last executing test programs:

17.972484984s ago: executing program 1 (id=313):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000180)={0x0, 0x7, 0x1d, {0x1d, 0x11, "8520b6d00da5b33168e395421040e2c347fe64fbd0fe478ee45f5d"}}, &(0x7f0000000280)={0x0, 0x3, 0x74, @string={0x74, 0x3, "2b000e5a9eed6cc94694c521478d3aad94cad29e21db012ce32dbb0a295765bbc44520c10723f999a25199e3434d5426267cec704d35c75560bacca0e32a35fcd8b4f7e2bba386fec044d3f1e9459ff58b5719df2a8a698d6a51333977052be717585cd4ba1942cc663d22510140b19bc44b"}}, &(0x7f00000001c0)={0x0, 0x22, 0x9, {[@local=@item_4={0x3, 0x2, 0x0, "b075510d"}, @main=@item_012={0x0, 0x0, 0xb}, @local, @main=@item_012={0x1, 0x0, 0x8, "be"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0xea0}}}}, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4a}, &(0x7f0000000740), &(0x7f0000000840)={0x20, 0x3, 0x1, 0xd}})
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x10f242)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pK    \x00'}, 0x20)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000080)={0x0, 0x3, [0x2e9, 0x567, 0x865, 0x5f5]})
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xc, 0x4, 0x0, [], [0xa7200], 0x2}}})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

16.557688136s ago: executing program 1 (id=318):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000100)={0x0, 0x2, 0x5a, {0x5a, 0x1, "7813198d44d747dc1f2e4f34ff61d2b56e221aa3b4de8fe5bbf9eb56a20a52c19d4a5c97ea9e0d878a89d67379a8423b99f5464d8d715fee704b070d1911b139f0037af5fb1a73db5dca81a52561d0dd4ae850eb98ea7c2a"}}, &(0x7f0000000440)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "e9feba7bd050e02c22369b48baba5cdb82658edda772cdd33959016ad92c5e6934aa15ae0f398f812223f069ed1038c13422b536b371c725851172b0690b30989793d1785f59a4e2baab66339fcccb0dee350d51e869719e04c74bf6b859e6782e8bf854f797f3703bb82cea076bd6f5ceca8f9abc7adda5fa128876777e71d567cb19b654d07d6f0ebcb9ddde25f4feabb34a5d2a65ee264dafa2d5cae5462037a7722c04daaa82b406aba9419096c2fd1d01cb8aa349b4dc49be4300afe08d442b4973351fc3d6798871b10f53580de0305d3b533ac241a7ae5a1c3e"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000200)={0x0, 0x11, 0x69, "869a21930ca3ebbb8bde818a953a546c3466b1cbaec032108bd0a69fec72e86e5d85abd6922a2dddf7e00bb85417dc4350de2b5cdaee13a7336719c1716e320f491bd1faeeaf9702bdd52d20274b74444b5ffd1e33349609197294dda3d6ae2918df03dd9fc3fcd5b4"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000540)=ANY=[], &(0x7f0000000380)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}})
writev(r1, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}}, 0x0)
r3 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0)

12.408584125s ago: executing program 1 (id=336):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000000c0)="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", 0x145}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x6f0d42)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x1, 0x0, 0x0, 0xfdfffffc}, 0xffffff8c})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)
ioctl$TCSETA(r2, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x104, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/128, 0x80, 0x0, 0x32}, @fda={0x66646185, 0x3, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @dead_binder_done, @register_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0xa74ccd8f69588a1d, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x4, 0x1, 0x8}, @flat=@handle={0x73682a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000480)={0x0, 0x20, 0x38}}}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x4, 0x2, 0x1d}, @fd, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x2}, @free_buffer], 0x0, 0x0, 0x0})

11.314666924s ago: executing program 4 (id=338):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfdf8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x9)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000032060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="a1c50602dd3d7c6622503d2b887e60756f81a58d3acba4be25bfcb4ef0bbb90bf6063a00a46bb79595231248ed048a4c1f461c4830e619d29f6f493ee7fc636229"], 0x40}}, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="b7dc9e5f10373364cb7a15d27c31e5d75ec803f8bc42a7b9b320bdb9a0acc1b6a6095ff8", 0x0}}, &(0x7f0000000100))

9.617977002s ago: executing program 3 (id=341):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5001, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$xdp(0x2c, 0x3, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20004005)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x20, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000001480)={0x31, "e92e48349494e9eaac1801818d6594fffec7242cb8243dbfdb23ed30c90822309b8bf7f65863150ce1cc3a59c51de3df91ca465d3f4278a0350f7b78a3044b60654daedf0d7ecf4020b6598b21a605cdbc4879da0310084db422de372cc6366c4df623eec5270ae99c9d7e2aaf487a9dd4f5e97fce50a83ff849d0bc0c5a021d84e89d681b9d140c45cd6e299e81893abf4cef3e86a68ac8af38dbe5067d9169197af1d42f221b8d3715ec5381a2bd9d82adf9b7fa1c69e4580e0b7c6a760aa4f4ccdf8a4c4e9eb44aa256be96a452b9d4978d5423786c41f44d7c033953391bfc1862f89ac7f63731656043b265eab35e5d6222a81c3552781a2fca15c23bf942a857c636a13691fafec2672128ae835fcd4ea5a5bb9e869dae53c2d96b7cff0e42b4c8243fe2c32ee67fdaec42ad80e6c83489c9689c19db45f26288cc26a78b257efe7a08bcce0e33268b6c11b8b338d9b83186d618a392fef650f24d8f414c799bae922fd39d0872809bb3c5b08e5b0a09657c2f46ca234e76fe7ed493788614e82b2879794071de67535a49c15bdba008127fe3db9f7719fae919c57525a4b2f175c06a0e28f921fd09b9276efae328059ee71edb8d46bcfb0f12248afee4c83086e7f4ab9eece87d4025d4aff3b0d95bf8675460e5b270786204e8b303aa3fcc143ec6b9292473c79c64fccaf8b3b477eb9a46ead6a1d6969b00a3759b"})

9.17821217s ago: executing program 4 (id=343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_proto_private(r1, 0x89a3, &(0x7f0000000080)="94b58ec726ebd03a")
syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109026900030100000209cc8e833f4a5412b10a24010000000201020524040205052405000709040100000500000000000000010102000009050109400008050007250100070000090402000001020000090402"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000002100)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x38, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0xc8f0, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}], 0x18}}], 0x2, 0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00)
ioctl$SG_GET_VERSION_NUM(r7, 0x2284, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x9b, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1c7720})

9.027711831s ago: executing program 3 (id=345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54)
getdents64(r3, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ethernet={0x306}, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000002740)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000029c0)}, {&(0x7f0000002a00)}, {0x0}], 0x3}}, {{&(0x7f0000002d00)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f0000002dc0)=[{0x0}], 0x1}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x818}}, @mark={{0x14, 0x1, 0x24, 0xbfb7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xa8}}], 0x5, 0x20004040)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r4 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x6040000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f000032e000/0xf000)=nil, 0xf000})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800"], 0xe0}}, 0x0)

8.845942702s ago: executing program 1 (id=346):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000100)={0x0, 0x2, 0x5a, {0x5a, 0x1, "7813198d44d747dc1f2e4f34ff61d2b56e221aa3b4de8fe5bbf9eb56a20a52c19d4a5c97ea9e0d878a89d67379a8423b99f5464d8d715fee704b070d1911b139f0037af5fb1a73db5dca81a52561d0dd4ae850eb98ea7c2a"}}, &(0x7f0000000440)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "e9feba7bd050e02c22369b48baba5cdb82658edda772cdd33959016ad92c5e6934aa15ae0f398f812223f069ed1038c13422b536b371c725851172b0690b30989793d1785f59a4e2baab66339fcccb0dee350d51e869719e04c74bf6b859e6782e8bf854f797f3703bb82cea076bd6f5ceca8f9abc7adda5fa128876777e71d567cb19b654d07d6f0ebcb9ddde25f4feabb34a5d2a65ee264dafa2d5cae5462037a7722c04daaa82b406aba9419096c2fd1d01cb8aa349b4dc49be4300afe08d442b4973351fc3d6798871b10f53580de0305d3b533ac241a7ae5a1c3e"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000200)={0x0, 0x11, 0x69, "869a21930ca3ebbb8bde818a953a546c3466b1cbaec032108bd0a69fec72e86e5d85abd6922a2dddf7e00bb85417dc4350de2b5cdaee13a7336719c1716e320f491bd1faeeaf9702bdd52d20274b74444b5ffd1e33349609197294dda3d6ae2918df03dd9fc3fcd5b4"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000540)=ANY=[], &(0x7f0000000380)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}})
writev(r1, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}}, 0x0)
r3 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
fcntl$setstatus(r1, 0x4, 0x40c00)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0)

6.477615297s ago: executing program 3 (id=352):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3}, 0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)

5.365314478s ago: executing program 2 (id=355):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x505}, "4e3cb0834132e584", "8eb495e987636731a087f071cf6a9f1a", "65e25701", "9a057bd9a3d94f4c"}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r3, 0x851, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000d0000000000000007000000852000000500000018450000f9ffffff000000000000000018010000000c00000000001300ff00000000bfa100000000000007010000f8ffffffb702000008200000b703000004000000850000000600000018110000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000000000000000000000010000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004e0c00008500000006000000850000003c0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7f, 0xdf, &(0x7f00000004c0)=""/223, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x1, 0xf, 0x6}, {0x2, 0x4, 0x3, 0x1}, {0x2, 0x1, 0x0, 0x2}, {0x3, 0x2, 0x0, 0x3}, {0x1, 0x3, 0x0, 0xb}, {0x1, 0x5, 0x7, 0xd30bdd14d295f805}, {0x1, 0x5, 0x3, 0x1}, {0x1, 0x5, 0xd, 0x3}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup, 0x11, 0x1, 0x5, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0xc}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map=r1, r3, 0xd741274064592ba2, 0x10, r4, @void, @value=r8, @void, @void, r5}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x7840, 0x2, 0x6db2, {{0x18, 0x4, 0x1, 0x3, 0x60, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @generic={0x53, 0x3, 'U'}, @ssrr={0x89, 0x17, 0x7d, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @cipso={0x86, 0x2e, 0x2, [{0x0, 0x7, "d3fd4073e7"}, {0xd655726ef3cfb1ca, 0x9, "4da95b1e4d790d"}, {0x5, 0x4, "43bb"}, {0x7, 0x7, "be6a2c38e8"}, {0x2, 0xd, "0ac92e88dab045ed7c251a"}]}]}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000000)=0x1000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="93babc77e7becf7370b6d68f47dab599e3d7b71aa443d492f30c1cf48ffd6182aa71dcacecd2dec323f8afb095e25b18e4bbdd5274c20f41e04c6c3e000035f4e0c5e163a654d5a517c763374b69e0e5882c4da6568e47238f0d0f69b28fb96682afc2cc7cea1f86f5c5d226e5aa09dee05ee37c", @ANYRES16=0x0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}}, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r11, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000000)=0x4000)

