced39c9685ca223815bbcadfce18d7ad88d0e7ef6d728458e531ecae4d18e20a51490bf39c36af1461c89d6a17a8e792929761b9b7f4907992c5b5deca7f37fd9a77b8cfec6892d836e009d1b9d31b5490e6559ec1a3a4a2ce4c1f0404bd8c91b617936191524ffc84d14c3966e547a3ebb664a6bf10d7ad88973a7738d516538bb15008cfbf3e782871f041d174bdb10aacc94a3ef176f307ba4ddcf86618566b2eff4e0815c6d26f7058a72c36ef923f6c2474c294045f583ca3284994057c6935edab26c695b9ec0f0cdbbd45b72adfcb18c45b4a1c64b38ded8b81105b07500aa9f148d37362cc1a34263aef73dace477aacec77cd3722fca78f3fda4ff544a2615d57a3ea97b096a3a99869cc135710db1ec153b0bae708c8d05b53fd7b9056e3191ee25a9a7dad23ca817533ba126a2ed277e6b8a579bccfb16dc285f570c4660e09274ac52b6cbb8b8dfd05d4b4c2c6fb4076c97845ed65bc2300f10b6376bdb93f606faf0ce73b997a8ac8e73cb20bbe63d4918be8a76a99d99e35a1f3c07d8cba01287a041990c6c624480f96aef78dc48f4465e8ed2a2057f7e35eae93c9cc6ff94b27c7b50b4822b919ecfa7dc4a2c34bc424866cee6327eb5ed36d631fee9772c968943bd158eb7c75f6ff9e244c322fd1a0b14bc19d1678fd3afff9129cb7fad47f5c179ec647755591e26408d0a397a05bcef16f70e62538c14fa08ce41c6184f638aaf2c52107a9cc8ad8e606121ad3ad193f6aa1731e4ed124db362368504e90665939ce5e04365ca30ec47cdcd68f89f74de49d6d63f21fe65e93ffcd1f29be702004cd2f0039df3a74bb37ab60d5e1130419b71326247cba4b9831ee2dbcf4b5c484286afab47494e864d478bb3c13680142349fbfa776d595bed3650a403db7d484c46a627a3659b10af0e04082eea4cab1cbe2d581d1e892e4ef45477b3022fbac335e37de0ff427288a537a5e0ed520eac4a800c7dfc7316c00bc79db04fad3199c2e8847db809f1092fee24fd8e212fe948acb4cf035bd5f94cfe3bc305ddbdfcd1f40233507c74bace37ca71a85c79f5d4e6671bcfa2e714b0ea83ca5e409d8a96310cf94836957008af17498b1e757daafd57330e71682fc646508b12d184d2231558c6c608f284e32c5432d312ebbd3e43baf5d1338c8a08bd9a24ccfae68c45886285d59f2c3577dbaaaaacedb2754d7d8f182a2bde77741ef8700c086dee7fe9dc300f48772bb3e95acfccb596e1c82371e0b95700736383976232c20e1ad888d2b37cdc8aecdb5bf94bdeaebaf16499e1c9c90889382d7a8e5fc9b647c1f8e68cb02964ea0ee06801c96acee773a30640c92d2cb2268f11ce2a3ec4add0dd5991c2b5684faab612c18d7ec366c8426f76f848d9c5d7467906e28704cacd832c07d30b0a33a19a5e86dc049eea2a5e1575fb9e3ff45003c27d28ff7bff7e75531c51050c3fad13459cff46aef420b627cfdca12481c2a4c5f260af5a05a7fc60eb8d0a3f6f52a6f3dddacecfe6128aeb74c7bfa94cb5a6e1475f46902cbd24cd1769f5625c5709b5048fe646e74b049be181ab152c376ff2e0679ac3e4c0d8a10aa41332fa203e8c6d5bfbbc35bffefa86a5dd9da8d84d60232c63c3607bc20b883b11a59ecd40cc7b36d6110ce4f018a9d019661b87becef7e04ddefb8de16736d57115bb03ee3ad99f8f0b51b9f35a2d5855e2e808f0bc384c26b2106e224e4e8a17b47af9b243d305aa53e7f7cbd7d0ff1b105585fa5a159c0bc610ad6e6a13dc935988d3dc4ea7f02f332088fadc49255d395927f51111890bbf62200ddbf6743e10c79a87a9a36a7a0d2749ff81d118c51ccc4a74b1f5ecad7748b7083aa588e5932db1b0c9c28081df444d54b02feee9df39bc50e2b6e2b78bcbb8078c1fc44334631aec7153f0bcc08501a38ce9e60cdc760d428d7f63d083d17d7c109529b8418635e7863b6c850f408fbe2fd518157b62c0668f177f2d7f8f59d556c04cadd0228b05a193f63f4f809ebf7d01596f9d30a68bdaf04831bc9d516c539d7f70469b92626879a3cd0054490a717f61004f8c2f21e6abe6a8fcf9d1a3d08b3ca0cc0e9bf14b8b0401bc94d991932f08e11727dd7d49a505c8b86ebf7f9e8b4ddba6fc31e1f4a6f44bc6b874465033dce41d91b64e6aad71a677f4196e878d738948483a90f7db7c57f33306274da424a1f13657ab56d3e22f28de04a29144868114c6835c363f73b0133f8b277f32ee61aa6b742ab7ab4a854cadc7795b843bf91c80d31ad7bebb81a2b62acd7c88bd04388467dd6999526bbb3efb55bfdeeff34b8a8a52df8cc512c4a387a54bec374e39032bfbdae7ebc68bb73cf0a9bddf5785cd08b34469e64f14921945491e80f5fa85c96d4c01d9866b0ca56cd6e7f7bccbf5395b906ad78f1807a1ed4ed549959d7e0a8443cf1466b2c02cea14159294fa6fcabc8f42a7a2ddbcf8cc297568da49a55cfc1578eec8613856e41acf40ae80e567a9f87f7c17d49d5fd7286fa4b4f62dbb00d8d5f4d2465399dc7d26a4f19f2080f1270a3c7cf831e7749ce0e256725138f6c843012e6861555576d8bcd81bebe99b7e5c7e36161fa9dc73905f96d69ac1de72d24b3ac1c0aef53a5cc648ea7e47c2d2a8db7da6d5a8a4c380e274524376e42c60c97ae4c2c306c4f1c7cdccd20c1081d4146093043e7c26d8a40bbf96ff3b47cb393c5a7cacc24ad4d2ca7ceab4f4be5a69cb0ad80ced2098a6bf90411deb692621721bcc99a6640e61b55915723ac03cbe990c6caf3256bcf3d332d938c7dbf43a5b609584b283778d8a1bd36591c0af5523a7427e5cbf2d2b0df6bbd659d30f6f273136914f8c752339fdd5aafe8f0bb73d4800f7d3e6743edede2670429a40b038b4260ab275a8dfea4f889024797ca2f4268f5d0a5bdf27f47ecf42669d0eb23976cad4b8ffd981ae650d438482cd44bec341f3e9847eb9d3fff9683240842436a4d69f4867c06c0693087cb584661d11f23607fe281640e3d9a0cdb270444e5272bf442f32370a2bbd8cd46ec0a8b7bcadeaea11abe892b804237e63e464043d3e98a7d0c0ac59b9d143f2357abb7c4d7ce5a32cf539357d36f0156ba009e0b578d25267725b91c240635cf5aa24a7c3284699162e21139a3ac0f3dcd413a87ad807c16f1045af3f5ebc2b1753a106feffe83bd09fbac5c68e46ce4078ac76e0dbe43228199f84b1daff661ac3ba5e83b94b7cdb6d0d6b1dbfc642f7006992234aee6dcebbdd300ad4188201ac72d0c84056135888bf3d7d695a0dd3f48de355b553797220ee732264498bd2a844b090f66f96fd2d68b3ca54c10a58fd7095a6f719250eb8c52d39b867a360b2bc9cf8d403aec8b70c7462334e08548a793963648c128524cd08e0045a91f5bcadc047835933e00f148d7c7cf5839db1c1d7201e033f60e967c0aea3edbffdbf629b1a5de8751a602042305393216508c6f53d0e2adadd88bc811ffc7db3e7137b86868a207716e855d0e406b7488855739f8b86ec4c5e07f6efdf6d47d174b1e9733b7f1784e748b4516fd55df872e38ddd607babaa85a4718542b1423a8d9be17780b9e7d253c1c05e15f3f8ead840e42c7a4f53f2e0eacfc2c43331010333be039e8ff920c38aaeb163e30cdf5ef5e6cd305ec40896d015495850cfeccd8349b18a9734af399f4cfc69dd3aa35fe1186be2c788be237351a1b09fffc09a64b5aedea7efed0c82f7a40c6029a93ea162f5501edfb6237097f6c4ebc47282d12d6d5ff3c2976e644bc187b047c02f036fe63712581133ba90c3f28abf7a056af6809a6111edc4dfa33ac0a80b20ff82e4993ff1fc30dcdbcc26d539d048a6cb25d7e874162903f4c9a05bc0c930242b62cef945cf50a94df2808d71db2508310d304d7570fef7469aaef303ebaab5d9b526b2d426e74494a26e22b2c893732e5fdb5a461ed79fbed9efbb32c6aeda967b97f0530b4f45ae52839f784fee94fce8a754c0e9692002fd69fc85260ed516dc38dca6516930093aee0f200f2333fffbe5cc189994a85196dcd89e1f0f6479f9298c6fca5dc9d924fdd7684b5566193f9b252e43642c30de6f6077e2f6c004f6d8f8cc14bda8eab2017824e32a55b0722b36a732373ee2ad145f1ff898660fb48323b36d34b75dd86d25d03b196973b400dda6a8553f9c6e5b17b495187776ff9d77b4871fa6890cddf3274b6cd2bc1edc6d439fc5e8e8502f5a244225d31f04893c74879c4ed1fca9a4b551beecd1eca9525379af60bddb6efc83f478d7ca082d4f50b5d1e75e074851e1c2e96a1774d0839b49414865d6d3c1b5d42d9b39239dea8521fb605c40f9eb39e6adc1561d012111ca22379a7f378a56c1d843089b732d400c477117f1ddd743569bbfbe8a17b7f32a39b2e55aaac46d188207c1dd5c6077c31f3919d6d88d1bd9adaa46f17ae374421d1e8a3839f1d05323964a45baeb7920244efbf3a2a29278e52a7e079568f2ecd848579b15e58403411f3b7da289fbb0c808542c06652e0bc61bb0c13f1b5763a7d40459414b60739bfa81df96c76565cbc8903d1ffa17742f7d2c24dd4466a293a29d2d183e1cd1890e35b26ffb4dfac3357fdf141a1e97c4f6018d647dfe0bf5019a92835aec7580c25cb824bcaa65ad6af181cef9bcfef9e2cd4aa38f613d79b08b99c7f15d02c26b4eb1b4c280cc261c148bac0c92fe7af9c1100b1201ae25ef29fc9bb9b5690ad923241647f162736f291a0ca8657cca095139e9e99e3e048e0bc5e5e0c2ee0b7475e53decddda6ecd54537d5d8c008bb0679c37a27e4f63de1209910a53c9b44325dde2cdefc387cc710dd7b240bee8207ef19a7ad5e241264c65f028c8a04efc06b6e33bb95c1ce18245ab35f4a837411a2149bb239058199e3005a5843e704014da4eafe5b42d80f80231aa96b5d9b53a1d05c40bc991fca6ff9e96dd0d343373051daa58234a7d559ea63d214727398061e9162d8439a6e3943f3413b7fed4aa84b018ea33c353d907b8539506dff4765c95ca64ffa449d84c99828ed5756fe26ac1581681e303bd688cef3cc9d47f892b1ff76145b40e6c44e6d14eb7d29afe4b4c80999dfcf6ecd3a0500b7355dbc5cd7669c1a1c2314a9816909cde5394127f88399e6f2662955417c7a2ac5923e84668d9361f23d4a427153332ba9cc4d30487bdc479afbf1e0bf4caf1018a0a6127fff39811fa214ba8982e731802f0bcf21fdb871c535818293d347e63600c871e6ed665f30e023c2d09184e76b0f81e7681c17e42c972f076bd207e31e8b7318fbdc2f103d2b7b832f301feba4c23faf5097ee52f178df049a2300fc338b33b096d1096316ba2196a842a41636663b623eae4c7f68d8dd3e9f96e40dad2ae95ea9f087b9107c7ad1a5319c7310161d40d24fa3030c83586f747b0f7be52a294c0af27faaa238131d6a6a9c1c6d80a31f9266cf2257b34ee815e056813add32763c84b8b8f9e97896f2d8dc68c36b294ea8920ce6e0bb3b21891d38e95c020deb60eea771820b2fb5c4574c96417a8d59c08e9a55c3b37605134a732acb45ed5df17886be969d9bbb9c5a933fbdaae2f776ef0550b80243b5851feaa3d22532aa5dbbe198baa5f1dfe0aff238ad8d6f1c40a4cb1d4c16255b98b9619da26179556190011e120db7b818111ea33750e94145cac8678d044c590e433c0e6dbca159570de60265564f3e0716ad15dbf3e6a1e44276cb312eee8c4a078d378a4818400de0d741f0f2bbdd98e7eacb11ae0000000000000000701000004000000dec5e9cfa0e63c7fd9d22fc3c12d6f35258d24be2cf1c5a7b16a084b4527781fd714c8f0e8ff586b1a0f53f12bcc5ec92db572bc66e75858d87bb37e4fe2779f42c3c393a680ac0f29b5ee2073b7e3004b9b20a80405a38ba00e246b5b1bde1b884c813e9ee3a1d3f4946a2f5a6ba77c4622835f0447b2a9225fb02668e055ac5c0ad01d89d7a07ca6e12f91183dcbbc51e8eddcfdd234d3b2df7a2d40ee40b334c5adac7caec01c5a9e406bd5a9668a6bedbd51b69ffa1c1c13de7ac1a13ee76f4c7212", @ANYRESOCT], 0x11d0}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x200004, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"/528], 0x210}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0xffb, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="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", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f0000004280)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5", 0x7e}, {&(0x7f0000000600)="4b8bd4fa8961ecabf22ae3b3cd7043ed7a2f27e615e688f90981645bc3c1faf55a01f86ea00bcffcd10caf20643264ddd76d18f017dfb879a401bec29e5452b76c7f202286589c956c7830f291e2d1b6bb3d374efba63ad695dd8a6ab92fafbfb88ef755215bf2dd1c4661f2ac1e3fd9fa3c8c6d5b691a2b5a487873d3a24b09e2a76b77759485e8b40cab71465b80858eacffbb8f1074018cf21be301b454f014048148d29e4086ee8e7c883f0dff1067728df49715c75c375b6fffe2cde4aadf5c1e32aa0606c9758943ce7170260ca08080e5b90298054b02f442b7e1db", 0xdf}, {&(0x7f0000000ac0)="c83860afc7d6a1701a16d47b40a4f58504892945c810422e0957576c2bdafb957678a00d2b4c3d5b538e548feabf63b1f79c18c59b4e32cae94410fe7ead91d15b8d25a07f6de06f5ab9168388a7f0b24d7b9b7464fd60c75904c6fe2df68ab9b0fd761f37457a379f66af7848f1247e719a96997e03589ffc35c2da5bc5de8034e965e519d8eb7288dc2f86e2f28ff8ea71084681041fdc6de2cf6e92e710ee9a6f1674b29b044982189731898abe10147b7aabf70cad2d925ddcb24550793279bf", 0xc2}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000000940)="7b8a69eaeca61bc1f0041df93ec4a31271bf57ff3dcc472d900d2e62da6ddef96857c84a211e6cd207e6919363a5d6a273841a0b9a80167085a4fb2446faa0", 0x3f}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f0000000440)="37c414ead78ce9a85b2525c070b1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d0decf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c1fad7e29cf03857db9568797aaa7bcb95b19c561a2e138b6c3f7a18079079cf0654826f4d36bf164206baa1e1c9da4c3e5e9101c12ac62dde65c705d93958357142267c3c6", 0xef}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a02000000000000000eaeeb4ebbedaa2a118d00", 0x56}, {&(0x7f00000001c0)}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f16712bd4cbb429947223233626f44a14fe29124af83c445b2c9354dcfed62162f597ab8d8816de9792354282eb321959298b76de7874b04dada3e8", 0x76}], 0x6, &(0x7f0000004bc0)=ANY=[], 0x1448}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000060c0)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc8cc2ea5343905d3e1e04049628e48ad4bc80d7fbb2b1542d79cef4a285f9835bc8ac658205077f9576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413846bad763ff5ca7dcc356c6a61ff01ef5517b35a3758902c661d7bdf6bb1ef29cf99fb8445c8de16d9b2782ba5cdb537271b3465f1bc394256c8a33decdf62d958d0c330ec55b019a404c58e9d1cc0e59d1363c3e576dc6d", 0xde}, {&(0x7f00000061c0)="374f8cd59ae59035ebcf8034c432509616a7a860dbd74f7930b859f89b4d32e56b13", 0x22}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000006300)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x80, &(0x7f00000065c0)}}], 0x6, 0x804)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bbddffffffffffffff00000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x2a, 0x4, 0x2, 0x1b, 0xa8, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @cipso={0x86, 0x65, 0x2, [{0x6, 0xc, "159a7b19a71b89640f6e"}, {0x0, 0x3, "8c"}, {0x1, 0x5, 'O<g'}, {0x1, 0x2}, {0x0, 0xd, "5b778a926e3534d53b0ef7"}, {0x0, 0x11, "b6169108f610ba1e86166387916982"}, {0x2, 0xd, "ab27f3338d4387c341c63d"}, {0x5, 0x7, "f565daef80"}, {0x0, 0x9, "1747ea338368a6"}, {0x5, 0xe, "57b7ae42b4097dbfef37aaf5"}]}, @rr={0x7, 0xf, 0xb, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x7, 0xd6, [@multicast1]}, @noop, @end, @generic={0x86, 0x12, "484cfce182adcfaf7bd92ac00a8595dc"}, @rr={0x7, 0x3, 0xa3}, @noop]}}}}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="4400000010000104000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000c000000000005000d0001000000"], 0x44}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs, &(0x7f0000000540)=0xfffffffffffffe5e)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x800)
sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x5, @random="e7b1b4b0979b", 'gre0\x00'}}, 0x1e)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r9=>0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r10 = socket$inet6(0xa, 0x3, 0x2)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000005c00)=ANY=[@ANYBLOB="1e00000000000000ff000000ac000000b0280000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000003000000020000000f00"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005c80)={&(0x7f00000002c0)="b0dad7d80cfc1f70c0b8cdfd511ebfa874f5bdc2d0d9f348d0e19eb960bc5ea76fd22dc0b8069910348c60fcbf3623cfc4c00fccf538317edf7fa4a1d5b19964a7cddc6757b279dbac92067be3de9cb31c99a134a3ed7b6d93b1975250c6ec060096a223a537af9a28f2052b4444c2599392563db91aa3185beb97d95efb7038d34ea7911e6783a188a3622bb95b4defdcc41649cb1bf553f3148e0cdb1b9b753428587813dc061567fa5835c6de8e3016433ae90148b42508acd67b612395ddeb84ac68d03668dbce902dd638a8fbcddcc14d59af46ffdbd5c9bab281491ec7cb73ad3111a5f2e6f6c0bd35b6a61c4075bb", &(0x7f00000003c0)=""/80, &(0x7f0000004bc0)="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", &(0x7f0000005bc0)="fdea2ccc5470e34c9e89c34c61daaa195965219b7aa339604ee35a153bfd48e0082dfe5040cb16d01d41c9023b1a41516605089f2eeafe70b308cf1c051115", 0xffffff97, r11}, 0x38)
connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e23, 0x400, @empty, 0x100007}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

2.841032201s ago: executing program 5 (id=1794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0xca58c30f81b6079f})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0xfffffffffffffffd)
ioctl$int_in(r0, 0x5452, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x181800)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x1, 0x7f, 0x7, 0xffffffffffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
syz_open_procfs(0x0, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r7 = socket(0x1, 0x5, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x7bdf, 0x4000, 0x7, 0x39d}, 0x0, 0x4, 0x0, 0x0)
io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x2d91, 0x1000, 0x0, 0x2ca})

2.838369026s ago: executing program 6 (id=1795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23000000d5dc000000e1000000ff000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000580), 0x0}, 0x20)

2.761489971s ago: executing program 1 (id=1796):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x238})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000700)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc4)
recvfrom(r3, &(0x7f0000000280)=""/90, 0x5a, 0x10500, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.92793815s ago: executing program 3 (id=1797):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmmsg(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xffff}], 0x3, 0x12002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000020c0)='attr/keycreate\x00')
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @remote}}}, 0x118)
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c)
listen(r7, 0x10040)

1.916394699s ago: executing program 0 (id=1807):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'devices'}]}, 0x9)

1.849088034s ago: executing program 6 (id=1798):
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000380)=@multiplanar_fd={0x101, 0x1, 0x4, 0x800000, 0x6, {0x77359400}, {0x2, 0x0, 0xf1, 0xa, 0x8, 0xd, "c83cfd6a"}, 0x3, 0x4, {&(0x7f00000002c0)=[{0x1, 0x94, {}, 0x7}, {0x0, 0x6, {}, 0x5}]}, 0x2})
read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)

1.166505555s ago: executing program 0 (id=1799):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

430.498889ms ago: executing program 5 (id=1800):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='Midi1\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)

419.843879ms ago: executing program 1 (id=1801):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

0s ago: executing program 3 (id=1802):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0)

kernel console output (not intermixed with test programs):

99] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  570.103158][ T5728] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  570.113816][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.122024][ T5721] usb 2-1: USB disconnect, device number 17
[  570.125046][   T30] audit: type=1400 audit(2000000411.230:1051): avc:  denied  { read write } for  pid=11274 comm="syz.1.1240" name="lp0" dev="devtmpfs" ino=3068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  570.156541][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  570.160005][ T5721] usblp0: removed
[  570.169823][    T9] usb 7-1: New USB device found, idVendor=056a, idProduct=f693, bcdDevice= 0.ff
[  570.183294][ T5799] usb 1-1: Using ep0 maxpacket: 8
[  570.188783][   T30] audit: type=1400 audit(2000000411.230:1052): avc:  denied  { open } for  pid=11274 comm="syz.1.1240" path="/dev/usb/lp0" dev="devtmpfs" ino=3068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  570.213561][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.225816][    T9] usb 7-1: config 0 descriptor??
[  570.231873][ T5799] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  570.240573][ T5799] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  570.249698][ T5799] usb 1-1: config 0 has no interface number 0
[  570.257904][ T5799] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  570.269657][ T5799] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  570.281256][ T5799] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  570.292575][ T5799] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  570.301818][ T5799] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  570.310734][ T5799] usb 1-1: Product: syz
[  570.315338][ T5799] usb 1-1: Manufacturer: syz
[  570.320576][ T5728] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.332364][ T5728] usb 6-1: config 0 interface 0 has no altsetting 0
[  570.339848][ T5799] usb 1-1: config 0 descriptor??
[  570.345172][ T5728] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  570.354469][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.371414][ T5728] usb 6-1: config 0 descriptor??
[  570.673272][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.687091][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.695589][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.702620][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.710155][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.717595][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.726470][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.736686][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.744626][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.762318][    T9] wacom 0003:056A:F693.0002: unknown main item tag 0x0
[  570.894682][ T5728] greenasia 0003:0E8F:0012.0003: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0
[  570.933077][ T5728] greenasia 0003:0E8F:0012.0003: no inputs found
[  570.937950][ T5721] usb 7-1: USB disconnect, device number 10
[  570.979146][ T5799] usb 1-1: USB disconnect, device number 13
[  571.075497][ T9841] usb 6-1: USB disconnect, device number 14
[  571.693070][ T5799] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  571.851572][T11338] binder: 11336:11338 ioctl c0306201 0 returned -14
[  571.883493][ T5799] usb 4-1: Using ep0 maxpacket: 32
[  571.899266][ T5799] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  571.931884][   T50] Bluetooth: hci5: unexpected event for opcode 0x1405
[  571.939155][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.957625][ T5799] usb 4-1: Product: syz
[  571.964788][ T5799] usb 4-1: Manufacturer: syz
[  571.969473][ T5799] usb 4-1: SerialNumber: syz
[  571.985350][ T5799] usb 4-1: config 0 descriptor??