5.288916889s ago: executing program 4 (id=356):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x810, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38)
sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r6, 0x401, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0)

5.265646803s ago: executing program 0 (id=357):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000840)="615b07d8d4d28b519c06e58f8229c7bcc0f38c688f467f751d5624d2d76f69b61618f7713f2577b2af7ced1c1dbd2848fc98a4767432cfb667f5c8078851dfef0e0717d024e7a24821ae09527c0423aaf064e429b99b5a0d5342b52efedfb8ae03ab537433478117a8f44775bc3fa3e8a4f8394c9208e1d858d7cb7a58f6aab2faafe137524be242d587902776164fbd48f3db45f3fad9e50b77c5453de05f2c0f346db04b849a770dbcc4f8252889bd6881316301b5428626fdb493c71c8d9b2a500ac4dfdb27", 0xc7}, {&(0x7f0000000200)}, {&(0x7f0000000940)="195054f2cccc9a8de14bc9440e8a5a408e908568f707e78bf7887a73f049d9a31c7471f413e5f559f37f5353fc20627a578268b24144a3bf657d49c0a75a9adf320358ea3c4ea85bf72fbe634cce0336a5099faabfb2b24cc02cfc7a012b5b3175942f19b29b68a83bdacb25712775c34a3a1979f93774fab1ac8fe6b7c051dcc4ce04436eb8c5a5daf71057704e9ea2cdf3afdc359a5de5580a948c1ccd84baee736d", 0xa3}, {&(0x7f0000000a00)="001a2f9d6722a103527a77e850cd2f96af0b618c2b3febf416676f7fd67bc6d5ad7bec46a610dab243c3854a536960aa319730aaab6e843faa75a9721c10a4e7c9e64f93e719b85bc897130b6a6b6f5fca2fcd4aad3211bda68fee8c5ef3e1457018adce61e28983b1d914e5662e5f1cebcf28dbb7bc1448d4189c4117d265ff95a4d55f29d659de3bb3957578f205e2e8556e5cba19fcd70eb16d99948b0912392e25427ac80b533d10d3ba1ec4dab58acbe0a67fae248a0a51e762d7e87c8ba37f8c35f460348bb41ddd4887f6c1a4d951ae4c8ba0ab8c57d2288b9af372a21815147ac1b1", 0xe6}], 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0e00000000ddff0103000000000000001fbf60f87619c1fef999e44153cd8354f8ce55aefa3a775635ceb1f18d0947fdcfc08763991de5817abf55413f7c70c55aa9c3d351aa9fb7a115c1cab2bfef12d181fb5c7d9ef31d7ec60e5a4aa5047c25e157e21b835da67e0b043608103125311725081f862cd673afb1568d4c639abcc2fbd871171b34e1ccff0da0b3a0f732cf496e563f028028618e16ed4655dab0f922ca", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x4804}}], 0x1, 0x40000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0x88a, 0x4c1, 0x43, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)}, {&(0x7f0000000540)="77ce15fc80125884d5be14e3e8c8ac41d0958c9b63cb223f687f8ae536b3782324b69a8c99d640e293786bd1675a2359ccc3d6af1ca5094ba0dcc78363507f0478d0b65996e2230fb2238d53ecc0ebd5bc10e8e3aa61746b06f2d786db4e04fd1b5fae26eb3b4d5151889bbb613712034508d0a3702cb536fa884270ef6fdf80ec4c1299a6a5ca1d3a05fac1168b46b46f150dc46c1f909703ae8a8ade89805de58e74e14c8d39e201db4c7cde00d8a4daa44b100ad3750395a2", 0xba}, {&(0x7f00000006c0)="20b343f5dd2da51b68113736afcb0f7cb05233b2e271bdc2edeaeb2e3ea8e83ee76d0de59d7abef21e1af735db606ab15fa914a4284495be9a9a025141d4aa28bd16bf05bb3afd28e5201993b1c622211e4d67b5974d424a4bdc5f28250371e06aaa1684dd30f692379f6d27110322daf2a183225c3312b0c71da622dfd7eeffbe26e431e67c05e3d5365f9e24c6629b837037fcb45473c2aa87a62c7cf130fc9fd0843d79bf2f4fcb89d43c7c", 0xad}], 0x3, &(0x7f0000000780)="add5b60f6d0e4f9f954f51ee8c32453579bb9e6e397ec88bcf8cef93b4a7f13aaca6fb55e50af90e0b04baa9ace48b9e76bece834a67921c4bec17882cc9cb26cc439afac3ce052bb39b0f3403ac17b656523db0d28878c8e52f6c92bce394b35b35040e4da2aa9f049eede2e1ae06dd99cbcb946baceac0f2fc2770d157b6f56553cef33a02ee93147370cc15da6c4f1f349afa6cf2d03a4abd5bb3874dfd078ebc4968a15be6edf1daf158048010ce03", 0xb1, 0x8084}, 0x1010)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

5.228622553s ago: executing program 1 (id=358):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000000040)=[{0xa000002, 0x0, 0x0, 0xfffeffff, 0x1ff}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000006793000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)={0x38, 0x2d, 0x1, 0xfffffffc, 0x80, "", [@typed={0x8, 0x104, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x125, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x6b, 0x0, 0x1, [@nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x4, 0x13d}, @generic="fbf08a51"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x5)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x1, 0x9)

4.381682389s ago: executing program 0 (id=359):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="fb3f0ab3d8", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x20008081)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000040, 0x8001, 0x0, 0x9, 0x0, 0x8000000002000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000580)={0x0, 0x27, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES16, @ANYBLOB="200028bd70000000008002000000080061000000c00008000c0100000000", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300137ac6569cf4e6fbcc28e53d90a1ba0005e5ad14de51d4b6c404e267be0997bda9485dd9cac849014198359ca268d68de2eec14027bf5aa6ed2034b08a91e952b28fc0c9d5490b90f810735570801ccd497d40f197b4ba6f5d85b262686ecc3f2d5b4eabc77fe8176cfb0230745102e485cf2a1c7f972e268120165a2ae8e687e618b31b5d5d706e117c", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
r9 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.381197547s ago: executing program 4 (id=360):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async)
r3 = inotify_init()
read$FUSE(r3, 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0)

4.277141538s ago: executing program 2 (id=361):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f0000000180)=[{r4, 0xe7d4c009da6c19a5}, {r4, 0x4601}], 0x20000000000000b8, 0x4)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

4.179678185s ago: executing program 4 (id=362):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f0000000180)=[{r4, 0xe7d4c009da6c19a5}, {r4, 0x4601}], 0x20000000000000b8, 0x4)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

4.006944252s ago: executing program 3 (id=363):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vlan0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0)
sendfile(r3, r3, 0x0, 0x7)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000008100001800c0002800500010000000000180002801400018008000100e000000208000200e000000208000740000000001800068008000200ac1414000c000380060002004e2200000f4801afe5de51e700b9400185c7bdba590e58edcd2458b7b0c09eae10b4a33bd9136d94ba2887a743e79a5169787f5203b3d51b2bcd5b543bae921a9a85c37c7e1c7f7797ca3dd27e6969c7253c8364c06435f747b088b615010881ed306d3f7a1224abaa52"], 0x5c}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r8})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r8, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
write$dsp(r4, &(0x7f00000001c0)="5cba", 0x2)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)

2.477925817s ago: executing program 0 (id=364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@local, 0x9}, 0x0, 0x1, 0xfffffffc})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x1, 0x5, 0xfffffffffffffffd, 0x0, 0x10000000})
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000180)={0x2, 0x0, 0x0})
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000002c0)={0x0, 0xfffff2f1, 0x2007, 0x7, 0x93, "6100f7100000ff000020d0fd6a000000000100"})
r7 = syz_open_pts(r5, 0x141601)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x4, @thr={&(0x7f0000000340)="5427ac7b7a90b753f151fc9f60e64d504b44198634cdde634707c2f2d5901c7410c23f9a89c69a59778583ba63f3bc2dcc49c4b4ef17619198db69572ae9b9a1", &(0x7f0000000940)="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"}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58)
close_range(r4, 0xffffffffffffffff, 0x0)

2.393077314s ago: executing program 2 (id=365):
openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f00000001c0))
r4 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x20}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mq_timedsend(r1, &(0x7f00000021c0)="e02f504bdfe75986193808230d77e18b542c1d398371626e6960d3a62d26b7e57f0e946d667321690f82c533f03e580b2614d42ad98674628954dc60318dc5495acc17cff4cb5f36d6ab2a92ee0a773373a68a6780be148309c9b8e4d1e0f760e34952132e3b74e950e637282e6842c1078c7649aa92f84a1ecb525519606fbc4efed257e40e815ecd65404feb323c931b4aa781b32c70ba9a65b92eeabf1b18cdaf8149ddb17cea4325ee1fa23d0c7c2c19826ef012ebb264efde2a23c6765a0ddbb86a5e9e17c5bc3d49a8f09c403fe62d", 0xd2, 0x8695, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x481)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000040)={0x1, 0x2000000, {0x0, 0x0, 0x2008, 0x0, 0xa, 0x0, 0x3, 0x54a0feee7272d01c}})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2082)
write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r8, r9, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@allow_other}, {@allow_other}], [{@hash}]}})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, 0x0, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r10, 0x8b2a, &(0x7f0000000040))

2.270465972s ago: executing program 4 (id=366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c811}, 0x4004090)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xaf}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xb}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x32, 0xf3, 0x3, 0x80, 0x7, 0x0, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x2, 0x1, 0x2174]}})
r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg$unix(r5, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)=""/151, 0x97}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000400), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/29, 0x1d}, {&(0x7f0000001680)=""/252, 0xfc}, {&(0x7f0000001780)=""/247, 0xf7}, {&(0x7f0000001880)=""/61, 0x3d}], 0x9}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/28, 0x1c}, {&(0x7f00000019c0)=""/200, 0xc8}, {&(0x7f0000001ac0)=""/60, 0x3c}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)=""/77, 0x4d}, {&(0x7f0000001c00)=""/175, 0xaf}, {&(0x7f0000001cc0)=""/93, 0x5d}], 0x7}}], 0x3, 0x0, &(0x7f0000001e80))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18e)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800c, &(0x7f0000000000)={[{@redirect_dir_follow}]})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0x10000000, 0x47504a50, 0xf00, 0x2, 0x3, @stepwise={{0x8, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}})

2.185829269s ago: executing program 2 (id=367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x203, @mcast1, 0x5}, 0x1c)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7ff, 0x6, 0xc, 0x6, 0x40000})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES8, @ANYRESOCT=0x0, @ANYRES32=r6], 0xfc}}, 0x4000011)
r7 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)

2.120482989s ago: executing program 1 (id=368):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000180))
prctl$PR_SCHED_CORE(0x3e, 0x8, 0x0, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540), 0x0, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf0, 0x8c4}, 0x20008004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x0, 0x0, 0x0, 0x40000}, 0x80}}, &(0x7f0000002300), 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000040)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)

1.292134192s ago: executing program 2 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5)
r6 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000340)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6(0xa, 0x4, 0x4)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000180)=0x6912, 0x4)
write(r9, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x1000, @empty}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x2, @multicast1}, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff})