[  572.087069][ T9841] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  572.383368][ T9841] usb 1-1: Using ep0 maxpacket: 8
[  572.392559][ T9841] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  572.411287][ T9841] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  572.421275][ T9841] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  572.688093][ T5799] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  572.794585][ T9841] usb 1-1: Product: syz
[  572.798807][ T9841] usb 1-1: Manufacturer: syz
[  572.803467][ T9841] usb 1-1: SerialNumber: syz
[  573.133863][ T9841] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  573.188921][ T9841] visor 1-1:1.0: probe with driver visor failed with error -110
[  573.414363][ T5799] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  573.427721][ T5799] usb 4-1: USB disconnect, device number 19
[  573.733253][T10336] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  573.928660][T10336] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  574.018918][T10336] usb 7-1: config 0 has no interface number 0
[  574.079949][T10336] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  574.153319][T10336] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  574.165698][T10336] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  574.179277][T10336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.187764][T10336] usb 7-1: Product: syz
[  574.192038][T10336] usb 7-1: Manufacturer: syz
[  574.197017][T10336] usb 7-1: SerialNumber: syz
[  574.205758][T10336] usb 7-1: config 0 descriptor??
[  574.615115][T10336] radio-si470x 7-1:0.35: this is not a si470x device.
[  574.663885][T10336] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  574.713300][T10336] usb 7-1: USB disconnect, device number 11
[  574.727752][T11408] binder: BINDER_SET_CONTEXT_MGR already set
[  574.748883][T11408] binder: 11405:11408 ioctl 4018620d 200000000300 returned -16
[  574.846678][ T5703] usb 1-1: USB disconnect, device number 14
[  574.941706][T11418] tipc: Started in network mode
[  574.958141][T11418] tipc: Node identity ba2b09bd3665, cluster identity 4711
[  574.972523][T11418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.990500][T11418] syzkaller0: entered promiscuous mode
[  575.000713][T11422] xt_hashlimit: size too large, truncated to 1048576
[  575.007540][T11418] syzkaller0: entered allmulticast mode
[  575.023547][ T9841] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  575.066403][T11418] tipc: Resetting bearer <eth:syzkaller0>
[  575.079159][T11416] tipc: Resetting bearer <eth:syzkaller0>
[  575.112445][T11416] tipc: Disabling bearer <eth:syzkaller0>
[  575.236578][ T9841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.313846][ T9841] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  575.362256][ T9841] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  575.382266][ T9841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.421243][ T9841] usb 6-1: config 0 descriptor??
[  575.451417][ T9841] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  575.494001][ T9841] dvb-usb: bulk message failed: -22 (3/0)
[  575.559711][T11444] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  575.564401][T11444] 
@0Ù: renamed from bond_slave_1 (while UP)
[  575.593871][ T9841] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  575.898298][ T9841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  575.905994][ T9841] usb 6-1: media controller created
[  575.914838][ T9841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  575.941930][T11412] dvb-usb: bulk message failed: -22 (2/0)
[  575.975443][T11448] netlink: 'syz.3.1309': attribute type 4 has an invalid length.
[  576.012273][T11448] rdma_rxe: rxe_newlink: failed to add lo
[  576.032864][ T9841] dvb-usb: bulk message failed: -22 (6/0)
[  576.068166][ T9841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  576.110420][ T9841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  576.178558][ T9841] dvb-usb: schedule remote query interval to 150 msecs.
[  576.195079][ T9841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  576.205599][T11455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  576.214994][T11455] syzkaller0: entered promiscuous mode
[  576.230706][ T9841] usb 6-1: USB disconnect, device number 15
[  576.238926][T11455] syzkaller0: entered allmulticast mode
[  576.277149][T11455] tipc: Resetting bearer <eth:syzkaller0>
[  576.306447][T11454] tipc: Resetting bearer <eth:syzkaller0>
[  576.328340][ T9841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  576.382716][T11454] tipc: Disabling bearer <eth:syzkaller0>
[  576.852975][   T30] audit: type=1800 audit(2000000417.960:1053): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1321" name="toss_secs" dev="configfs" ino=34649 res=0 errno=0
[  577.017999][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1324'.
[  577.081676][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1324'.
[  577.388999][   T30] audit: type=1400 audit(2000000418.500:1054): avc:  denied  { remount } for  pid=11497 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  577.413169][T11498] option changes via remount are deprecated (pid=11497 comm=syz.6.1332)
[  577.429509][T11498] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  577.669571][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  577.876477][T11204] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  577.897694][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  577.942891][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.981279][    T9] usb 6-1: Product: syz
[  577.999085][    T9] usb 6-1: Manufacturer: syz
[  578.009302][    T9] usb 6-1: SerialNumber: syz
[  578.055834][T11204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.114798][T11204] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  578.148748][T11204] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  578.196055][T11204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.242979][T11204] usb 1-1: config 0 descriptor??
[  578.312009][T11204] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  578.363606][ T5799] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  578.417419][T11204] dvb-usb: bulk message failed: -22 (3/0)
[  578.473997][T11204] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  578.510782][T11507] dvb-usb: bulk message failed: -22 (2/0)
[  578.518851][T11204] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  578.553282][T11204] usb 1-1: media controller created
[  578.571155][T11204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  578.583057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  578.593092][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  578.686033][T11204] dvb-usb: bulk message failed: -22 (6/0)
[  578.728276][T11204] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  578.782591][T11204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17
[  578.802876][T11529] binder: BINDER_SET_CONTEXT_MGR already set
[  578.817732][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  578.820618][T11529] binder: 11528:11529 ioctl 4018620d 200000000300 returned -16
[  578.840263][T11204] dvb-usb: schedule remote query interval to 150 msecs.
[  578.859413][T11204] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  578.887185][T11204] usb 1-1: USB disconnect, device number 15
[  578.902119][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  579.003498][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  579.031408][ T5703] usb 6-1: USB disconnect, device number 16
[  579.060208][T11204] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  579.101202][    T9] usb 2-1: Product: syz
[  579.112477][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1346'.
[  579.127140][    T9] usb 2-1: Manufacturer: syz
[  579.158571][    T9] usb 2-1: SerialNumber: syz
[  579.170025][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1346'.
[  579.306663][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'.
[  579.447254][    T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  579.463138][ T5721] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  579.634588][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  579.664736][ T5799] usb 6-1: Service connection timeout for: 256
[  579.681476][ T5799] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  579.700412][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  579.713304][ T5799] ath9k_htc: Failed to initialize the device
[  579.731083][T11549] file system registered
[  579.736972][   T30] audit: type=1400 audit(2000000420.840:1055): avc:  denied  { write } for  pid=11548 comm="syz.0.1353" name="functions" dev="configfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  579.775112][ T5703] usb 6-1: ath9k_htc: USB layer deinitialized
[  579.784193][T11549] unloading
[  579.801483][   T30] audit: type=1400 audit(2000000420.900:1056): avc:  denied  { write } for  pid=11548 comm="syz.0.1353" name="functions" dev="configfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  579.830933][ T5721] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  579.871134][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  579.886791][    C1] usblp0: nonzero write bulk status received: -71
[  579.896200][T11204] usb 2-1: USB disconnect, device number 18
[  579.906248][T11518] usblp0: removed
[  579.925615][ T5721] usb 7-1: SerialNumber: syz
[  580.123119][ T5703] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  580.156596][ T5721] usb 7-1: 0:2 : does not exist
[  580.223187][ T5728] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  580.295098][ T5703] usb 6-1: Using ep0 maxpacket: 8
[  580.320934][ T5703] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  580.351808][ T5721] usb 7-1: USB disconnect, device number 12
[  580.375505][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  580.392236][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  580.394181][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  580.430404][ T5728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  580.457135][ T5728] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  580.502588][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  580.512721][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.534288][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  580.574977][T11552] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  580.591948][ T5703] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.620176][ T5703] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  580.656571][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.660116][ T5728] hub 1-1:1.0: bad descriptor, ignoring hub
[  580.684042][ T5728] hub 1-1:1.0: probe with driver hub failed with error -5
[  580.712084][ T5728] cdc_wdm 1-1:1.0: skipping garbage
[  580.730345][ T5728] cdc_wdm 1-1:1.0: skipping garbage
[  580.880847][ T5728] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  580.889681][ T5728] cdc_wdm 1-1:1.0: Unknown control protocol
[  580.935797][ T5728] usb 1-1: USB disconnect, device number 16
[  581.022977][ T5703] usb 6-1: GET_CAPABILITIES returned 0
[  581.034910][ T5703] usbtmc 6-1:16.0: can't read capabilities
[  581.185183][   T30] audit: type=1400 audit(2000000422.300:1057): avc:  denied  { write } for  pid=11564 comm="syz.6.1358" name="c.1" dev="configfs" ino=23705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  581.318830][ T5703] usb 6-1: USB disconnect, device number 17
[  581.435025][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1360'.
[  581.450095][   T30] audit: type=1400 audit(2000000422.560:1058): avc:  denied  { create } for  pid=11569 comm="syz.3.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  581.473504][ T5728] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  581.488425][   T30] audit: type=1400 audit(2000000422.560:1059): avc:  denied  { write } for  pid=11569 comm="syz.3.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  581.554523][T11570] bridge_slave_0: default FDB implementation only supports local addresses
[  581.637449][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  581.673543][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  581.689390][ T5728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  581.701563][ T5728] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  581.711918][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.739704][T11552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  581.759504][ T5728] hub 1-1:1.0: bad descriptor, ignoring hub
[  581.782989][ T5728] hub 1-1:1.0: probe with driver hub failed with error -5
[  581.816704][ T5728] cdc_wdm 1-1:1.0: skipping garbage
[  581.837907][ T5728] cdc_wdm 1-1:1.0: skipping garbage
[  581.863808][ T5728] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  581.889031][ T5728] cdc_wdm 1-1:1.0: Unknown control protocol
[  582.084200][ T5703] usb 1-1: USB disconnect, device number 17
[  582.443099][ T5728] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  582.450922][ T5703] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  582.653668][ T5703] usb 4-1: Using ep0 maxpacket: 32
[  582.678205][ T5703] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  582.700497][ T5703] usb 4-1: config 0 has no interface number 0
[  582.720197][ T5703] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  582.734723][ T5728] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  582.751890][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.772047][ T5728] usb 7-1: config 0 descriptor??
[  582.774858][ T5703] usb 4-1: config 0 interface 85 has no altsetting 0
[  582.804951][ T5703] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  582.806175][ T5728] gspca_main: cpia1-2.14.0 probing 0813:0001
[  582.854210][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.870364][ T5703] usb 4-1: Product: syz
[  582.876316][ T5703] usb 4-1: Manufacturer: syz
[  582.881484][ T5703] usb 4-1: SerialNumber: syz
[  582.905499][ T5703] usb 4-1: config 0 descriptor??
[  583.126237][T11204] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  583.215180][ T5728] cpia1 7-1:0.0: unexpected state after lo power cmd: 00
[  583.293629][T11204] usb 1-1: Using ep0 maxpacket: 8
[  583.300635][T11204] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  583.347627][T11204] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  583.380120][T11204] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  583.398608][T11204] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.413772][T11204] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  583.427152][T11204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.559899][ T5703] appletouch 4-1:0.85: Geyser mode initialized.
[  583.577280][ T5703] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input18
[  583.619821][ T5728] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  583.643358][ T5799] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  583.686892][T11204] usb 1-1: GET_CAPABILITIES returned 0
[  583.702392][T11204] usbtmc 1-1:16.0: can't read capabilities
[  583.826479][ T5799] usb 2-1: unable to get BOS descriptor or descriptor too short
[  583.851578][ T5799] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  583.864967][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.874224][ T5728] usb 4-1: USB disconnect, device number 20
[  583.890435][ T5799] usb 2-1: Product: syz
[  583.909754][ T5799] usb 2-1: Manufacturer: syz
[  583.933148][ T5799] usb 2-1: SerialNumber: syz
[  583.948927][T11204] usb 7-1: USB disconnect, device number 13
[  583.955963][ T5728] appletouch 4-1:0.85: input: appletouch disconnected
[  583.966953][ T5799] usb 2-1: selecting invalid altsetting 1
[  583.982754][T10336] usb 1-1: USB disconnect, device number 18
[  583.998258][ T5799] usb 2-1: unit 6 not found!
[  584.223446][   T50] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  584.224521][T10868] Bluetooth: hci2: command 0x0406 tx timeout
[  584.603797][T11204] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  584.814567][ T5799] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  584.869362][T11204] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  584.869854][ T5799] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  584.884917][T11204] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  584.971840][T11204] usb 6-1: config 220 has no interface number 2
[  584.973960][ T5799] usb 2-1: selecting invalid altsetting 1
[  585.115823][ T5799] usb 2-1: unit 6 not found!
[  585.128882][ T5799] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2)
[  585.137233][ T5799] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[  585.153084][ T5799] usb 2-1: selecting invalid altsetting 1
[  585.160301][ T5799] usb 2-1: unit 6 not found!
[  585.166864][ T5799] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2)
[  585.181439][T11204] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  585.199152][T11204] usb 6-1: config 220 interface 0 has no altsetting 0
[  585.210139][T11204] usb 6-1: config 220 interface 76 has no altsetting 0
[  585.217749][T11204] usb 6-1: config 220 interface 1 has no altsetting 0
[  585.227739][T11204] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  585.238079][T11204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.246336][T11204] usb 6-1: Product: syz
[  585.250631][T11204] usb 6-1: Manufacturer: syz
[  585.257004][T11204] usb 6-1: SerialNumber: syz
[  585.333719][ T5799] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22
[  585.371333][ T5799] usb 2-1: USB disconnect, device number 19
[  585.413177][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  585.487191][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.551330][T11204] usb 6-1: selecting invalid altsetting 0
[  585.563443][    T9] usb 1-1: Using ep0 maxpacket: 16
[  585.572247][T11204] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  585.591629][T11204] uvcvideo 6-1:220.0: No valid video chain found.
[  585.602633][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  585.625615][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  585.628678][T11204] usb 6-1: selecting invalid altsetting 0
[  585.645647][T11204] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  585.661646][T11204] usb 6-1: USB disconnect, device number 18
[  585.671688][    T9] usb 1-1: can't read configurations, error -71
[  585.935225][T10336] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  586.118908][T10336] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  586.135840][T10336] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  586.161806][T10336] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  586.173835][T10336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.201593][T10336] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[  586.256421][T10336] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[  586.312628][   T30] audit: type=1400 audit(2000000427.420:1060): avc:  denied  { map } for  pid=11646 comm="syz.0.1390" path="/dev/ublkc2" dev="devtmpfs" ino=3157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  586.618325][T11655] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  586.624222][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  586.626587][T11634] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  586.656912][T11634] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  586.673170][T11204] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  586.770436][T11634] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  586.837472][T11204] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  586.858900][T11204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.885644][T11204] usb 6-1: Product: syz
[  586.896755][T11204] usb 6-1: Manufacturer: syz
[  586.911048][T11204] usb 6-1: SerialNumber: syz
[  586.920115][T11633] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  586.942731][ T9841] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  586.954844][    T9] usb 7-1: USB disconnect, device number 14
[  587.013180][ T5703] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  587.043790][    T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  587.078560][    T9] spcp8x5 7-1:1.0: device disconnected
[  587.153170][ T5721] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  587.176229][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.188912][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  587.223162][ T5703] usb 4-1: config 1 has no interface number 0
[  587.229405][ T5703] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  587.253714][ T5703] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  587.264815][ T5703] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  587.276646][ T5703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  587.286185][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.294568][ T5703] usb 4-1: Product: syz
[  587.298844][ T5703] usb 4-1: Manufacturer: syz
[  587.303983][ T5703] usb 4-1: SerialNumber: syz
[  587.319919][T11657] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  587.335169][ T5721] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.347097][ T5721] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  587.358007][ T5721] usb 1-1: config 0 interface 0 has no altsetting 0
[  587.370352][ T5721] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  587.379918][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  587.388628][ T5721] usb 1-1: Product: syz
[  587.393536][ T5721] usb 1-1: Manufacturer: syz
[  587.398223][ T5721] usb 1-1: SerialNumber: syz
[  587.532733][ T5721] usb 1-1: config 0 descriptor??
[  587.547425][T11660] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  587.572561][ T5721] usb 1-1: selecting invalid altsetting 0
[  587.765540][T11657] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  588.554248][ T9841] usb 6-1: Service connection timeout for: 256
[  588.558605][    T9] usb 6-1: USB disconnect, device number 19
[  588.560447][ T9841] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  588.573991][ T9841] ath9k_htc: Failed to initialize the device
[  588.771017][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1401'.
[  588.821900][    T9] usb 6-1: ath9k_htc: USB layer deinitialized
[  588.841940][T11660] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  588.886240][T11678] netlink: 'syz.6.1402': attribute type 16 has an invalid length.
[  588.907750][T11678] netlink: 'syz.6.1402': attribute type 2 has an invalid length.
[  588.916839][T11678] netlink: 64102 bytes leftover after parsing attributes in process `syz.6.1402'.
[  589.061266][   T30] audit: type=1400 audit(2000000430.170:1061): avc:  denied  { write } for  pid=11681 comm="syz.1.1404" name="instances" dev="tracefs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  589.088297][   T30] audit: type=1400 audit(2000000430.170:1062): avc:  denied  { add_name } for  pid=11681 comm="syz.1.1404" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  589.111155][ T5703] cdc_ncm 4-1:1.1: bind() failure
[  589.116806][   T30] audit: type=1400 audit(2000000430.170:1063): avc:  denied  { create } for  pid=11681 comm="syz.1.1404" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1
[  589.135918][ T5703] usb 4-1: USB disconnect, device number 21
[  589.523128][ T9841] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  589.684637][ T9841] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  589.719100][ T9841] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  589.743991][ T9841] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.766713][ T9841] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  589.792541][ T9841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.806302][T11693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11693 comm=syz.3.1408
[  589.830190][ T9841] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  589.846985][ T9841] usb 2-1: invalid MIDI out EP 0
[  589.953993][T11660] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  589.971098][ T5799] usb 1-1: USB disconnect, device number 21
[  590.067706][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.094786][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.112304][ T9841] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  590.187006][T11204] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  590.256531][T10336] usb 2-1: USB disconnect, device number 20
[  590.403091][T11204] usb 7-1: Using ep0 maxpacket: 8
[  590.417669][T11204] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  590.435306][T11204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.459802][T11204] usb 7-1: Product: syz
[  590.466760][T11204] usb 7-1: Manufacturer: syz
[  590.471548][T11204] usb 7-1: SerialNumber: syz
[  590.486100][T11204] usb 7-1: config 0 descriptor??
[  590.728052][T11204] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  590.743108][ T5799] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  590.915339][ T5799] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  590.946449][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.975846][ T5799] usb 1-1: config 0 descriptor??
[  591.020901][ T5799] cp210x 1-1:0.0: cp210x converter detected
[  591.089975][T11718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.111095][T11718] syzkaller0: entered promiscuous mode
[  591.125719][T11718] syzkaller0: entered allmulticast mode
[  591.172976][T11718] tipc: Resetting bearer <eth:syzkaller0>
[  591.186072][T11717] tipc: Resetting bearer <eth:syzkaller0>
[  591.253243][T11717] tipc: Disabling bearer <eth:syzkaller0>
[  591.423537][ T5799] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  591.544394][T11204] usb write operation failed. (-71)
[  591.589872][T11204] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  591.632771][T11204] dvbdev: DVB: registering new adapter (Terratec H7)
[  591.649512][T11204] usb 7-1: media controller created
[  591.660625][T11204] usb read operation failed. (-71)
[  591.677664][T11204] usb write operation failed. (-71)
[  591.734332][T11204] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  591.779711][T11204] usb 7-1: USB disconnect, device number 15
[  591.838735][ T5799] usb 1-1: cp210x converter now attached to ttyUSB0
[  591.888980][ T5799] usb 1-1: USB disconnect, device number 22
[  591.931208][ T5799] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  591.989414][ T5799] cp210x 1-1:0.0: device disconnected
[  592.004072][T11736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11736 comm=syz.5.1422
[  592.723255][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  592.933617][    T9] usb 6-1: Using ep0 maxpacket: 32
[  592.949241][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  592.981611][    T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  592.993147][T10336] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  593.015785][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  593.040883][    T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  593.051186][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.059558][    T9] usb 6-1: Product: syz
[  593.068958][    T9] usb 6-1: Manufacturer: syz
[  593.074777][    T9] usb 6-1: SerialNumber: syz
[  593.088304][    T9] usb 6-1: config 0 descriptor??
[  593.292189][T10336] usb 1-1: Using ep0 maxpacket: 8
[  593.304032][T10336] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  593.328415][T10336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  593.367496][T10336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  593.395176][T10336] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.409899][T10336] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  593.419054][ T5799] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  593.436959][T10336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.541060][    T9] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  593.603139][ T5799] usb 7-1: Using ep0 maxpacket: 8
[  593.615714][ T5799] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  593.654163][ T5799] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  593.681041][ T5799] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  593.691847][ T5799] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  593.704559][T10336] usb 1-1: GET_CAPABILITIES returned 0
[  593.710161][T10336] usbtmc 1-1:16.0: can't read capabilities
[  593.716425][ T5799] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  593.737570][ T5799] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.752707][ T5799] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  593.764051][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.965979][    T9] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  594.008459][ T5799] usb 7-1: GET_CAPABILITIES returned 0
[  594.010060][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  594.014435][    T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22
[  594.031003][ T5799] usbtmc 7-1:16.0: can't read capabilities
[  594.060840][ T5703] usb 1-1: USB disconnect, device number 23
[  594.213088][ T5728] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  594.222491][T11204] usb 6-1: USB disconnect, device number 20
[  594.267941][ T5703] usb 7-1: USB disconnect, device number 16
[  594.364551][ T5728] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  594.382745][ T5728] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  594.393944][ T5728] usb 2-1: config 1 interface 0 has no altsetting 0
[  594.405379][ T5728] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  594.416588][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.424882][ T5728] usb 2-1: Product: syz
[  594.429191][ T5728] usb 2-1: Manufacturer: syz
[  594.434047][ T5728] usb 2-1: SerialNumber: syz
[  594.441736][T11777] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  594.449265][T11777] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  594.748149][T10868] Bluetooth: hci3: unexpected event for opcode 0x1407
[  594.764553][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  594.965219][    T9] usb 4-1: Using ep0 maxpacket: 8
[  595.059551][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.199529][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  595.220312][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.517457][    T9] usb 4-1: config 0 descriptor??
[  595.579460][ T5728] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:64:5b:07:7b:82
[  595.784610][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  595.793480][ T5728] rtl8150 2-1:1.0: eth9: rtl8150 is detected
[  595.805371][ T5728] usb 2-1: USB disconnect, device number 21
[  595.993019][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  596.783085][ T5703] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  596.943636][ T5703] usb 6-1: Using ep0 maxpacket: 8
[  596.959137][ T5703] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  596.984369][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  597.017557][ T5703] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  597.050161][    T9] gspca_vc032x: reg_w err -71
[  597.054941][    T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  597.081207][    T9] usb 4-1: USB disconnect, device number 22
[  597.096688][ T5703] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  597.135191][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  597.175311][ T5703] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  597.220294][ T5703] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  597.261058][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.535035][ T5703] usb 6-1: GET_CAPABILITIES returned 0
[  597.567413][ T5703] usbtmc 6-1:16.0: can't read capabilities
[  597.803622][ T9841] usb 6-1: USB disconnect, device number 21
[  597.818138][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1457'.
[  597.837529][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'.
[  597.851127][T11824] netlink: 'syz.6.1457': attribute type 12 has an invalid length.
[  597.903489][ T7064] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  597.955884][ T5703] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  597.971397][ T7064] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  598.073690][ T7064] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  598.188130][ T5703] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  598.295717][   T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  598.307151][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.346672][ T5703] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  598.356138][ T5703] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  598.366705][ T5703] usb 4-1: Manufacturer: syz
[  598.403773][ T5703] usb 4-1: config 0 descriptor??