1.287984387s ago: executing program 0 (id=370):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x5, @rand_addr, 0xfffffffe}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r2, 0x2)
r3 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = dup(r0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x9f})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)

1.03815953s ago: executing program 0 (id=371):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
add_key$user(0x0, 0x0, &(0x7f0000000340)="009154dc71fd2930d9662f127392e8593333382e6b0d38d904fe153a2d331fda5b62cee3598779e96a7b92aecd323bc5f1cf91cee61d83bca0799744ea56f27024f72f40dbb789262e6cccf24fdc940b6bf48705d5f75bf1548e0e882314caa6bbe296fe5dfc99eddd", 0x69, 0xfffffffffffffffe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x12, r2, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000f14010028bd05000000df250800030046000000080001000000000009004500"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x43}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0)

415.433976ms ago: executing program 3 (id=372):
r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000780000061", @ANYRES32], 0x50)
r1 = gettid()
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000044000)=<r2=>0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000000c0))
fallocate(r0, 0x0, 0x0, 0x200401)
syz_open_procfs(r1, &(0x7f0000000100)='net/l2cap\x00')
fallocate(r0, 0x0, 0x0, 0x200401)

292.969875ms ago: executing program 2 (id=373):
socket(0xa, 0x800, 0xd0000006)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r3)
keyctl$clear(0x7, r3)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffe6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e27, 0xfffffffd, @loopback}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x80005}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)
syz_usb_connect(0x2, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001ebaf7081aeb01287a210102030109021d0001050000000904bb0801103f8d040905800c40000705010205"], 0x0)

50.184617ms ago: executing program 0 (id=374):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10)

0s ago: executing program 3 (id=375):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f0000000180)=[{r4, 0xe7d4c009da6c19a5}, {r4, 0x4601}], 0x20000000000000b8, 0x4)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

kernel console output (not intermixed with test programs):

 failslab, interval 1, probability 0, space 0, times 0
[   80.685530][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) 
[   80.685557][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.685567][ T6114] Call Trace:
[   80.685572][ T6114]  <TASK>
[   80.685579][ T6114]  dump_stack_lvl+0x16c/0x1f0
[   80.685604][ T6114]  should_fail_ex+0x512/0x640
[   80.685626][ T6114]  ? __kmalloc_cache_noprof+0x57/0x3e0
[   80.685655][ T6114]  should_failslab+0xc2/0x120
[   80.685675][ T6114]  __kmalloc_cache_noprof+0x6a/0x3e0
[   80.685701][ T6114]  ? copy_mount_options+0x55/0x190
[   80.685725][ T6114]  ? _copy_from_user+0x59/0xd0
[   80.685752][ T6114]  copy_mount_options+0x55/0x190
[   80.685778][ T6114]  __x64_sys_mount+0x1ac/0x310
[   80.685800][ T6114]  ? __pfx___x64_sys_mount+0x10/0x10
[   80.685829][ T6114]  do_syscall_64+0xcd/0x4c0
[   80.685853][ T6114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.685870][ T6114] RIP: 0033:0x7f88b258ebe9
[   80.685884][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.685900][ T6114] RSP: 002b:00007f88b33b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   80.685916][ T6114] RAX: ffffffffffffffda RBX: 00007f88b27c5fa0 RCX: 00007f88b258ebe9
[   80.685927][ T6114] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[   80.685937][ T6114] RBP: 00007f88b33b1090 R08: 0000200000000180 R09: 0000000000000000
[   80.685946][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.685955][ T6114] R13: 00007f88b27c6038 R14: 00007f88b27c5fa0 R15: 00007ffd334edbe8
[   80.685978][ T6114]  </TASK>
[   80.853385][   T30] audit: type=1400 audit(1757171029.134:179): avc:  denied  { read write } for  pid=6113 comm="syz.1.43" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.882433][   T30] audit: type=1400 audit(1757171029.134:180): avc:  denied  { open } for  pid=6113 comm="syz.1.43" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.938913][   T30] audit: type=1400 audit(1757171029.314:181): avc:  denied  { create } for  pid=6109 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   81.071140][   T30] audit: type=1400 audit(1757171029.434:182): avc:  denied  { name_bind } for  pid=6118 comm="syz.2.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   81.079434][ T6121] tipc: Started in network mode
[   81.122408][   T30] audit: type=1400 audit(1757171029.434:183): avc:  denied  { node_bind } for  pid=6118 comm="syz.2.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   81.125636][ T6125] FAULT_INJECTION: forcing a failure.
[   81.125636][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.159729][ T6121] tipc: Node identity aefe89c818bd, cluster identity 4711
[   81.168456][ T6121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.176355][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) 
[   81.176378][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   81.176387][ T6125] Call Trace:
[   81.176393][ T6125]  <TASK>
[   81.176400][ T6125]  dump_stack_lvl+0x16c/0x1f0
[   81.176426][ T6125]  should_fail_ex+0x512/0x640
[   81.176447][ T6125]  _copy_from_user+0x2e/0xd0
[   81.176468][ T6125]  bpf_test_init.isra.0+0xe2/0x140
[   81.176488][ T6125]  bpf_prog_test_run_skb+0x245/0x2280
[   81.176510][ T6125]  ? __fget_files+0x204/0x3c0
[   81.176532][ T6125]  ? __fget_files+0x20e/0x3c0
[   81.176548][ T6125]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   81.176571][ T6125]  ? fput+0x9b/0xd0
[   81.176595][ T6125]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   81.176616][ T6125]  __sys_bpf+0x104d/0x4de0
[   81.176640][ T6125]  ? __pfx___sys_bpf+0x10/0x10
[   81.176661][ T6125]  ? ksys_write+0x190/0x250
[   81.176681][ T6125]  ? __mutex_unlock_slowpath+0x161/0x7b0
[   81.176719][ T6125]  ? fput+0x9b/0xd0
[   81.176740][ T6125]  ? ksys_write+0x1ac/0x250
[   81.176755][ T6125]  ? __pfx_ksys_write+0x10/0x10
[   81.176776][ T6125]  __x64_sys_bpf+0x78/0xc0
[   81.176797][ T6125]  ? lockdep_hardirqs_on+0x7c/0x110
[   81.176816][ T6125]  do_syscall_64+0xcd/0x4c0
[   81.176839][ T6125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.176856][ T6125] RIP: 0033:0x7f6539f8ebe9
[   81.176868][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.176883][ T6125] RSP: 002b:00007f653ae6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   81.176897][ T6125] RAX: ffffffffffffffda RBX: 00007f653a1c5fa0 RCX: 00007f6539f8ebe9
[   81.176907][ T6125] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[   81.176917][ T6125] RBP: 00007f653ae6a090 R08: 0000000000000000 R09: 0000000000000000
[   81.176926][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.176935][ T6125] R13: 00007f653a1c6038 R14: 00007f653a1c5fa0 R15: 00007ffd5def8a08
[   81.176957][ T6125]  </TASK>
[   81.185388][ T6121] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   81.406525][ T1545] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.537337][ T6121] tipc: Resetting bearer <eth:syzkaller0>
[   81.556728][ T6117] tipc: Disabling bearer <eth:syzkaller0>
[   82.081321][ T1545] usb 2-1: Using ep0 maxpacket: 32
[   82.091988][ T1545] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   82.100318][ T1545] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   82.116928][ T1545] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   82.157632][ T1545] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   82.207878][ T1545] usb 2-1: config 0 interface 0 has no altsetting 0
[   82.220560][ T1545] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   82.230048][ T1545] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   82.239145][ T1545] usb 2-1: Product: syz
[   82.252737][ T1545] usb 2-1: Manufacturer: syz
[   82.269906][ T1545] usb 2-1: SerialNumber: syz
[   82.297158][ T6135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6135 comm=syz.4.49
[   82.311264][   T78] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   82.452039][ T1545] usb 2-1: config 0 descriptor??
[   82.469408][ T1545] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   82.471162][   T78] usb 3-1: Using ep0 maxpacket: 16
[   82.603228][ T1545] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   82.642588][   T78] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   82.653150][   T78] usb 3-1: config 0 has no interface number 0
[   82.682037][   T78] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   82.708586][   T78] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.739829][   T78] usb 3-1: Product: syz
[   82.760400][   T78] usb 3-1: Manufacturer: syz
[   82.765475][   T78] usb 3-1: SerialNumber: syz
[   82.797705][   T78] usb 3-1: config 0 descriptor??
[   82.822579][   T78] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   83.229070][ T6139] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   83.247309][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[   83.253491][ T5848] usb 2-1: USB disconnect, device number 3
[   83.263935][ T5848] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   83.272354][ T6147] syz.4.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   83.309901][ T6122] ldusb: No device or device unplugged -19
[   83.731389][   T78] gspca_spca1528: reg_w err -110
[   83.772399][   T78] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[   85.861341][   T78] usb 3-1: USB disconnect, device number 3
[   85.998094][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.55'.
[   86.753140][   T78] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   87.483691][   T78] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[   87.508256][   T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.957951][   T30] kauditd_printk_skb: 26 callbacks suppressed
[   87.957969][   T30] audit: type=1400 audit(1757171036.184:210): avc:  denied  { read write } for  pid=6171 comm="syz.3.58" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   87.958153][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.011673][   T30] audit: type=1400 audit(1757171036.194:211): avc:  denied  { open } for  pid=6171 comm="syz.3.58" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   88.076582][   T30] audit: type=1400 audit(1757171036.194:212): avc:  denied  { ioctl } for  pid=6171 comm="syz.3.58" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   88.112403][   T78] usb 3-1: config 0 descriptor??
[   88.127126][   T30] audit: type=1400 audit(1757171036.574:213): avc:  denied  { create } for  pid=6181 comm="syz.0.61" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   88.147896][   T78] gspca_main: sunplus-2.14.0 probing 055f:c420
[   88.729997][   T78] gspca_sunplus: reg_w_riv err -110
[   88.736996][   T30] audit: type=1400 audit(1757171037.054:214): avc:  denied  { write } for  pid=6181 comm="syz.0.61" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   88.760011][   T78] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[   88.802289][   T30] audit: type=1400 audit(1757171037.054:215): avc:  denied  { open } for  pid=6181 comm="syz.0.61" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   88.849295][   T30] audit: type=1400 audit(1757171037.054:216): avc:  denied  { read } for  pid=6181 comm="syz.0.61" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   88.897558][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   88.937845][   T30] audit: type=1400 audit(1757171037.054:217): avc:  denied  { ioctl } for  pid=6181 comm="syz.0.61" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   88.951181][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   89.013092][   T30] audit: type=1400 audit(1757171037.054:218): avc:  denied  { ioctl } for  pid=6181 comm="syz.0.61" path="/8/file0" dev="tmpfs" ino=58 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   89.070499][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   89.084247][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   89.097182][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   89.150606][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.165051][   T30] audit: type=1400 audit(1757171037.444:219): avc:  denied  { add_name } for  pid=6152 comm="dhcpcd-run-hook" name="resolv.conf.erspan0.1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.220710][    T9] usb 5-1: config 0 descriptor??
[   89.227366][ T6174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   89.461158][ T5911] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.512584][ T5967] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.611761][ T5911] usb 4-1: Using ep0 maxpacket: 16
[   89.619200][ T5911] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   89.630064][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   89.639986][ T5911] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   89.651196][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024
[   89.663878][ T5911] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[   89.672769][ T5967] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[   89.673906][    T9] usbhid 5-1:0.0: can't add hid device: -71
[   89.686610][ T5967] usb 2-1: config 0 has no interface number 0
[   89.688382][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   89.694417][ T5967] usb 2-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30
[   89.707196][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   89.731199][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.737964][ T5967] usb 2-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[   89.740356][    T9] usb 5-1: USB disconnect, device number 3
[   89.763274][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.772385][ T5911] usb 4-1: SerialNumber: syz
[   89.820454][ T6207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   89.840980][ T5911] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[   89.849273][ T5967] usb 2-1: config 0 interface 32 has no altsetting 0
[   89.851450][ T5967] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[   89.881218][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.892711][   T78] usb 3-1: USB disconnect, device number 4
[   89.895205][ T5911] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[   89.899655][ T5967] usb 2-1: Product: syz
[   89.912097][ T5967] usb 2-1: Manufacturer: syz
[   89.937739][ T5967] usb 2-1: SerialNumber: syz
[   89.955132][ T5967] usb 2-1: config 0 descriptor??
[   90.076615][ T5911] usb 4-1: USB disconnect, device number 2
[   90.318800][ T5967] usb 2-1: USB disconnect, device number 4
[   90.581151][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.821231][ T5919] usb 5-1: Using ep0 maxpacket: 32
[   90.900210][ T5919] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[   92.212085][ T5919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   92.263812][ T5919] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   92.381487][ T5919] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   92.406149][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0
[   92.416114][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   92.446976][ T5919] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   92.491149][ T5919] usb 5-1: Product: syz
[   92.506717][ T5919] usb 5-1: Manufacturer: syz
[   92.524524][ T5919] usb 5-1: SerialNumber: syz
[   92.555069][ T5919] usb 5-1: config 0 descriptor??
[   92.573779][ T5919] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   92.594231][ T5919] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   92.611189][ T5967] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   92.915338][ T5967] usb 3-1: config 5 has an invalid interface number: 187 but max is 0
[   92.924287][ T5967] usb 3-1: config 5 has no interface number 0
[   92.930386][ T5967] usb 3-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[   92.950240][ T5967] usb 3-1: config 5 interface 187 has no altsetting 0
[   92.963312][ T5967] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[   92.973001][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.985263][ T5967] usb 3-1: Product: syz
[   93.004045][ T5967] usb 3-1: Manufacturer: syz
[   93.190249][ T5967] usb 3-1: SerialNumber: syz
[   93.232443][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.238177][ T5967] usb 3-1: USB disconnect, device number 5
[   93.414062][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.433272][ T6261] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   93.434025][ T1545] usb 5-1: USB disconnect, device number 4
[   93.440262][    C1] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[   93.466734][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   93.466746][   T30] audit: type=1400 audit(1757171041.924:240): avc:  denied  { write } for  pid=6262 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.494305][ T6263] netlink: 72 bytes leftover after parsing attributes in process `syz.2.77'.
[   93.509658][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'.
[   93.534327][ T1545] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[   93.542374][    T9] usb 1-1: Using ep0 maxpacket: 16
[   93.565000][   T30] audit: type=1400 audit(1757171041.954:241): avc:  denied  { nlmsg_write } for  pid=6262 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.593611][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.624076][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.627509][ T6216] ldusb: No device or device unplugged -19
[   93.651618][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   93.665984][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   93.676459][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   93.681459][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   93.731848][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   93.746522][    T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   93.760879][    T9] usb 1-1: Manufacturer: syz
[   93.760899][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   93.794952][    T9] usb 1-1: config 0 descriptor??