[  598.493245][ T5703] rc_core: IR keymap rc-hauppauge not found
[  598.499953][ T5703] Registered IR keymap rc-empty
[  598.512353][ T5703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  598.527590][ T5703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19
[  598.651072][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.709391][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.783621][ T9841] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  598.933324][ T5703] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  598.954912][    C1] igorplugusb 4-1:0.0: receive overflow, at least 21 lost
[  598.962128][T11837] rc rc0: two consecutive events of type pulse
[  598.970468][ T9841] usb 2-1: unable to get BOS descriptor or descriptor too short
[  598.997776][ T9841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  599.021244][ T9841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  599.054032][ T9841] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  599.058119][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1465'.
[  599.063511][ T9841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.081351][ T9841] usb 2-1: Product: syz
[  599.092435][ T9841] usb 2-1: Manufacturer: syz
[  599.100328][ T9841] usb 2-1: SerialNumber: syz
[  599.137847][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.138559][   T30] audit: type=1400 audit(2000000440.250:1064): avc:  denied  { mount } for  pid=11847 comm="syz.6.1466" name="/" dev="autofs" ino=37443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  599.150097][ T9841] usb 2-1: selecting invalid altsetting 1
[  599.176883][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  599.189828][ T5703] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  599.209891][    T9] usb 4-1: USB disconnect, device number 23
[  599.212455][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.226371][ T9841] usb 2-1: unit 6 not found!
[  599.243701][   T30] audit: type=1400 audit(2000000440.350:1065): avc:  denied  { unmount } for  pid=7807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  599.270371][ T5703] usb 1-1: config 0 descriptor??
[  599.302862][ T5703] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  599.311102][ T5703] dvb-usb: bulk message failed: -22 (3/0)
[  599.353673][ T5703] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  599.374055][ T5703] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  599.381941][ T5703] usb 1-1: media controller created
[  599.483644][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  599.504365][ T5703] dvb-usb: bulk message failed: -22 (6/0)
[  599.513426][ T5703] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  599.525344][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20
[  599.962599][ T5703] dvb-usb: schedule remote query interval to 150 msecs.
[  599.987884][ T5703] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  600.022560][ T5703] usb 1-1: USB disconnect, device number 24
[  600.346419][ T9841] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  600.401989][ T5703] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  600.520908][ T9841] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  600.587097][ T9841] usb 2-1: USB disconnect, device number 22
[  600.709728][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.193092][ T8890] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  601.374692][ T8890] usb 6-1: Using ep0 maxpacket: 16
[  601.392147][ T8890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  601.393121][ T5703] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  601.404707][ T8890] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  601.420684][ T8890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.446420][ T8890] usb 6-1: config 0 descriptor??
[  601.563154][ T5703] usb 2-1: Using ep0 maxpacket: 32
[  601.572217][ T5703] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  601.588699][ T5703] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  601.599376][ T5703] usb 2-1: config 0 interface 0 has no altsetting 0
[  601.609427][ T5703] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  601.619016][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.628171][ T5703] usb 2-1: Product: syz
[  601.632774][ T5703] usb 2-1: Manufacturer: syz
[  601.637908][ T5703] usb 2-1: SerialNumber: syz
[  601.666132][ T5703] usb 2-1: config 0 descriptor??
[  601.683121][ T5728] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  601.843026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  601.905519][ T8890] hid_parser_main: 41 callbacks suppressed
[  601.905541][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  601.926618][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  601.934103][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  601.944809][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.042246][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.195891][ T5703] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  602.331331][ T5728] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  602.349082][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.359056][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  602.369777][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.376794][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.384769][ T5728] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  602.446556][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.753599][ T8890] apple 0003:05AC:027D.0004: unknown main item tag 0x0
[  602.766628][ T5728] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  602.803196][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  602.812591][ T8890] apple 0003:05AC:027D.0004: hidraw0: USB HID v7e.ff Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0
[  602.858650][ T5728] usb 7-1: Product: syz
[  602.872897][ T5728] usb 7-1: Manufacturer: syz
[  602.882496][ T8890] usb 6-1: USB disconnect, device number 22
[  602.888939][ T5728] usb 7-1: SerialNumber: syz
[  603.023943][T11901] fido_id[11901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  603.046845][    T9] usb 2-1: USB disconnect, device number 23
[  603.112561][ T5728] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  603.472443][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1486'.
[  603.612009][   T30] audit: type=1400 audit(2000000444.720:1066): avc:  denied  { write } for  pid=11903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  603.702396][   T30] audit: type=1400 audit(2000000444.810:1067): avc:  denied  { bind } for  pid=11924 comm="syz.1.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  603.733322][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  603.744478][T11925] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1489'.
[  603.813897][   T30] audit: type=1400 audit(2000000444.920:1068): avc:  denied  { write } for  pid=11926 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  603.906248][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  604.002522][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  604.030698][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  604.041580][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  604.112661][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  604.122833][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  604.133273][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  604.143333][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  604.533463][ T5721] usb 7-1: USB disconnect, device number 17
[  604.577959][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  604.592657][ T5721] usblp0: removed
[  604.626207][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  604.964598][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  605.011820][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[  605.092507][   T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  605.110030][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.181172][   T24] usb 4-1: Product: syz
[  605.199006][   T24] usb 4-1: Manufacturer: syz
[  605.213617][   T24] usb 4-1: SerialNumber: syz
[  605.244737][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.267056][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.298129][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.326024][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.357813][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.381835][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.411383][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.441317][T11916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  605.478406][   T24] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  605.510042][   T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7
[  605.550197][   T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5
[  605.600162][   T30] audit: type=1400 audit(2000000446.710:1069): avc:  denied  { write } for  pid=11931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  605.782072][   T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  605.820250][   T30] audit: type=1400 audit(2000000446.930:1070): avc:  denied  { write } for  pid=11959 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  605.874974][T11960] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  605.902723][   T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3
[  605.946211][   T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4
[  605.995007][   T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  606.043394][   T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  606.169106][   T24] usb 4-1: USB disconnect, device number 24
[  606.230936][   T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  606.271003][   T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  606.293103][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  606.302281][   T24] keyspan 4-1:1.0: device disconnected
[  606.453074][    T9] usb 1-1: Using ep0 maxpacket: 8
[  606.475407][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.486712][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  606.508456][    T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  606.595602][    T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  606.635530][    T9] usb 1-1: Product: syz
[  606.669449][    T9] usb 1-1: Manufacturer: syz
[  606.696871][    T9] usb 1-1: SerialNumber: syz
[  606.729017][    T9] usb 1-1: config 0 descriptor??
[  606.781405][    T9] imon_raw 1-1:0.0: IR endpoint missing
[  606.833328][   T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  606.859082][T11981] syzkaller1: entered promiscuous mode
[  606.869045][T11981] syzkaller1: entered allmulticast mode
[  606.978144][ T8890] usb 1-1: USB disconnect, device number 25
[  606.984485][T11984] binder_alloc: 11983: pid 11983 spamming oneway? 1 buffers allocated for a total size of 4096
[  607.019464][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  607.069694][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  607.098295][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  607.110118][T11985] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[  607.120150][   T24] usb 6-1: Product: syz
[  607.128736][   T24] usb 6-1: Manufacturer: syz
[  607.148122][   T24] usb 6-1: SerialNumber: syz
[  607.666331][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  607.694497][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  608.081640][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.122587][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  608.140042][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.153683][   T30] audit: type=1400 audit(2000000449.250:1071): avc:  denied  { bind } for  pid=12005 comm="syz.6.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  608.194351][    T9] usb 2-1: config 0 descriptor??
[  608.225882][    C1] usblp0: nonzero write bulk status received: -71
[  608.232795][T11204] usb 6-1: USB disconnect, device number 23
[  608.243520][T11204] usblp0: removed
[  608.273489][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  608.426868][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  608.439191][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  608.443303][   T24] usb 4-1: Using ep0 maxpacket: 8
[  608.456196][T12014] binder: BINDER_SET_CONTEXT_MGR already set
[  608.468014][   T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  608.481256][T12014] binder: 12012:12014 ioctl 4018620d 200000000300 returned -16
[  608.489497][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  608.503070][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  608.514890][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  608.527334][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  608.529404][    T9] usb 2-1: USB disconnect, device number 24
[  608.556727][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  608.566806][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.573624][ T5728] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  608.774905][ T5728] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.788282][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  608.799836][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  608.818337][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  608.818923][   T24] usb 4-1: usb_control_msg returned -32
[  608.849349][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  608.859493][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  608.862245][   T24] usbtmc 4-1:16.0: can't read capabilities
[  608.869420][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  608.886287][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  608.900048][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  608.910599][ T5728] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  608.926290][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  608.936745][ T5728] usb 7-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[  608.954422][ T5728] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  608.963980][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  608.971937][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.980517][ T5728] usb 7-1: Product: syz
[  608.984999][ T5728] usb 7-1: Manufacturer: syz
[  608.989691][ T5728] usb 7-1: SerialNumber: syz
[  608.997135][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.004661][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.011933][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.019773][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.029441][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.038096][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.046842][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.057211][T12011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  609.066609][ T5728] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  609.075743][ T5728] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7
[  609.085684][ T5728] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5
[  609.086822][   T24] usb 4-1: USB disconnect, device number 25
[  609.095411][ T5728] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  609.124371][    T9] usb 2-1: Using ep0 maxpacket: 32
[  609.131783][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.147276][ T5728] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3
[  609.157151][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  609.169857][ T5728] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4
[  609.178024][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.187388][ T5728] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  609.196517][    T9] usb 2-1: config 0 descriptor??
[  609.211777][    T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  609.222116][ T5728] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  609.243965][    T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  609.565919][   T24] usb 7-1: USB disconnect, device number 18
[  609.590227][   T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  609.616057][   T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  609.632957][   T30] audit: type=1326 audit(2000000450.740:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.1518" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f0179e019 code=0x0
[  609.664214][   T24] keyspan 7-1:1.0: device disconnected
[  609.684790][ T5728] usb 2-1: USB disconnect, device number 25
[  609.698014][ T5728] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  611.204906][T12044] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  611.295158][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'.
[  611.503742][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  611.713087][   T24] usb 1-1: Using ep0 maxpacket: 16
[  611.716789][   T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  611.716808][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.716818][   T24] usb 1-1: Product: syz
[  611.716827][   T24] usb 1-1: Manufacturer: syz
[  611.716836][   T24] usb 1-1: SerialNumber: syz
[  612.327372][T12068] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  612.444961][   T30] audit: type=1400 audit(2000000453.560:1073): avc:  denied  { ioctl } for  pid=12069 comm="syz.6.1536" path="socket:[39137]" dev="sockfs" ino=39137 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  612.624968][T12068] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  612.653516][T12068] overlayfs: failed to look up (tracing) for ino (-66)
[  613.273158][ T5728] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  613.339365][   T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  613.348959][T10868] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  613.356411][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  613.578432][   T24] usb 1-1: USB disconnect, device number 26
[  613.584434][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.584477][ T5728] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  613.584497][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.613457][ T5728] usb 2-1: config 0 descriptor??
[  613.729547][   T30] audit: type=1400 audit(2000000454.840:1074): avc:  denied  { write } for  pid=12078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.838646][   T30] audit: type=1400 audit(2000000454.950:1075): avc:  denied  { write } for  pid=12111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.859009][ T5728] usbhid 2-1:0.0: can't add hid device: -71
[  613.883243][    T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  613.897518][ T5728] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  613.932759][ T5728] usb 2-1: USB disconnect, device number 26
[  614.063329][    T9] usb 6-1: Using ep0 maxpacket: 8
[  614.099769][    T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  614.140268][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  614.200630][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  614.251033][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  614.269415][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  614.322700][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  614.385493][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.413614][ T5728] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  614.595353][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.615900][ T5728] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  614.660476][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.694535][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  614.707350][ T5728] usb 2-1: config 0 descriptor??
[  614.715310][    T9] usbtmc 6-1:16.0: can't read capabilities
[  614.956357][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  614.978890][ T8890] usb 6-1: USB disconnect, device number 24
[  615.024862][   T30] audit: type=1400 audit(2000000456.130:1076): avc:  denied  { write } for  pid=12123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.117896][   T30] audit: type=1400 audit(2000000456.190:1077): avc:  denied  { bind } for  pid=12142 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  615.275522][   T30] audit: type=1400 audit(2000000456.390:1078): avc:  denied  { write } for  pid=12147 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.576758][ T5728] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  615.784181][ T5728] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21
[  616.063162][T10868] Bluetooth: hci2: command 0x0406 tx timeout
[  616.063331][   T50] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  616.094421][   T30] audit: type=1400 audit(2000000457.210:1079): avc:  denied  { bind } for  pid=12168 comm="syz.6.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  616.145651][ T5721] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  616.157632][T12173] binder: BINDER_SET_CONTEXT_MGR already set
[  616.166982][T12173] binder: 12166:12173 ioctl 4018620d 200000000300 returned -16
[  616.176861][ T5703] usb 2-1: USB disconnect, device number 27
[  616.176940][    C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  616.323208][   T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  616.331074][ T5721] usb 6-1: Using ep0 maxpacket: 16
[  616.343665][   T30] audit: type=1400 audit(2000000457.460:1080): avc:  denied  { write } for  pid=12152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.345497][ T5721] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.409647][ T5721] usb 6-1: config 0 interface 0 has no altsetting 0
[  616.427451][ T5721] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  616.444254][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.468247][ T5721] usb 6-1: config 0 descriptor??
[  616.488434][   T30] audit: type=1400 audit(2000000457.600:1081): avc:  denied  { write } for  pid=12183 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.534142][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  616.554793][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.759200][   T30] audit: type=1400 audit(2000000457.870:1082): avc:  denied  { ioctl } for  pid=12194 comm="syz.1.1566" path="socket:[38526]" dev="sockfs" ino=38526 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  616.789702][   T24] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  616.917641][ T5721] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  617.552169][ T5721] usb 6-1: USB disconnect, device number 25
[  618.375754][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  618.375770][   T30] audit: type=1400 audit(2000000459.490:1086): avc:  denied  { write } for  pid=12211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.651474][   T30] audit: type=1400 audit(2000000459.760:1087): avc:  denied  { write } for  pid=12239 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.808099][T12249] binder_alloc: 12248: pid 12248 spamming oneway? 1 buffers allocated for a total size of 4096
[  618.949089][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  619.270750][   T50] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  619.273124][T10868] Bluetooth: hci2: command 0x0406 tx timeout
[  619.596267][   T30] audit: type=1400 audit(2000000460.710:1088): avc:  denied  { read append } for  pid=12271 comm="syz.3.1587" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  619.668788][   T30] audit: type=1400 audit(2000000460.710:1089): avc:  denied  { ioctl open } for  pid=12271 comm="syz.3.1587" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  619.863141][ T5728] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  619.953184][    T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  620.021683][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  620.035008][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.048118][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  620.070905][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  620.082647][ T5728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  620.103791][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  620.116905][    T9] usb 6-1: Using ep0 maxpacket: 8
[  620.123722][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  620.132127][    T9] usb 6-1: config 0 has no interface number 0
[  620.138988][ T5728] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  620.149894][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  620.161895][ T5728] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  620.170989][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  620.185767][ T5728] usb 4-1: Manufacturer: syz
[  620.191876][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  620.203851][ T5728] usb 4-1: config 0 descriptor??
[  620.211516][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  620.224755][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  620.235978][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.247067][    T9] usb 6-1: config 0 descriptor??
[  620.267922][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  620.493777][ T5728] rc_core: IR keymap rc-hauppauge not found
[  620.504581][ T5728] Registered IR keymap rc-empty
[  620.528315][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.573547][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.648746][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  620.700637][    T9] usb 6-1: USB disconnect, device number 26
[  620.706996][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  620.722970][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22
[  620.758739][T12290] ld_usb_open - error, can't find device for minor 0
[  620.770369][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.805988][T12276] ldusb: No device or device unplugged -19
[  620.805990][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  620.814127][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.878429][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.926933][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.983123][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.023323][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.031312][T12294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.053625][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.075015][T12294] syzkaller0: entered promiscuous mode
[  621.083762][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.103284][T12294] syzkaller0: entered allmulticast mode
[  621.118142][T12294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  621.127887][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.170228][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.206344][ T5728] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  621.233533][T12294] tipc: Resetting bearer <eth:syzkaller0>
[  621.245564][ T5728] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  621.266847][T12293] tipc: Resetting bearer <eth:syzkaller0>
[  621.298337][ T5728] usb 4-1: USB disconnect, device number 26
[  621.388992][T12293] tipc: Disabling bearer <eth:syzkaller0>
[  622.076993][   T30] audit: type=1400 audit(2000000463.190:1090): avc:  denied  { write } for  pid=12314 comm="syz.1.1601" name="functions" dev="configfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  622.320164][   T24] usb 1-1: USB disconnect, device number 27
[  622.790186][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  622.814123][ T5721] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  622.983071][   T24] usb 1-1: Using ep0 maxpacket: 8
[  622.995211][ T5721] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  623.010490][   T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  623.021157][ T5721] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  623.032041][   T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  623.042119][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.052093][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  623.052608][ T5721] usb 2-1: Product: syz
[  623.068660][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  623.079950][   T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.095352][ T5721] usb 2-1: Manufacturer: syz
[  623.100393][ T5721] usb 2-1: SerialNumber: syz
[  623.107009][   T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  623.126346][ T5721] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  623.135517][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.400879][   T24] usb 1-1: GET_CAPABILITIES returned 0
[  623.416317][   T24] usbtmc 1-1:16.0: can't read capabilities
[  623.637996][T11204] usb 1-1: USB disconnect, device number 28
[  623.704030][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  623.772466][ T5721] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  623.784517][ T5721] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  623.792798][ T5721] usb 2-1: media controller created
[  623.798244][ T5703] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  623.818898][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  623.883204][   T24] usb 6-1: Using ep0 maxpacket: 16
[  623.942457][   T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.991155][ T5703] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  624.014437][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  624.030357][ T5703] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  624.050898][   T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  624.069278][ T5703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  624.091959][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.121773][ T5703] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.214213][   T24] usb 6-1: config 0 descriptor??
[  624.235257][ T5703] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  624.321791][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  624.388295][ T5703] usb 7-1: Product: syz
[  624.407166][ T5703] usb 7-1: Manufacturer: syz
[  624.414875][ T5721] usb 2-1: USB disconnect, device number 28
[  624.444382][ T5703] cdc_wdm 7-1:1.0: skipping garbage
[  624.465104][ T5703] cdc_wdm 7-1:1.0: skipping garbage
[  624.492731][ T5703] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  624.500370][ T5703] cdc_wdm 7-1:1.0: Unknown control protocol
[  624.557773][T12351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1614'.
[  624.710102][T12355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  624.712702][ T5721] usb 7-1: USB disconnect, device number 19
[  624.825183][   T24] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  625.076980][ T5728] usb 6-1: USB disconnect, device number 27
[  625.213130][ T5721] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  625.374626][ T5721] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  625.385165][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  625.406932][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  625.422363][ T5721] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.447304][ T5721] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  625.457831][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  625.475486][ T5721] usb 7-1: Product: syz
[  625.479768][ T5721] usb 7-1: Manufacturer: syz
[  625.578356][ T5721] cdc_wdm 7-1:1.0: skipping garbage
[  625.586216][ T5721] cdc_wdm 7-1:1.0: skipping garbage
[  625.641522][ T5721] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  625.677813][ T5721] cdc_wdm 7-1:1.0: Unknown control protocol
[  625.713434][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  625.873896][   T24] usb 4-1: Using ep0 maxpacket: 32
[  625.905077][   T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  625.937949][   T24] usb 4-1: config 0 has no interface number 0
[  625.962103][   T30] audit: type=1400 audit(2000000467.070:1091): avc:  denied  { read write } for  pid=12337 comm="syz.6.1610" name="cdc-wdm0" dev="devtmpfs" ino=3357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  625.995950][   T24] usb 4-1: config 0 interface 184 has no altsetting 0
[  626.026077][   T30] audit: type=1400 audit(2000000467.070:1092): avc:  denied  { open } for  pid=12337 comm="syz.6.1610" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  626.061107][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  626.071104][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.072180][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  626.085948][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  626.096932][   T24] usb 4-1: Product: syz
[  626.097008][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  626.101236][   T24] usb 4-1: Manufacturer: syz
[  626.107719][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  626.109059][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  626.120372][   T24] usb 4-1: SerialNumber: syz
[  626.125254][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  626.125814][ T5728] usb 7-1: USB disconnect, device number 20
[  626.130176][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  626.130194][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  626.130208][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  626.173134][   T24] usb 4-1: config 0 descriptor??
[  626.266005][T12391] JFS: discard option not supported on device
[  626.273862][T12391] Mount JFS Failure: -5
[  626.281030][T12391] jfs_mount failed w/return code = -5
[  627.030839][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  627.068707][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  627.693519][T12414] kvm: kvm [12413]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  627.711276][T12414] kvm: kvm [12413]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  627.884444][   T30] audit: type=1400 audit(2000000469.000:1093): avc:  denied  { append } for  pid=12418 comm="syz.0.1634" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  627.917320][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  627.930495][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  627.941314][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  627.951531][   T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  627.961689][   T30] audit: type=1400 audit(2000000469.070:1094): avc:  denied  { bpf } for  pid=12416 comm="syz.5.1633" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  627.986061][   T24] usb 4-1: USB disconnect, device number 27
[  628.027943][   T30] audit: type=1400 audit(2000000469.070:1095): avc:  denied  { read } for  pid=12416 comm="syz.5.1633" path="socket:[41164]" dev="sockfs" ino=41164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  628.664637][   T30] audit: type=1400 audit(2000000469.770:1096): avc:  denied  { accept } for  pid=12431 comm="syz.5.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  629.377061][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  629.702229][    T9] usb 4-1: Using ep0 maxpacket: 16
[  629.783601][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  629.830067][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  629.856047][T12454] binder: 12453:12454 ioctl c0306201 200000000080 returned -14
[  629.865505][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  629.882860][T12454] binder: 12453:12454 ioctl c0306201 2000000003c0 returned -14
[  629.896928][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  629.930468][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.969141][   T30] audit: type=1400 audit(2000000471.070:1097): avc:  denied  { perfmon } for  pid=12455 comm="syz.0.1648" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  630.010746][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  630.031053][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  630.057668][    T9] usb 4-1: Manufacturer: syz
[  630.328348][    T9] usb 4-1: config 0 descriptor??
[  630.479090][T12466] xt_hashlimit: size too large, truncated to 1048576
[  630.583090][ T8890] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  630.640837][T12475] netlink: 'syz.1.1654': attribute type 4 has an invalid length.
[  630.673047][    T9] rc_core: IR keymap rc-hauppauge not found
[  630.685189][    T9] Registered IR keymap rc-empty
[  630.710403][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.727210][ T5728] lo speed is unknown, defaulting to 1000
[  630.735897][T12475] netlink: 'syz.1.1654': attribute type 4 has an invalid length.
[  630.745669][ T5728] syz0: Port: 1 Link DOWN
[  630.754721][ T8890] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024
[  630.766509][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.767385][ T5703] lo speed is unknown, defaulting to 1000
[  630.788376][ T8890] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  630.812762][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  630.816777][ T5703] syz0: Port: 1 Link ACTIVE
[  630.830962][ T8890] usb 1-1: config 1 interface 0 has no altsetting 0
[  630.846281][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23
[  630.873929][ T8890] usb 1-1: string descriptor 0 read error: -22
[  630.890350][ T8890] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  630.917707][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.928975][ T8890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.070609][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.148227][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.226049][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.313174][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.347570][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.383148][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.423810][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.469093][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.548037][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.593124][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  631.638661][    T9] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  631.663828][    T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  631.692320][ T8890] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  631.723905][    T9] usb 4-1: USB disconnect, device number 28
[  631.782384][ T8890] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0007/input/input24
[  632.723910][ T8890] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  632.760137][ T8890] usb 1-1: USB disconnect, device number 29
[  632.963959][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  632.975407][T12512] fido_id[12512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  633.173271][   T24] usb 6-1: Using ep0 maxpacket: 32
[  633.189679][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  633.212830][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  633.226172][   T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  633.272779][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.455099][   T24] usb 6-1: config 0 descriptor??