[   93.817416][   T30] audit: type=1400 audit(1757171042.274:242): avc:  denied  { mounton } for  pid=6265 comm="syz.2.78" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   93.840778][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   93.854292][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.869493][   T30] audit: type=1400 audit(1757171042.324:243): avc:  denied  { setopt } for  pid=6267 comm="syz.1.79" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.891849][   T30] audit: type=1400 audit(1757171042.354:244): avc:  denied  { connect } for  pid=6267 comm="syz.1.79" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.911995][    C0] vkms_vblank_simulate: vblank timer overrun
[   93.921176][   T30] audit: type=1400 audit(1757171042.374:245): avc:  denied  { write } for  pid=6267 comm="syz.1.79" path="socket:[10496]" dev="sockfs" ino=10496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.944272][    C0] vkms_vblank_simulate: vblank timer overrun
[   93.951533][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.951558][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.996326][ T5919] usb 4-1: config 0 descriptor??
[   94.006535][ T6260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   94.107394][ T6272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.80'.
[   94.152863][    T9] rc_core: IR keymap rc-hauppauge not found
[   94.241287][    T9] Registered IR keymap rc-empty
[   94.252323][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   94.281242][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   94.706596][ T5919] usbhid 4-1:0.0: can't add hid device: -71
[   94.722523][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   94.734238][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   94.740208][ T5919] usb 4-1: USB disconnect, device number 3
[   94.862528][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[   94.945028][   T30] audit: type=1400 audit(1757171043.384:246): avc:  denied  { read } for  pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.981632][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   94.989105][   T30] audit: type=1400 audit(1757171043.384:247): avc:  denied  { open } for  pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.017467][   T30] audit: type=1400 audit(1757171043.394:248): avc:  denied  { ioctl } for  pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.075737][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.396205][   T30] audit: type=1400 audit(1757171043.624:249): avc:  denied  { append } for  pid=6279 comm="syz.2.82" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.531178][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.571162][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.591245][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.631149][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.661176][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.683703][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.723410][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   95.785256][ T6287] netlink: 96 bytes leftover after parsing attributes in process `syz.1.84'.
[   95.840800][ T6288] ªªªªªª: renamed from wg2 (while UP)
[   97.013838][    C0] hrtimer: interrupt took 30000827 ns
[   97.156625][ T6280] syz.2.82 (6280): drop_caches: 2
[   97.261195][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   97.294755][    T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   97.320126][    T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   97.450464][    T9] usb 1-1: USB disconnect, device number 4
[   98.502757][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   98.502772][   T30] audit: type=1400 audit(1757171046.954:254): avc:  denied  { bind } for  pid=6296 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.391860][   T30] audit: type=1400 audit(1757171047.854:255): avc:  denied  { create } for  pid=6313 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   99.515208][   T30] audit: type=1400 audit(1757171047.904:256): avc:  denied  { ioctl } for  pid=6313 comm="syz.1.89" path="socket:[10736]" dev="sockfs" ino=10736 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   99.749270][   T30] audit: type=1400 audit(1757171048.204:257): avc:  denied  { setopt } for  pid=6318 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.785724][ T6320] tipc: Started in network mode
[   99.790575][ T6320] tipc: Node identity caaa6225218d, cluster identity 4711
[   99.830263][ T6320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.866021][ T6320] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   99.904020][   T30] audit: type=1400 audit(1757171048.204:258): avc:  denied  { connect } for  pid=6318 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.934434][ T6320] tipc: Resetting bearer <eth:syzkaller0>
[   99.949529][   T30] audit: type=1400 audit(1757171048.274:259): avc:  denied  { sys_module } for  pid=6318 comm="syz.1.91" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   99.997805][ T6315] tipc: Disabling bearer <eth:syzkaller0>
[  100.239920][ T6331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.938755][ T6341] netlink: 96 bytes leftover after parsing attributes in process `syz.4.97'.
[  100.965460][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.170226][ T6347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.99'.
[  102.243003][ T6352] syzkaller0: entered promiscuous mode
[  102.248618][ T6352] syzkaller0: entered allmulticast mode
[  102.251156][ T5911] usb 2-1: Using ep0 maxpacket: 32
[  102.257557][ T6352] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  102.571357][   T30] audit: type=1400 audit(1757171050.934:260): avc:  denied  { read write } for  pid=6346 comm="syz.2.99" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  102.618096][ T5911] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  102.659263][ T5911] usb 2-1: config 0 has no interface number 0
[  102.686027][ T5911] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  102.702858][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.721603][   T30] audit: type=1400 audit(1757171050.934:261): avc:  denied  { open } for  pid=6346 comm="syz.2.99" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  102.753902][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'.
[  102.766702][ T5911] usb 2-1: Product: syz
[  102.826711][ T5911] usb 2-1: Manufacturer: syz
[  102.845657][ T5911] usb 2-1: SerialNumber: syz
[  102.867345][ T5911] usb 2-1: config 0 descriptor??
[  102.888141][ T5911] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  103.005752][ T5911] usb 2-1: qt2_attach - failed to power on unit: -71
[  103.065715][ T5911] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  103.097859][ T5911] usb 2-1: USB disconnect, device number 5
[  103.117555][   T30] audit: type=1400 audit(1757171051.574:262): avc:  denied  { map } for  pid=6369 comm="syz.1.106" path="socket:[9917]" dev="sockfs" ino=9917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  103.151319][ T5967] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  103.414483][ T5967] usb 5-1: Using ep0 maxpacket: 32
[  103.448194][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.778039][ T5967] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  103.876979][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.983557][ T5967] usb 5-1: config 0 descriptor??
[  103.992330][ T5967] dvb-usb: found a 'TeVii S662' in warm state.
[  104.000199][ T5967] dw2102: su3000_power_ctrl: 1, initialized 0
[  104.007253][ T5967] dvb-usb: bulk message failed: -22 (2/0)
[  104.021516][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  104.031264][ T5967] dvbdev: DVB: registering new adapter (TeVii S662)
[  104.048950][ T5967] usb 5-1: media controller created
[  104.164600][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  104.174929][ T5967] dw2102: i2c transfer failed.
[  104.191444][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  104.304788][ T6387] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  104.314463][ T6387] exFAT-fs (loop1): unable to read boot sector
[  104.320680][ T6387] exFAT-fs (loop1): failed to read boot sector
[  104.327136][ T6387] exFAT-fs (loop1): failed to recognize exfat type
[  104.741093][ T5967] dw2102: i2c transfer failed.
[  104.756616][ T6389] befs: (nullb0): No write support. Marking filesystem read-only
[  104.765196][ T6363] dvb-usb: bulk message failed: -22 (4/0)
[  104.765588][ T6389] befs: (nullb0): invalid magic header
[  104.771154][ T6363] dw2102: i2c transfer failed.
[  105.030269][   T30] audit: type=1400 audit(1757171053.214:263): avc:  denied  { mounton } for  pid=6362 comm="syz.4.103" path="/17/bus" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  105.081105][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  105.153200][ T5967] dw2102: i2c transfer failed.
[  105.165688][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  105.171542][ T5967] dw2102: i2c transfer failed.
[  105.181681][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  105.210974][ T5967] dw2102: i2c transfer failed.
[  105.215919][ T5967] dvb-usb: bulk message failed: -22 (6/0)
[  105.221877][ T5967] dw2102: i2c transfer failed.
[  105.226633][ T5967] dvb-usb: MAC address: 02:02:02:02:02:02
[  105.299524][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.454492][ T6400] FAULT_INJECTION: forcing a failure.
[  105.454492][ T6400] name failslab, interval 1, probability 0, space 0, times 0
[  105.464066][ T5967] dvb-usb: bulk message failed: -22 (3/0)
[  105.620883][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT(full) 
[  105.620907][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  105.620916][ T6400] Call Trace:
[  105.620921][ T6400]  <TASK>
[  105.620927][ T6400]  dump_stack_lvl+0x16c/0x1f0
[  105.620947][ T6400]  should_fail_ex+0x512/0x640
[  105.620960][ T6400]  ? fs_reclaim_acquire+0xae/0x150
[  105.620975][ T6400]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  105.620991][ T6400]  should_failslab+0xc2/0x120
[  105.621003][ T6400]  __kmalloc_noprof+0xd2/0x510
[  105.621017][ T6400]  tomoyo_realpath_from_path+0xc2/0x6e0
[  105.621033][ T6400]  ? tomoyo_profile+0x47/0x60
[  105.621054][ T6400]  tomoyo_path_number_perm+0x245/0x580
[  105.621073][ T6400]  ? tomoyo_path_number_perm+0x237/0x580
[  105.621095][ T6400]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  105.621111][ T6400]  ? find_held_lock+0x2b/0x80
[  105.621136][ T6400]  ? find_held_lock+0x2b/0x80
[  105.621148][ T6400]  ? hook_file_ioctl_common+0x145/0x410
[  105.621162][ T6400]  ? __fget_files+0x20e/0x3c0
[  105.621175][ T6400]  security_file_ioctl+0x9b/0x240
[  105.621191][ T6400]  __x64_sys_ioctl+0xb7/0x210
[  105.621208][ T6400]  do_syscall_64+0xcd/0x4c0
[  105.621223][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.621233][ T6400] RIP: 0033:0x7f6539f8ebe9
[  105.621242][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.621252][ T6400] RSP: 002b:00007f653ae6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.621262][ T6400] RAX: ffffffffffffffda RBX: 00007f653a1c5fa0 RCX: 00007f6539f8ebe9
[  105.621273][ T6400] RDX: 0000000000000000 RSI: 0000000040505412 RDI: 0000000000000003
[  105.621278][ T6400] RBP: 00007f653ae6a090 R08: 0000000000000000 R09: 0000000000000000
[  105.621284][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.621290][ T6400] R13: 00007f653a1c6038 R14: 00007f653a1c5fa0 R15: 00007ffd5def8a08
[  105.621303][ T6400]  </TASK>
[  105.844721][ T5967] dw2102: command 0x0e transfer failed.
[  105.850653][ T5967] dvb-usb: bulk message failed: -22 (3/0)
[  105.856537][ T5967] dw2102: command 0x0e transfer failed.
[  105.863884][ T6400] ERROR: Out of memory at tomoyo_realpath_from_path.
[  105.945470][ T6397] sctp: [Deprecated]: syz.1.111 (pid 6397) Use of int in maxseg socket option.
[  105.945470][ T6397] Use struct sctp_assoc_value instead
[  106.181174][ T5967] dvb-usb: bulk message failed: -22 (3/0)
[  106.186896][ T5967] dw2102: command 0x0e transfer failed.
[  106.192723][ T5967] dvb-usb: bulk message failed: -22 (3/0)
[  106.198418][ T5967] dw2102: command 0x0e transfer failed.
[  106.275926][ T5967] dvb-usb: bulk message failed: -22 (1/0)
[  106.282438][ T5967] dw2102: command 0x51 transfer failed.
[  106.287981][ T5967] dvb-usb: bulk message failed: -22 (5/0)
[  106.295855][ T5967] dw2102: i2c probe for address 0x68 failed.
[  106.364747][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'.
[  106.381160][ T5967] dvb-usb: bulk message failed: -22 (5/0)
[  106.392788][ T5967] dw2102: i2c probe for address 0x69 failed.
[  106.432688][ T5967] dvb-usb: bulk message failed: -22 (5/0)
[  106.439343][ T5967] dw2102: i2c probe for address 0x6a failed.
[  106.465723][   T30] audit: type=1400 audit(1757171054.914:264): avc:  denied  { read write } for  pid=6413 comm="syz.4.115" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  106.499360][ T5967] dw2102: probing for demodulator failed. Is the external power switched on?
[  106.801547][ T5967] dvb-usb: no frontend was attached by 'TeVii S662'
[  106.939022][   T30] audit: type=1400 audit(1757171054.914:265): avc:  denied  { open } for  pid=6413 comm="syz.4.115" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  107.016166][   T30] audit: type=1400 audit(1757171055.074:266): avc:  denied  { read write } for  pid=6413 comm="syz.4.115" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  107.046478][ T5967] rc_core: IR keymap rc-tt-1500 not found
[  107.179138][ T6401] bridge_slave_0: left allmulticast mode
[  107.184973][ T6401] bridge_slave_0: left promiscuous mode
[  107.191613][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.623089][ T6401] bridge_slave_1: left allmulticast mode
[  107.629037][ T6401] bridge_slave_1: left promiscuous mode
[  107.689952][ T5967] Registered IR keymap rc-empty
[  107.869654][ T5967] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  108.025413][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.098160][ T5967] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6
[  108.121165][   T30] audit: type=1400 audit(1757171055.084:267): avc:  denied  { open } for  pid=6413 comm="syz.4.115" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  108.163392][ T5967] dvb-usb: schedule remote query interval to 250 msecs.
[  108.193365][ T5967] dw2102: su3000_power_ctrl: 0, initialized 1
[  108.268784][ T5967] dvb-usb: TeVii S662 successfully initialized and connected.
[  108.285208][   T30] audit: type=1400 audit(1757171055.624:268): avc:  denied  { create } for  pid=6390 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  108.308889][ T5967] usb 5-1: USB disconnect, device number 5
[  108.341446][ T6401] bond0: (slave bond_slave_0): Releasing backup interface
[  108.362353][   T30] audit: type=1400 audit(1757171055.624:269): avc:  denied  { connect } for  pid=6390 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  108.364001][ T6401] bond0: (slave bond_slave_1): Releasing backup interface
[  108.662130][   T30] audit: type=1400 audit(1757171055.704:270): avc:  denied  { connect } for  pid=6420 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  108.736891][ T5967] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  108.760173][ T6401] team0: Port device team_slave_0 removed
[  108.862265][ T6401] team0: Port device team_slave_1 removed
[  108.888153][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.941308][   T30] audit: type=1400 audit(1757171057.394:271): avc:  denied  { append } for  pid=6441 comm="syz.2.121" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  108.965153][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.023984][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.050882][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.241202][ T5903] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  109.331984][   T30] audit: type=1400 audit(1757171057.794:272): avc:  denied  { ioctl } for  pid=6441 comm="syz.2.121" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  109.341179][ T5967] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.887653][ T5903] usb 2-1: config index 0 descriptor too short (expected 3133, got 61)
[  109.895940][ T5903] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  110.072630][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.084356][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  110.099221][ T5903] usb 2-1: config 0 has no interface number 0
[  110.101823][ T5967] usb 4-1: Using ep0 maxpacket: 32
[  110.105403][ T5903] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  110.124951][ T5903] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  110.136132][ T5903] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  110.139270][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.151082][ T5903] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.321026][ T5903] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  110.328547][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.338378][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00
[  110.354515][ T6468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6468 comm=syz.0.128
[  110.356971][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.384615][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  110.384628][   T30] audit: type=1400 audit(1757171058.844:277): avc:  denied  { ioctl } for  pid=6466 comm="syz.0.128" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.389946][ T5967] usb 4-1: config 0 descriptor??
[  110.434124][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.442275][   T30] audit: type=1400 audit(1757171058.844:278): avc:  denied  { set_context_mgr } for  pid=6466 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  110.489383][ T5903] usb 2-1: config 0 descriptor??
[  110.505991][ T5903] gspca_main: spca561-2.14.0 probing abcd:cdee
[  110.551948][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  110.659404][   T30] audit: type=1400 audit(1757171059.114:279): avc:  denied  { setopt } for  pid=6471 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  110.720735][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  110.729463][ T5903] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  110.744680][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  110.759885][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  110.771377][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  110.780345][   T30] audit: type=1400 audit(1757171059.234:280): avc:  denied  { create } for  pid=6475 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.785521][ T5903] usb 2-1: MIDIStreaming interface descriptor not found
[  110.813416][ T5911] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  110.817169][   T30] audit: type=1400 audit(1757171059.264:281): avc:  denied  { bind } for  pid=6475 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.822510][ T1545] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  110.850295][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.875026][ T5967] logitech-hidpp-device 0003:046D:C26E.0001: hidraw0: USB HID v0.00 Device [HID 046d:c26e] on usb-dummy_hcd.3-1/input0
[  110.884731][ T5911] usb 5-1: config 0 descriptor??
[  110.945295][ T5903] usb 2-1: USB disconnect, device number 6
[  111.062518][   T30] audit: type=1400 audit(1757171059.524:282): avc:  denied  { ioctl } for  pid=6475 comm="syz.2.133" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.093335][ T1545] usb 1-1: config 0 interface 0 has no altsetting 0
[  111.104210][ T1545] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  111.113298][ T1545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.133457][ T1545] usb 1-1: config 0 descriptor??
[  111.143964][   T78] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  111.281996][ T6483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  111.288715][ T6483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  111.305463][   T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.449330][ T5911] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  111.528271][ T5911] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  111.635083][ T6483] vhci_hcd vhci_hcd.0: Device attached
[  111.644308][ T5911] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  111.755981][ T5911] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  111.810912][ T6483] fuse: Unknown parameter 'user_i00000000000000000000'
[  111.867065][ T5911] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  111.924099][ T1545] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input7
[  112.931514][   T30] audit: type=1400 audit(1757171061.384:283): avc:  denied  { create } for  pid=6469 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  113.138584][ T5903] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  113.211298][ T5911] playstation 0003:054C:0DF2.0002: hidraw1: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  113.341699][   T78] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  113.381073][ T5911] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -71
[  113.407957][ T1545] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input8
[  113.423173][   T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.431635][ T5911] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -71
[  113.440860][ T5911] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense
[  113.482850][   T78] usb 3-1: config 0 descriptor??
[  113.483591][ T5911] playstation 0003:054C:0DF2.0002: Failed to create dualsense.
[  113.552701][ T5911] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71
[  113.579012][ T5911] usb 5-1: USB disconnect, device number 6
[  113.596804][ T1545] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input9
[  113.774441][ T1545] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input10
[  113.855747][   T30] audit: type=1400 audit(1757171062.304:284): avc:  denied  { read write } for  pid=6497 comm="syz.4.136" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.006666][ T1545] hid-udraw 0003:20D6:CB17.0003: hidraw1: USB HID v8.80 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0
[  114.066478][ T6484] vhci_hcd: connection reset by peer
[  114.125415][ T6503] openvswitch: netlink: Flow key attr not present in new flow.
[  114.561016][   T30] audit: type=1400 audit(1757171062.304:285): avc:  denied  { open } for  pid=6497 comm="syz.4.136" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.607632][   T78] smartjoyplus 0003:0925:8866.0004: unknown main item tag 0x5
[  114.619837][   T48] vhci_hcd: stop threads
[  114.624824][   T48] vhci_hcd: release socket
[  114.645010][   T48] vhci_hcd: disconnect device
[  114.677928][ T5919] usb 4-1: USB disconnect, device number 4
[  114.828804][   T30] audit: type=1400 audit(1757171063.284:286): avc:  denied  { create } for  pid=6508 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  114.883068][ T6509] mmap: syz.1.139 (6509) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.912047][   T78] smartjoyplus 0003:0925:8866.0004: hidraw0: USB HID v80.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0
[  115.034960][ T6512] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.140'.
[  115.320634][   T78] smartjoyplus 0003:0925:8866.0004: no output reports found
[  115.358567][   T78] usb 3-1: USB disconnect, device number 6
[  115.623526][ T6520] fido_id[6520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  116.607326][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.144'.
[  117.800119][ T6546] FAULT_INJECTION: forcing a failure.
[  117.800119][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.813656][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT(full) 
[  117.813679][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  117.813689][ T6546] Call Trace:
[  117.813695][ T6546]  <TASK>
[  117.813702][ T6546]  dump_stack_lvl+0x16c/0x1f0
[  117.813729][ T6546]  should_fail_ex+0x512/0x640
[  117.813755][ T6546]  _copy_from_user+0x2e/0xd0
[  117.813781][ T6546]  move_addr_to_kernel+0x65/0x170
[  117.813809][ T6546]  __copy_msghdr+0x386/0x470
[  117.813830][ T6546]  copy_msghdr_from_user+0xc1/0x160
[  117.813851][ T6546]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  117.813878][ T6546]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  117.813902][ T6546]  ___sys_sendmsg+0xfe/0x1d0
[  117.813924][ T6546]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.813974][ T6546]  __sys_sendmsg+0x16d/0x220
[  117.813995][ T6546]  ? __pfx___sys_sendmsg+0x10/0x10
[  117.814032][ T6546]  do_syscall_64+0xcd/0x4c0
[  117.814056][ T6546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.814073][ T6546] RIP: 0033:0x7f6539f8ebe9
[  117.814087][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.814102][ T6546] RSP: 002b:00007f653ae28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.814119][ T6546] RAX: ffffffffffffffda RBX: 00007f653a1c6180 RCX: 00007f6539f8ebe9
[  117.814129][ T6546] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000b
[  117.814139][ T6546] RBP: 00007f653ae28090 R08: 0000000000000000 R09: 0000000000000000
[  117.814149][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.814158][ T6546] R13: 00007f653a1c6218 R14: 00007f653a1c6180 R15: 00007ffd5def8a08
[  117.814181][ T6546]  </TASK>
[  117.815559][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  117.815584][   T30] audit: type=1400 audit(1757171066.254:288): avc:  denied  { bind } for  pid=6540 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  118.311154][ T5903] vhci_hcd: vhci_device speed not set
[  118.531471][   T78] usb 1-1: USB disconnect, device number 5
[  118.624877][   T30] audit: type=1400 audit(1757171067.054:289): avc:  denied  { create } for  pid=6550 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  118.652051][   T30] audit: type=1400 audit(1757171067.054:290): avc:  denied  { write } for  pid=6550 comm="syz.2.149" path="socket:[11355]" dev="sockfs" ino=11355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  118.853007][ T6555] dummy0: entered promiscuous mode
[  118.929991][   T30] audit: type=1400 audit(1757171067.314:291): avc:  denied  { ioctl } for  pid=6554 comm="syz.2.151" path="socket:[11373]" dev="sockfs" ino=11373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  119.035374][   T30] audit: type=1400 audit(1757171067.484:292): avc:  denied  { create } for  pid=6552 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  119.752582][   T30] audit: type=1400 audit(1757171067.484:293): avc:  denied  { ioctl } for  pid=6552 comm="syz.0.150" path="socket:[11374]" dev="sockfs" ino=11374 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  119.851122][   T30] audit: type=1400 audit(1757171068.174:294): avc:  denied  { unmount } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  119.956236][   T30] audit: type=1400 audit(1757171068.414:295): avc:  denied  { bind } for  pid=6564 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.028607][ T6554] dummy0: left promiscuous mode
[  120.671124][   T30] audit: type=1400 audit(1757171069.124:296): avc:  denied  { execute } for  pid=6579 comm="syz.1.156" path="/38/file1" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.759787][ T6595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.158'.
[  121.516188][ T1545] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.705290][ T1545] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  121.847797][ T1545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.859951][ T1545] usb 3-1: Product: syz
[  121.866743][ T1545] usb 3-1: Manufacturer: syz
[  121.896135][ T1545] usb 3-1: SerialNumber: syz
[  121.924162][ T1545] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  121.957453][   T30] audit: type=1400 audit(1757171070.394:297): avc:  denied  { firmware_load } for  pid=5904 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  121.960342][ T5904] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  122.225053][ T5911] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  122.518756][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  122.597482][ T6619] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.089497][ T5904] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  123.100657][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  123.117139][ T5904] ath9k_htc: Failed to initialize the device
[  124.549101][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  124.615680][ T5904] usb 3-1: ath9k_htc: USB layer deinitialized
[  124.746912][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  125.051504][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.054665][ T5848] usb 3-1: USB disconnect, device number 7
[  125.060549][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.451870][ T5911] usb 5-1: config 0 descriptor??
[  125.462129][ T5911] usb 5-1: can't set config #0, error -71
[  125.476954][ T5911] usb 5-1: USB disconnect, device number 7
[  125.523458][ T5845] udevd[5845]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory
[  125.546505][ T5845] udevd[5845]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory
[  125.621783][ T6633] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  126.241351][ T5904] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  126.247098][ T5919] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  126.404754][ T5904] usb 2-1: device descriptor read/64, error -71
[  126.512849][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.574371][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.638970][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  126.681141][ T5904] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  126.697178][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.821160][ T5904] usb 2-1: device descriptor read/64, error -71
[  126.961136][ T5919] usb 1-1: usb_control_msg returned -32
[  126.971136][ T5919] usbtmc 1-1:16.0: can't read capabilities
[  127.059746][ T5904] usb usb2-port1: attempt power cycle
[  127.173602][ T5967] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  127.315401][ T6676] FAULT_INJECTION: forcing a failure.
[  127.315401][ T6676] name failslab, interval 1, probability 0, space 0, times 0
[  127.376182][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.418284][ T5967] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  127.430401][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) 
[  127.430426][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.430435][ T6676] Call Trace:
[  127.430441][ T6676]  <TASK>
[  127.430448][ T6676]  dump_stack_lvl+0x16c/0x1f0
[  127.430475][ T6676]  should_fail_ex+0x512/0x640
[  127.430501][ T6676]  ? fs_reclaim_acquire+0xae/0x150
[  127.430525][ T6676]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  127.430551][ T6676]  should_failslab+0xc2/0x120
[  127.430571][ T6676]  __kmalloc_noprof+0xd2/0x510
[  127.430594][ T6676]  tomoyo_realpath_from_path+0xc2/0x6e0
[  127.430622][ T6676]  ? tomoyo_profile+0x47/0x60
[  127.430642][ T6676]  tomoyo_path_number_perm+0x245/0x580
[  127.430663][ T6676]  ? tomoyo_path_number_perm+0x237/0x580
[  127.430686][ T6676]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  127.430710][ T6676]  ? find_held_lock+0x2b/0x80
[  127.430753][ T6676]  ? find_held_lock+0x2b/0x80
[  127.430773][ T6676]  ? hook_file_ioctl_common+0x145/0x410
[  127.430796][ T6676]  ? __fget_files+0x20e/0x3c0
[  127.430820][ T6676]  security_file_ioctl+0x9b/0x240
[  127.430847][ T6676]  __x64_sys_ioctl+0xb7/0x210
[  127.430875][ T6676]  do_syscall_64+0xcd/0x4c0
[  127.430899][ T6676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.430917][ T6676] RIP: 0033:0x7fb213b8ebe9
[  127.430930][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.430946][ T6676] RSP: 002b:00007fb2149ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  127.430962][ T6676] RAX: ffffffffffffffda RBX: 00007fb213dc6090 RCX: 00007fb213b8ebe9