[  633.821916][   T30] audit: type=1400 audit(2000000474.930:1098): avc:  denied  { transfer } for  pid=12527 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  633.841503][T10868] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  633.847948][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  633.928144][   T24] hid_parser_main: 469 callbacks suppressed
[  633.928174][   T24] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  633.941390][   T24] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  633.973813][ T5728] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  634.033173][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  634.124378][ T5728] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  634.128268][   T24] ft260 0003:0403:6030.0008: chip code: 0000 0000
[  634.133453][ T5728] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  634.133476][ T5728] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  634.160578][ T5728] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.173159][ T8890] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  634.181126][ T5728] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  634.190510][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  634.204218][    T9] usb 4-1: Using ep0 maxpacket: 8
[  634.211822][ T5728] usb 7-1: Product: syz
[  634.222021][ T5728] usb 7-1: Manufacturer: syz
[  634.229300][    T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  634.238161][    T9] usb 4-1: config 0 has no interface number 0
[  634.245254][    T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  634.256137][    T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  634.269149][ T5728] cdc_wdm 7-1:1.0: skipping garbage
[  634.274818][ T5728] cdc_wdm 7-1:1.0: skipping garbage
[  634.280037][    T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  634.292123][    T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  634.307235][ T5728] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  634.314132][ T5728] cdc_wdm 7-1:1.0: Unknown control protocol
[  634.321954][    T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  634.329698][   T24] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  634.332268][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.354452][    T9] usb 4-1: config 0 descriptor??
[  634.363074][ T8890] usb 1-1: Using ep0 maxpacket: 16
[  634.370851][    T9] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  634.379213][ T5799] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  634.388913][ T8890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.402949][ T8890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  634.414846][ T8890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  634.424647][ T8890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  634.434338][ T8890] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  634.448374][ T8890] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  634.457969][ T8890] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  634.467156][ T8890] usb 1-1: Manufacturer: syz
[  634.485593][ T8890] usb 1-1: config 0 descriptor??
[  634.510286][ T5744] usb 7-1: USB disconnect, device number 21
[  634.530864][   T24] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup
[  634.543267][ T5799] usb 2-1: Invalid ep0 maxpacket: 16
[  634.603092][   T24] usb 4-1: USB disconnect, device number 29
[  634.621433][   T24] ldusb 4-1:0.55: LD USB Device #1 now disconnected
[  634.683485][ T5799] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[  634.817246][   T30] audit: type=1400 audit(2000000475.930:1099): avc:  denied  { read } for  pid=12538 comm="syz.3.1676" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  635.024663][ T5744] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  635.165331][T12508] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x3f43, size 0, write)
[  635.196628][ T5799] usb 2-1: Invalid ep0 maxpacket: 16
[  635.261039][ T5744] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  635.306071][ T5744] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.340205][ T5744] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  635.381379][ T5744] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.403658][ T5744] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  635.416300][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  635.429976][ T5744] usb 7-1: Product: syz
[  635.439122][ T5744] usb 7-1: Manufacturer: syz
[  635.542178][ T5744] cdc_wdm 7-1:1.0: skipping garbage
[  635.548529][ T5744] cdc_wdm 7-1:1.0: skipping garbage
[  635.568424][ T5744] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  635.576828][ T5744] cdc_wdm 7-1:1.0: Unknown control protocol
[  635.787678][T12540] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  635.788205][ T5799] usb usb2-port1: attempt power cycle
[  635.799669][ T8890] rc_core: IR keymap rc-hauppauge not found
[  635.807885][ T8890] Registered IR keymap rc-empty
[  635.813292][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  635.828569][T12540] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  635.833221][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  635.874737][ T8890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  635.892193][ T8890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25
[  635.906680][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  635.922897][   T50] Bluetooth: hci2: Opcode 0x0401 failed: -112
[  635.935281][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  635.942494][T12540] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  635.961182][T12540] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  635.963263][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  635.993153][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.011188][T12540] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  636.013234][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.033216][T12540] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  636.043260][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.050287][T12540] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  636.058469][T12540] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  636.073190][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.083056][T11204] usb 6-1: USB disconnect, device number 28
[  636.099239][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.123118][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.146143][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.153182][ T5799] usb 2-1: new low-speed USB device number 31 using dummy_hcd
[  636.176806][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  636.196226][ T5799] usb 2-1: Invalid ep0 maxpacket: 16
[  636.224245][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.232672][ T8890] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  636.248562][ T8890] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  636.288458][ T8890] usb 1-1: USB disconnect, device number 30
[  636.338401][ T5799] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  636.514974][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.521625][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.528167][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.534852][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.541193][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.547782][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.554210][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.560798][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.567566][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.574162][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.580613][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.587204][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.593495][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.594334][ T5799] usb 2-1: Invalid ep0 maxpacket: 16
[  636.600093][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.600311][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.607074][ T5799] usb usb2-port1: unable to enumerate USB device
[  636.611542][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.613054][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  636.637081][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  636.652865][T11204] usb 7-1: USB disconnect, device number 22
[  636.943073][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  637.023079][ T8890] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  637.174455][ T8890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.192470][ T8890] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  637.202269][ T8890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.212636][ T8890] usb 6-1: config 0 descriptor??
[  637.456550][ T8890] usbhid 6-1:0.0: can't add hid device: -71
[  637.463621][ T8890] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  637.499332][ T8890] usb 6-1: USB disconnect, device number 29
[  637.983132][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  638.063070][T10868] Bluetooth: hci0: command 0x0406 tx timeout
[  638.069265][T10093] Bluetooth: hci3: command 0x0406 tx timeout
[  638.082147][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  638.142601][T12540] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  638.457672][T12567] xt_NFQUEUE: number of total queues is 0
[  638.811972][   T30] audit: type=1400 audit(2000000479.920:1100): avc:  denied  { audit_write } for  pid=12568 comm="syz.6.1684" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  638.979370][ T8890] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  639.030034][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  639.174411][   T30] audit: type=1400 audit(2000000480.210:1101): avc:  denied  { bind } for  pid=12573 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  639.252521][   T30] audit: type=1400 audit(2000000480.360:1102): avc:  denied  { listen } for  pid=12573 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  639.459060][ T8890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.495454][ T8890] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  639.510710][ T8890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.531792][ T8890] usb 6-1: config 0 descriptor??
[  639.803149][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  640.003088][ T5799] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  640.014648][    T9] usb 2-1: Using ep0 maxpacket: 32
[  640.029603][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  640.056820][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  640.075679][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  640.091809][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  640.107165][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  640.118782][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  640.131429][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  640.147821][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  640.153755][T10868] Bluetooth: hci0: command 0x0406 tx timeout
[  640.159517][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  640.169745][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.189507][ T5799] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  640.199906][    T9] usb 2-1: config 0 descriptor??
[  640.205213][ T5799] usb 7-1: config 0 interface 0 has no altsetting 0
[  640.221509][ T5799] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  640.230889][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  640.240201][ T5799] usb 7-1: Product: syz
[  640.245052][ T5799] usb 7-1: Manufacturer: syz
[  640.250865][ T5799] usb 7-1: SerialNumber: syz
[  640.269062][ T5799] usb 7-1: config 0 descriptor??
[  640.279670][ T5799] usb 7-1: selecting invalid altsetting 0
[  640.323113][ T5703] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  640.369572][T12598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.377128][ T8890] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  640.399120][ T8890] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26
[  640.423979][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  640.427625][T12598] syzkaller0: entered promiscuous mode
[  640.441166][T12598] syzkaller0: entered allmulticast mode
[  640.454946][T12598] tipc: Resetting bearer <eth:syzkaller0>
[  640.493564][ T5703] usb 4-1: Using ep0 maxpacket: 16
[  640.520425][ T5703] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  640.563119][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  640.594603][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  640.595250][ T8890] usb 7-1: USB disconnect, device number 23
[  640.617402][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  640.649961][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  640.669985][   T24] usb 2-1: USB disconnect, device number 33
[  640.684597][   T24] usblp0: removed
[  640.695801][ T5703] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  640.721321][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.753263][ T5703] usb 4-1: config 0 descriptor??
[  640.773866][T12593] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  640.793873][   T48] tipc: Resetting bearer <eth:syzkaller0>
[  640.802357][ T5703] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27
[  640.819752][T11204] usb 6-1: USB disconnect, device number 30
[  640.819771][    C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  640.880886][T12597] tipc: Resetting bearer <eth:syzkaller0>
[  641.072555][ T8890] usb 4-1: USB disconnect, device number 30
[  645.044440][T12597] tipc: Disabling bearer <eth:syzkaller0>
[  645.052372][ T8890] tipc: Node number set to 856035567
[  645.065222][T12608] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  645.290453][T12628] syzkaller0: entered promiscuous mode
[  645.345485][T12628] syzkaller0: entered allmulticast mode
[  645.563806][ T8890] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  645.649633][   T30] audit: type=1800 audit(2000000486.760:1103): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1707" name="bus" dev="tmpfs" ino=1400 res=0 errno=0
[  645.723531][ T8890] usb 1-1: Using ep0 maxpacket: 32
[  645.843118][ T8890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  645.852695][ T8890] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  645.862185][ T8890] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  645.870817][ T8890] usb 1-1: config 14 has no interface number 0
[  645.877180][ T8890] usb 1-1: config 14 has no interface number 1
[  645.884259][ T8890] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  645.896673][ T8890] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  645.910076][ T8890] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  645.931876][ T8890] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  645.951822][ T8890] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  645.968137][ T8890] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  645.982119][ T8890] usb 1-1: config 14 interface 57 has no altsetting 0
[  645.989795][ T8890] usb 1-1: config 14 interface 228 has no altsetting 0
[  645.999204][ T8890] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  646.008965][ T8890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.030021][ T8890] usb 1-1: Product: syz
[  646.691430][ T8890] usb 1-1: Manufacturer: syz
[  646.748425][ T8890] usb 1-1: SerialNumber: syz
[  647.755272][ T8890] legousbtower 1-1:14.57: interrupt endpoints not found
[  648.229433][ T8890] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  648.289284][ T8890] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  648.353338][T11204] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  648.503126][T11204] usb 4-1: Using ep0 maxpacket: 8
[  648.514323][T11204] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  648.522562][T11204] usb 4-1: config 0 has no interface number 0
[  648.528743][T11204] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  648.539785][T11204] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  648.552092][T11204] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  648.563380][T11204] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  648.577290][T11204] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  648.587891][T11204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.598822][T11204] usb 4-1: config 0 descriptor??
[  648.609559][T11204] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  648.704650][ T5703] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  648.863568][ T5703] usb 2-1: Using ep0 maxpacket: 8
[  648.869932][   T30] audit: type=1400 audit(2000000489.980:1104): avc:  denied  { map } for  pid=12674 comm="syz.3.1716" path="socket:[41781]" dev="sockfs" ino=41781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  648.904212][   T30] audit: type=1400 audit(2000000489.980:1105): avc:  denied  { read } for  pid=12674 comm="syz.3.1716" path="socket:[41781]" dev="sockfs" ino=41781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  648.932518][T11204] usb 1-1: USB disconnect, device number 31
[  648.932600][    C0] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  648.952873][ T5703] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  648.972669][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.991147][ T5703] usb 2-1: Product: syz
[  649.007590][ T5703] usb 2-1: Manufacturer: syz
[  649.056697][ T5703] usb 2-1: SerialNumber: syz
[  649.069532][T11204] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected
[  649.206392][ T5703] usb 2-1: config 0 descriptor??
[  649.519128][ T5703] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  650.368122][ T5703] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  650.876032][ T5703] usb 2-1: USB disconnect, device number 34
[  651.436319][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1724'.
[  651.473893][ T5703] usb 4-1: USB disconnect, device number 31
[  651.501337][ T5703] ldusb 4-1:0.55: LD USB Device #1 now disconnected
[  651.854468][ T8890] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  651.922903][T12730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  652.033121][ T8890] usb 1-1: Using ep0 maxpacket: 16
[  652.042170][ T8890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  652.056615][ T8890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  652.069345][ T8890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  652.084200][ T8890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  652.094143][ T5728] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  652.106736][ T8890] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  652.121984][ T8890] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  652.301313][ T8890] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  652.314019][ T8890] usb 1-1: Manufacturer: syz
[  652.320244][ T8890] usb 1-1: config 0 descriptor??
[  653.150722][   T50] Bluetooth: hci1: unexpected event for opcode 0x1408
[  653.321781][ T5728] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  653.337158][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.415330][T11204] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  653.555139][ T5728] usb 2-1: Product: syz
[  653.559383][ T5728] usb 2-1: Manufacturer: syz
[  653.564678][ T5728] usb 2-1: SerialNumber: syz
[  653.660234][ T5728] usb 2-1: config 0 descriptor??