[  127.430972][ T6676] RDX: 0000000000000000 RSI: 0000000040015b19 RDI: 0000000000000004
[  127.430982][ T6676] RBP: 00007fb2149ab090 R08: 0000000000000000 R09: 0000000000000000
[  127.430991][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.431000][ T6676] R13: 00007fb213dc6128 R14: 00007fb213dc6090 R15: 00007ffdadbdf998
[  127.431024][ T6676]  </TASK>
[  127.627686][    C1] vkms_vblank_simulate: vblank timer overrun
[  127.681357][ T5904] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  127.701150][ T6676] ERROR: Out of memory at tomoyo_realpath_from_path.
[  127.715262][ T5904] usb 2-1: device descriptor read/8, error -71
[  127.878324][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.907412][ T5967] usb 5-1: Product: syz
[  127.915573][ T5967] usb 5-1: Manufacturer: syz
[  127.971201][ T5967] usb 5-1: SerialNumber: syz
[  127.982769][ T5967] usb 5-1: config 0 descriptor??
[  128.031505][ T5904] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  128.074306][ T5904] usb 2-1: device descriptor read/8, error -71
[  128.210228][ T1545] usb 5-1: USB disconnect, device number 8
[  128.261659][ T5904] usb usb2-port1: unable to enumerate USB device
[  128.436547][ T6695] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  128.908227][ T5919] usb 1-1: USB disconnect, device number 6
[  129.103953][ T5967] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  129.162156][ T6705] dummy0: entered promiscuous mode
[  129.617253][   T30] audit: type=1400 audit(1757171078.064:298): avc:  denied  { ioctl } for  pid=6706 comm="syz.2.176" path="socket:[12478]" dev="sockfs" ino=12478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.848988][ T5967] usb 4-1: Using ep0 maxpacket: 16
[  129.919478][   T30] audit: type=1400 audit(1757171078.104:299): avc:  denied  { write } for  pid=6706 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.938891][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  129.949971][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.973666][ T5967] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  129.993526][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.011110][ T5967] usb 4-1: Product: syz
[  130.031191][   T30] audit: type=1400 audit(1757171078.104:300): avc:  denied  { read } for  pid=6706 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  130.061260][ T5967] usb 4-1: Manufacturer: syz
[  130.065883][ T5967] usb 4-1: SerialNumber: syz
[  130.071929][ T6704] dummy0: left promiscuous mode
[  130.168130][ T5967] usb 4-1: config 0 descriptor??
[  130.174398][ T5967] hub 4-1:0.0: bad descriptor, ignoring hub
[  130.180321][ T5967] hub 4-1:0.0: probe with driver hub failed with error -5
[  130.188970][ T5967] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  130.773750][ T6736] misc userio: No port type given on /dev/userio
[  131.165716][   T30] audit: type=1400 audit(1757171079.624:301): avc:  denied  { unlink } for  pid=6745 comm="syz.0.181" name="#1" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  131.203116][ T5919] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  131.249853][   T30] audit: type=1400 audit(1757171079.624:302): avc:  denied  { mount } for  pid=6745 comm="syz.0.181" name="/" dev="overlay" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  131.476597][ T5919] usb 5-1: config 5 has an invalid interface number: 187 but max is 0
[  131.507790][   T30] audit: type=1400 audit(1757171079.774:303): avc:  denied  { getopt } for  pid=6683 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  131.527087][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.537273][ T5919] usb 5-1: config 5 has no interface number 0
[  131.561233][ T5919] usb 5-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  131.684761][ T5919] usb 5-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  131.696561][ T5919] usb 5-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  131.710712][ T5919] usb 5-1: config 5 interface 187 has no altsetting 0
[  131.722961][ T5919] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[  131.735485][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.901094][ T5904] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  132.363983][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  132.391488][ T5919] usb 5-1: Product: syz
[  132.394770][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  132.405643][ T5919] usb 5-1: Manufacturer: syz
[  132.410709][ T5919] usb 5-1: SerialNumber: syz
[  132.415308][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.426163][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.478984][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.488754][ T5904] usb 1-1: Product: syz
[  132.493907][ T5904] usb 1-1: Manufacturer: syz
[  132.499339][ T5904] usb 1-1: SerialNumber: syz
[  132.553966][ T5904] usb 1-1: config 0 descriptor??
[  132.896215][ T5904] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  133.121126][   T78] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  133.182415][ T6763] 9pnet_fd: Insufficient options for proto=fd
[  133.312928][   T78] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.328848][   T78] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  133.338477][   T78] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.356069][   T78] usb 3-1: Product: syz
[  133.360536][   T78] usb 3-1: Manufacturer: syz
[  133.369136][   T78] usb 3-1: SerialNumber: syz
[  133.399660][   T78] usb 3-1: config 0 descriptor??
[  133.421467][ T5967] usb 4-1: reset high-speed USB device number 5 using dummy_hcd
[  133.435374][ T5967] usb 4-1: device reset changed ep0 maxpacket size!
[  133.457631][ T5967] usb 4-1: USB disconnect, device number 5
[  133.630694][ T1545] usb 3-1: USB disconnect, device number 8
[  133.769829][ T5904] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  133.771211][ T5967] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  133.814065][ T5904] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  133.823923][ T5904] usb 1-1: media controller created
[  133.849449][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.936590][ T5967] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  133.942028][ T5904] i2c i2c-1: Added multiplexed i2c bus 2
[  133.946856][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.951628][ T5904] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  133.968006][ T5967] usb 4-1: Product: syz
[  133.973475][ T5904] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  133.975101][ T5967] usb 4-1: Manufacturer: syz
[  133.988721][ T5967] usb 4-1: SerialNumber: syz
[  134.000780][ T5967] usb 4-1: config 0 descriptor??
[  134.001326][ T5904] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  134.046528][ T5904] DVB: Unable to find symbol mxl5005s_attach()
[  134.101355][ T5904] usb 1-1: USB disconnect, device number 7
[  134.296011][ T5919] usb 5-1: USB disconnect, device number 9
[  134.460422][   T30] audit: type=1400 audit(1757171082.914:304): avc:  denied  { read write } for  pid=6781 comm="syz.0.190" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  134.538098][   T30] audit: type=1400 audit(1757171082.914:305): avc:  denied  { open } for  pid=6781 comm="syz.0.190" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  134.572249][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  134.591716][ T6784] 9pnet_fd: Insufficient options for proto=fd
[  134.602288][ T6784] xt_time: invalid argument - start or stop time greater than 23:59:59
[  134.618162][   T30] audit: type=1400 audit(1757171082.914:306): avc:  denied  { name_bind } for  pid=6781 comm="syz.0.190" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  134.654290][ T6788] Bluetooth: MGMT ver 1.23
[  134.703096][   T30] audit: type=1400 audit(1757171083.114:307): avc:  denied  { write } for  pid=6786 comm="syz.1.191" path="socket:[12552]" dev="sockfs" ino=12552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  134.829537][ T5904] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  134.844153][ T5904] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  134.868257][   T30] audit: type=1400 audit(1757171083.324:308): avc:  denied  { ioctl } for  pid=6764 comm="syz.3.186" path="socket:[11586]" dev="sockfs" ino=11586 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  134.875032][ T5967] usb 4-1: f81604_write: reg: 105 data: 0 failed: -EPROTO
[  134.894305][ T5904] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  134.910077][ T5967] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  134.914517][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.930717][ T6778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  135.058379][ T5967] f81604 4-1:0.0: probe with driver f81604 failed with error -71
[  135.073330][ T5967] usb 4-1: USB disconnect, device number 6
[  135.083246][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  135.803549][   T30] audit: type=1400 audit(1757171084.264:309): avc:  denied  { connect } for  pid=6800 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  135.838764][   T30] audit: type=1400 audit(1757171084.264:310): avc:  denied  { append } for  pid=6800 comm="syz.1.196" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.017309][   T30] audit: type=1400 audit(1757171084.274:311): avc:  denied  { setopt } for  pid=6800 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  136.199342][   T30] audit: type=1400 audit(1757171084.654:312): avc:  denied  { create } for  pid=6808 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.226923][ T6809] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[  136.257346][   T30] audit: type=1400 audit(1757171084.714:313): avc:  denied  { read } for  pid=6808 comm="syz.0.197" path="socket:[12591]" dev="sockfs" ino=12591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.426314][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.199'.
[  137.223188][ T5170] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.229302][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  137.389915][ T5967] usb 3-1: USB disconnect, device number 9
[  137.544268][   T30] audit: type=1400 audit(1757171085.874:314): avc:  denied  { read write } for  pid=6794 comm="syz.4.194" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  137.567218][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.654472][   T30] audit: type=1400 audit(1757171085.874:315): avc:  denied  { open } for  pid=6794 comm="syz.4.194" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  138.349883][   T30] audit: type=1400 audit(1757171085.874:316): avc:  denied  { ioctl } for  pid=6794 comm="syz.4.194" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  138.394332][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.401914][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.547996][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.558327][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.634093][ T5967] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  138.777937][ T1135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.831773][ T1135] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.846999][ T1135] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.866442][ T5967] usb 3-1: Using ep0 maxpacket: 32
[  138.889764][ T5967] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  138.905099][ T5967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  138.923126][ T1135] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.937678][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.208'.
[  138.949115][ T5967] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  138.979888][ T5967] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  139.023301][ T5967] usb 3-1: config 0 interface 0 has no altsetting 0
[  139.042506][ T5967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  139.053115][ T5967] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  139.184712][ T6859] evm: overlay not supported
[  139.224453][ T5967] usb 3-1: Product: syz
[  139.228717][ T5967] usb 3-1: Manufacturer: syz
[  139.306757][ T5967] usb 3-1: SerialNumber: syz
[  139.311808][ T6856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.211'.
[  139.328360][ T5967] usb 3-1: config 0 descriptor??
[  139.337458][ T5967] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  139.360791][ T5967] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  140.095541][ T5919] usb 3-1: USB disconnect, device number 10
[  140.101578][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  140.113155][ T6865] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  140.290084][ T5919] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  140.293018][ T6869] warning: `syz.4.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  140.320425][ T6870] ldusb: No device or device unplugged -19
[  140.497791][ T6876] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.617774][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  140.618853][   T30] audit: type=1400 audit(1757171089.064:325): avc:  denied  { ioctl } for  pid=6874 comm="syz.4.216" path="socket:[12004]" dev="sockfs" ino=12004 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  140.707946][   T30] audit: type=1400 audit(1757171089.164:326): avc:  denied  { append } for  pid=6874 comm="syz.4.216" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  140.730558][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.769569][ T6883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.217'.
[  141.261622][   T30] audit: type=1400 audit(1757171089.694:327): avc:  denied  { name_connect } for  pid=6897 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  141.281900][ T1545] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  141.326117][   T30] audit: type=1400 audit(1757171089.724:328): avc:  denied  { read } for  pid=6897 comm="syz.3.223" lport=36045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  141.360844][ T6901] netlink: 116 bytes leftover after parsing attributes in process `syz.3.223'.
[  141.365832][   T30] audit: type=1326 audit(1757171089.774:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.393715][ T6901] netlink: 104 bytes leftover after parsing attributes in process `syz.3.223'.
[  141.474547][   T30] audit: type=1326 audit(1757171089.774:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.507893][ T1545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.518503][ T5904] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  141.595747][ T1545] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  141.680445][ T1545] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  141.723533][   T30] audit: type=1326 audit(1757171089.774:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.746956][ T5904] usb 2-1: Using ep0 maxpacket: 16
[  141.754978][ T1545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.765113][   T30] audit: type=1326 audit(1757171089.774:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.789082][   T30] audit: type=1326 audit(1757171089.774:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.812300][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.822983][ T5904] usb 2-1: config 2 has an invalid interface number: 196 but max is 1
[  141.833538][ T5904] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2
[  141.837124][   T30] audit: type=1326 audit(1757171089.774:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efee098ebe9 code=0x7ffc0000
[  141.846528][ T1545] usb 3-1: config 0 descriptor??
[  141.878071][ T5904] usb 2-1: config 2 has no interface number 0
[  141.884272][ T5904] usb 2-1: config 2 interface 196 has no altsetting 0
[  141.898469][ T5904] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56
[  141.907711][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.915907][ T5904] usb 2-1: Product: syz
[  141.920060][ T5904] usb 2-1: Manufacturer: syz
[  141.924688][ T5904] usb 2-1: SerialNumber: syz