[  653.917399][T11204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.073153][ T5728] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  654.273203][ T8890] rc_core: IR keymap rc-hauppauge not found
[  654.317895][ T8890] Registered IR keymap rc-empty
[  654.364311][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  654.464312][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  654.614917][ T8890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  654.676558][T11204] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  654.698606][T11204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.748257][T11204] usb 7-1: config 0 descriptor??
[  654.755629][ T8890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28
[  654.937427][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  654.968576][T11204] usbhid 7-1:0.0: can't add hid device: -71
[  654.973117][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.018873][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.056212][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.084450][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.108208][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.136073][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.178202][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.324576][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.467415][ T8890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  655.852509][ T8890] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  655.872409][ T8890] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  655.911380][ T5728] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  655.930443][ T5728] usb 2-1: USB disconnect, device number 35
[  655.943158][T11204] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  655.948098][ T8890] usb 1-1: USB disconnect, device number 32
[  655.953650][T11204] usb 7-1: USB disconnect, device number 24
[  656.213190][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  656.384768][    T9] usb 6-1: Using ep0 maxpacket: 8
[  656.395910][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  656.413133][    T9] usb 6-1: config 0 has no interface number 0
[  656.421073][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  656.424340][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'.
[  656.444473][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  656.456413][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  656.472526][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  656.509418][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  656.535021][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.554278][    T9] usb 6-1: config 0 descriptor??
[  656.566235][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  656.657768][ T8890] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  656.873816][ T8890] usb 1-1: Using ep0 maxpacket: 32
[  657.010618][ T8890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  657.121783][ T8890] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  657.140287][ T8890] usb 1-1: config 0 interface 0 has no altsetting 0
[  657.257345][ T8890] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  657.273635][ T8890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.290545][ T8890] usb 1-1: Product: syz
[  657.306046][ T8890] usb 1-1: Manufacturer: syz
[  657.319616][ T8890] usb 1-1: SerialNumber: syz
[  657.688281][ T8890] usb 1-1: config 0 descriptor??
[  657.846330][ T8890] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  657.853802][ T8890] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  657.910860][ T8890] usb 1-1: USB disconnect, device number 33
[  661.418382][ T8890] usb 6-1: USB disconnect, device number 31
[  661.456478][ T8890] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  661.685019][T12822] overlayfs: overlapping lowerdir path
[  662.747171][ T5744] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  662.866519][ T5744] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  663.477154][ T5744] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  663.562306][T12824] ADFS-fs (nbd3): error: unable to read block 3, try 0
[  664.174787][T12842] fido_id[12842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  664.415353][T12853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  664.469936][T12853] syzkaller0: entered promiscuous mode
[  664.506690][T12853] syzkaller0: entered allmulticast mode
[  664.563006][   T30] audit: type=1400 audit(2000000505.630:1106): avc:  denied  { module_load } for  pid=12854 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  664.930571][T12853] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  665.302372][T12867] netlink: 'syz.5.1768': attribute type 10 has an invalid length.
[  665.435655][T12866] tipc: Resetting bearer <eth:syzkaller0>
[  665.449120][T12852] tipc: Resetting bearer <eth:syzkaller0>
[  665.483928][T12852] tipc: Disabling bearer <eth:syzkaller0>
[  665.678398][    T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  665.742309][T12881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12881 comm=syz.3.1770
[  665.866463][    T9] usb 6-1: Using ep0 maxpacket: 16
[  665.882529][    T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  665.892585][    T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  665.905799][    T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  665.932867][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  665.958708][    T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  665.968913][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.981107][    T9] usb 6-1: Product: syz
[  665.993102][    T9] usb 6-1: Manufacturer: syz
[  666.006222][    T9] usb 6-1: SerialNumber: syz
[  666.019976][    T9] usb 6-1: config 0 descriptor??
[  666.407756][    T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29
[  666.430095][T12885] netlink: 868 bytes leftover after parsing attributes in process `syz.1.1773'.
[  666.975653][   T30] audit: type=1400 audit(2000000508.070:1107): avc:  denied  { write } for  pid=12864 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  666.986937][ T4963] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  667.706428][ T4963] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  667.733495][    T9] usb 6-1: USB disconnect, device number 32
[  669.630480][T12912] syzkaller0: entered promiscuous mode
[  669.646358][T12912] syzkaller0: entered allmulticast mode
[  670.343287][ T5728] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  670.370742][   T30] audit: type=1400 audit(2000000511.480:1108): avc:  denied  { append } for  pid=12925 comm="syz.5.1784" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  670.526360][T12927] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  670.533247][ T5728] usb 4-1: Using ep0 maxpacket: 32
[  670.694013][ T5728] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  670.723493][T12927] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  671.712838][T12927] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  671.724319][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.743629][T12927] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  672.297120][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  672.321914][ T5728] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  672.334163][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.353980][T12927] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  672.366569][ T5728] usb 4-1: config 0 descriptor??
[  672.417179][ T5728] usb 4-1: can't set config #0, error -71
[  672.434603][ T5728] usb 4-1: USB disconnect, device number 32
[  672.553293][T10868] Bluetooth: hci1: command 0x0406 tx timeout
[  672.794542][T10868] Bluetooth: hci2: command 0x0406 tx timeout
[  672.809661][T12949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12949 comm=syz.6.1788
[  673.399116][T12925] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  673.711756][T12967] dummy_hcd dummy_hcd.0: remove, state 4
[  673.718071][T12967] usb usb1: USB disconnect, device number 1
[  673.743765][T10868] Bluetooth: hci3: command 0x0406 tx timeout
[  673.893184][T10868] Bluetooth: hci0: command 0x0406 tx timeout
[  674.309013][T12967] dummy_hcd dummy_hcd.0: stopped
[  674.315933][T12967] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  674.383600][T10868] Bluetooth: hci5: command 0x0406 tx timeout
[  675.903284][T10868] Bluetooth: hci0: command 0x0406 tx timeout
[  676.360096][   T30] audit: type=1400 audit(2000000517.470:1109): avc:  denied  { write } for  pid=12988 comm="syz.5.1800" name="functions" dev="configfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  676.462514][   T30] audit: type=1400 audit(2000000517.550:1110): avc:  denied  { write } for  pid=12988 comm="syz.5.1800" name="c.1" dev="configfs" ino=23705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  676.476149][T12989] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[  676.497002][T12989] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  676.505406][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.5.1800 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  676.516329][T12989] Tainted: [L]=SOFTLOCKUP
[  676.520628][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  676.530653][T12989] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0
[  676.536631][T12989] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 5d 1e 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
[  676.556217][T12989] RSP: 0018:ffffc9000f4678e0 EFLAGS: 00010246
[  676.562258][T12989] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003769000
[  676.570200][T12989] RDX: 0000000000000000 RSI: ffffffff87d04383 RDI: ffff888028825290
[  676.578143][T12989] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005
[  676.586090][T12989] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003
[  676.594032][T12989] R13: ffff888028824068 R14: ffff888028824c58 R15: ffff8880789e9d10
[  676.601985][T12989] FS:  00007f37c09986c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
[  676.610896][T12989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  676.617461][T12989] CR2: 0000001b2f909ff8 CR3: 0000000057dfb000 CR4: 00000000003526f0
[  676.625676][T12989] Call Trace:
[  676.628937][T12989]  <TASK>
[  676.631851][T12989]  ? __pfx_dummy_set_selfpowered+0x10/0x10
[  676.637646][T12989]  usb_gadget_set_selfpowered+0x73/0x2b0
[  676.643271][T12989]  composite_dev_prepare+0x254/0x420
[  676.648537][T12989]  configfs_composite_bind+0xd2/0x1960
[  676.653970][T12989]  ? kernfs_create_link+0x1bd/0x240
[  676.659154][T12989]  gadget_bind_driver+0x28c/0xbf0
[  676.664151][T12989]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  676.669768][T12989]  ? __pfx_gadget_bind_driver+0x10/0x10
[  676.675284][T12989]  really_probe+0x241/0xa60
[  676.679774][T12989]  __driver_probe_device+0x20e/0x450
[  676.685043][T12989]  driver_probe_device+0x4a/0x140
[  676.690040][T12989]  __driver_attach+0x21f/0x5b0
[  676.694787][T12989]  ? __pfx___driver_attach+0x10/0x10
[  676.700051][T12989]  bus_for_each_dev+0x13e/0x1d0
[  676.704872][T12989]  ? __pfx_bus_for_each_dev+0x10/0x10
[  676.710228][T12989]  ? bus_add_driver+0x2b5/0x5b0
[  676.715050][T12989]  bus_add_driver+0x305/0x5b0
[  676.719711][T12989]  driver_register+0x1e2/0x360
[  676.724449][T12989]  usb_gadget_register_driver_owner+0x132/0x210
[  676.730668][T12989]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  676.736272][T12989]  configfs_write_iter+0x302/0x4e0
[  676.741356][T12989]  vfs_write+0x6ac/0x1050
[  676.745660][T12989]  ? __pfx_configfs_write_iter+0x10/0x10
[  676.751264][T12989]  ? __pfx_vfs_write+0x10/0x10
[  676.756018][T12989]  ksys_write+0x12a/0x250
[  676.760324][T12989]  ? __pfx_ksys_write+0x10/0x10
[  676.765152][T12989]  do_syscall_64+0x115/0x870
[  676.769722][T12989]  ? clear_bhb_loop+0x40/0x90
[  676.774370][T12989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.780242][T12989] RIP: 0033:0x7f37bfb9e019
[  676.784637][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.804222][T12989] RSP: 002b:00007f37c0998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  676.812617][T12989] RAX: ffffffffffffffda RBX: 00007f37bfe25fa0 RCX: 00007f37bfb9e019
[  676.820560][T12989] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 0000000000000006
[  676.828511][T12989] RBP: 00007f37bfc3500c R08: 0000000000000000 R09: 0000000000000000
[  676.836463][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  676.844404][T12989] R13: 00007f37bfe26038 R14: 00007f37bfe25fa0 R15: 00007ffcc740f648
[  676.852350][T12989]  </TASK>
[  676.855343][T12989] Modules linked in:
[  676.859702][T12989] ---[ end trace 0000000000000000 ]---
[  677.016849][   T30] audit: type=1400 audit(2000000517.550:1111): avc:  denied  { write } for  pid=12988 comm="syz.5.1800" name="c.1" dev="configfs" ino=23705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  677.089583][   T30] audit: type=1400 audit(2000000518.050:1112): avc:  denied  { read } for  pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  677.113131][   T30] audit: type=1400 audit(2000000518.050:1113): avc:  denied  { search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  677.135482][   T30] audit: type=1400 audit(2000000518.050:1114): avc:  denied  { write search } for  pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  677.451680][   T30] audit: type=1400 audit(2000000518.050:1115): avc:  denied  { add_name } for  pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  677.472578][   T30] audit: type=1400 audit(2000000518.050:1116): avc:  denied  { create } for  pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  677.496221][   T30] audit: type=1400 audit(2000000518.050:1117): avc:  denied  { append open } for  pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  677.522142][   T30] audit: type=1400 audit(2000000518.050:1118): avc:  denied  { getattr } for  pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  677.546735][T12989] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0
[  677.573524][T12989] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 5d 1e 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
[  677.594095][T12989] RSP: 0018:ffffc9000f4678e0 EFLAGS: 00010246
[  677.600197][T12989] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003769000
[  677.608339][T12989] RDX: 0000000000000000 RSI: ffffffff87d04383 RDI: ffff888028825290
[  677.618289][T12989] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005
[  677.626875][T12989] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003
[  677.635028][T12989] R13: ffff888028824068 R14: ffff888028824c58 R15: ffff8880789e9d10
[  677.643215][T12989] FS:  00007f37c09986c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000
[  677.652194][T12989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  677.658977][T12989] CR2: 0000001b33403ff8 CR3: 0000000057dfb000 CR4: 00000000003526f0
[  677.678020][T12989] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004
[  677.695005][T12989] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  677.711897][T12989] Kernel panic - not syncing: Fatal exception
[  677.718194][T12989] Kernel Offset: disabled
[  677.722499][T12989] Rebooting in 86400 seconds..