[  142.073464][   T78] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.249218][   T78] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  142.325946][   T78] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  142.402356][ T4528] wlan1: Trigger new scan to find an IBSS to join
[  142.432955][   T78] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  142.492221][   T78] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  142.544463][   T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.553498][   T78] usb 1-1: Product: syz
[  142.557743][   T78] usb 1-1: Manufacturer: syz
[  142.565930][   T78] usb 1-1: SerialNumber: syz
[  142.577447][   T78] usb 1-1: config 0 descriptor??
[  142.587021][ T6907] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  142.603483][ T6907] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  142.631112][ T5967] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  142.641878][   T78] usb 1-1: ucan: probing device on interface #0
[  142.699120][ T5904] ums-cypress 2-1:2.196: USB Mass Storage device detected
[  142.750352][ T5904] usb 2-1: USB disconnect, device number 11
[  142.811161][ T5967] usb 4-1: Using ep0 maxpacket: 16
[  142.825661][ T5967] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  142.836210][ T5967] usb 4-1: config 0 has no interface number 0
[  142.846328][ T5967] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  142.947816][ T5967] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  142.958171][ T5967] usb 4-1: config 0 interface 41 has no altsetting 0
[  142.970093][ T5967] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  142.979975][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.007678][ T5967] usb 4-1: Product: syz
[  143.020055][ T5967] usb 4-1: Manufacturer: syz
[  143.073311][   T78] usb 1-1: ucan: could not read protocol version, ret=0
[  143.391962][ T5967] usb 4-1: SerialNumber: syz
[  143.398485][   T78] usb 1-1: ucan: probe failed; try to update the device firmware
[  143.412666][ T5967] usb 4-1: config 0 descriptor??
[  143.425767][ T6911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  143.435982][ T6911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  143.646274][ T6911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  143.653893][ T6911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  143.742969][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  143.911619][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  143.925376][ T5911] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  143.938838][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  143.950554][ T5911] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  143.970191][ T5911] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  143.986417][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0
[  143.997044][ T5911] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  144.008877][ T5911] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  144.019090][ T5911] usb 5-1: Product: syz
[  144.025503][ T5911] usb 5-1: Manufacturer: syz
[  144.045142][ T5904] usb 3-1: USB disconnect, device number 11
[  144.059762][ T5911] usb 5-1: SerialNumber: syz
[  144.075532][ T5911] usb 5-1: config 0 descriptor??
[  144.086982][ T5911] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  144.099592][ T5911] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  144.191684][ T1545] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  144.285589][ T5967] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  144.371199][ T1545] usb 2-1: Using ep0 maxpacket: 16
[  144.379917][ T1545] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  144.415967][ T1545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  144.427263][ T1545] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  144.437699][ T1545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.448357][ T1545] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  144.460350][ T1545] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  144.469723][ T1545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.481333][ T1545] usb 2-1: Product: syz
[  144.486325][ T1545] usb 2-1: Manufacturer: syz
[  144.492767][ T1545] usb 2-1: SerialNumber: syz
[  144.503572][ T1545] usb 2-1: config 0 descriptor??
[  144.528668][ T5967] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  144.552934][ T1545] port100 2-1:0.0: NFC: Could not get supported command types
[  144.574779][ T5967] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  144.604850][ T5967] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  144.630402][ T5967] usb 4-1: USB disconnect, device number 7
[  144.874523][ T1545] usb 5-1: USB disconnect, device number 10
[  144.880460][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  144.914264][ T6935] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  145.081215][ T1545] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  145.401125][   T78] usb 1-1: USB disconnect, device number 8
[  145.441477][   T36] wlan1: Trigger new scan to find an IBSS to join
[  145.733573][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  145.733588][   T30] audit: type=1400 audit(1757171094.194:369): avc:  denied  { accept } for  pid=6941 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  146.323641][   T78] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  146.521414][   T78] usb 4-1: device descriptor read/64, error -71
[  146.771112][   T78] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.902314][   T78] usb 4-1: device descriptor read/64, error -71
[  147.431522][   T78] usb usb4-port1: attempt power cycle
[  147.470497][ T6964] dummy0: entered promiscuous mode
[  147.487514][ T1545] usb 2-1: USB disconnect, device number 12
[  147.515544][   T36] wlan1: Creating new IBSS network, BSSID 96:a8:23:3c:eb:e7
[  147.544762][   T30] audit: type=1400 audit(1757171095.964:370): avc:  denied  { write } for  pid=6965 comm="syz.0.243" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  147.776931][ T6972] tipc: Started in network mode
[  147.785944][ T6972] tipc: Node identity ac14140f, cluster identity 4711
[  147.797151][ T6972] tipc: New replicast peer: 255.255.255.255
[  147.807732][ T6972] tipc: Enabled bearer <udp:syz2>, priority 10
[  148.399036][   T78] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  148.421876][ T6963] dummy0: left promiscuous mode
[  148.429808][   T78] usb 4-1: device descriptor read/8, error -71
[  148.802155][   T30] audit: type=1400 audit(1757171097.244:371): avc:  denied  { bind } for  pid=6979 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  148.822569][ T5911] tipc: Node number set to 2886997007
[  149.053868][   T30] audit: type=1400 audit(1757171097.244:372): avc:  denied  { node_bind } for  pid=6979 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  149.473908][   T30] audit: type=1400 audit(1757171097.924:373): avc:  denied  { setopt } for  pid=6987 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  149.521358][   T30] audit: type=1400 audit(1757171097.924:374): avc:  denied  { bind } for  pid=6987 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  149.648757][   T30] audit: type=1326 audit(1757171097.934:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88b258ebe9 code=0x0
[  149.675466][   T30] audit: type=1400 audit(1757171098.124:376): avc:  denied  { getopt } for  pid=6988 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  150.401428][   T30] audit: type=1400 audit(1757171098.344:377): avc:  denied  { execute_no_trans } for  pid=6987 comm="syz.1.248" path="/59/file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  150.641096][   T30] audit: type=1400 audit(1757171098.964:378): avc:  denied  { read } for  pid=6999 comm="syz.2.250" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  150.787566][ T7011] : Can't lookup blockdev
[  150.867785][ T7011] bridge0: entered promiscuous mode
[  150.993601][ T7011] macsec1: entered promiscuous mode
[  151.024060][ T7011] bridge0: port 3(macsec1) entered blocking state
[  151.030858][ T7011] bridge0: port 3(macsec1) entered disabled state
[  151.091281][   T78] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  151.164277][ T7018] =======================================================
[  151.164277][ T7018] WARNING: The mand mount option has been deprecated and
[  151.164277][ T7018]          and is ignored by this kernel. Remove the mand
[  151.164277][ T7018]          option from the mount to silence this warning.
[  151.164277][ T7018] =======================================================
[  151.251238][ T7018] overlayfs: missing 'lowerdir'
[  151.262958][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  151.262991][   T30] audit: type=1400 audit(1757171099.594:383): avc:  denied  { getopt } for  pid=7012 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  151.427026][ T7011] macsec1: entered allmulticast mode
[  151.442043][ T7011] bridge0: entered allmulticast mode
[  151.475536][   T30] audit: type=1400 audit(1757171099.664:384): avc:  denied  { mount } for  pid=7012 comm="syz.0.254" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  151.498535][   T30] audit: type=1400 audit(1757171099.704:385): avc:  denied  { mounton } for  pid=7012 comm="syz.0.254" path="/43/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  151.524009][ T7011] macsec1: left allmulticast mode
[  151.532354][ T7011] bridge0: left allmulticast mode
[  151.579644][ T7011] bridge0: left promiscuous mode
[  151.601184][   T78] usb 2-1: device descriptor read/64, error -71
[  151.738453][   T30] audit: type=1400 audit(1757171100.194:386): avc:  denied  { unmount } for  pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  151.883060][   T78] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  151.951134][ T5911] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  152.141135][   T78] usb 2-1: device descriptor read/64, error -71
[  152.200197][ T5911] usb 5-1: Using ep0 maxpacket: 8
[  152.251341][   T78] usb usb2-port1: attempt power cycle
[  152.251408][ T5911] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  152.281118][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.536410][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'.
[  152.555678][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.592826][ T5911] usb 5-1: Product: syz
[  152.601297][ T5911] usb 5-1: Manufacturer: syz
[  152.615687][ T5911] usb 5-1: SerialNumber: syz
[  152.647012][ T5911] usb 5-1: config 0 descriptor??
[  152.673868][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  152.881175][   T78] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  152.910952][   T78] usb 2-1: device descriptor read/8, error -71
[  153.041446][ T5967] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  153.101124][ T5919] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  153.171578][   T78] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  153.192610][ T5967] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  153.205125][   T78] usb 2-1: device descriptor read/8, error -71
[  153.218085][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.231352][ T5919] usb 3-1: device descriptor read/64, error -71
[  153.256835][ T5967] usb 4-1: config 0 descriptor??
[  153.361521][   T78] usb usb2-port1: unable to enumerate USB device
[  153.501497][ T5919] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  153.651261][ T5919] usb 3-1: device descriptor read/64, error -71
[  153.761419][ T5919] usb usb3-port1: attempt power cycle
[  154.086201][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.097747][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.121190][ T5919] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  154.151708][ T5919] usb 3-1: device descriptor read/8, error -71
[  154.418037][ T5919] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  154.450979][   T30] audit: type=1400 audit(1757171102.904:387): avc:  denied  { read } for  pid=7055 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.451625][ T5919] usb 3-1: device descriptor read/8, error -71
[  154.491118][   T30] audit: type=1400 audit(1757171102.934:388): avc:  denied  { write } for  pid=7055 comm="syz.0.266" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  154.491301][ T5848] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  154.514215][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.602624][ T7056] overlayfs: missing 'lowerdir'
[  154.651424][ T5919] usb usb3-port1: unable to enumerate USB device
[  154.701209][ T5848] usb 2-1: Using ep0 maxpacket: 32
[  154.718587][ T5848] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  154.743917][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.761355][ T5848] usb 2-1: config 0 has no interface number 0
[  154.771612][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.789813][ T5848] usb 2-1: config 0 has no interface number 0
[  154.800942][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.819495][ T5848] usb 2-1: config 0 has no interface number 0
[  154.831579][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.843033][ T5904] usb 5-1: USB disconnect, device number 11
[  154.854171][ T5848] usb 2-1: config 0 has no interface number 0
[  154.878187][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.893211][ T5848] usb 2-1: config 0 has no interface number 0
[  154.911014][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.935573][ T5848] usb 2-1: config 0 has no interface number 0
[  154.954006][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.967825][ T5848] usb 2-1: config 0 has no interface number 0
[  154.981470][ T5967] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  154.995298][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  154.997130][   T30] audit: type=1400 audit(1757171103.434:389): avc:  denied  { connect } for  pid=7063 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  155.005332][ T5967] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  155.035058][ T5848] usb 2-1: config 0 has no interface number 0
[  155.042393][ T5967] asix 4-1:0.0: probe with driver asix failed with error -71
[  155.053197][ T5848] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  155.062360][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.070323][ T5848] usb 2-1: Product: syz
[  155.082541][ T5848] usb 2-1: Manufacturer: syz
[  155.087137][ T5848] usb 2-1: SerialNumber: syz
[  155.088889][   T30] audit: type=1400 audit(1757171103.544:390): avc:  denied  { write } for  pid=7063 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  155.092107][ T5967] usb 4-1: USB disconnect, device number 12
[  155.110916][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.125498][ T5848] usb 2-1: config 0 descriptor??
[  155.135374][ T5848] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  155.191184][ T5911] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  155.331123][ T5911] usb 1-1: device descriptor read/64, error -71
[  155.345567][ T5848] etas_es58x 2-1:0.2: could not parse product info: '424242424242'
[  155.581107][ T5911] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  155.634789][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.270'.
[  155.712610][    C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0005.
[  155.723751][    C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  155.731717][    C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG
[  155.740120][    C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  155.751081][    C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  155.759042][    C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG
[  155.766763][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.772827][ T5911] usb 1-1: device descriptor read/64, error -71
[  155.779526][ T5514] etas_es58x 2-1:0.2 can1: bit-timing not yet defined
[  155.857065][   T30] audit: type=1400 audit(1757171104.314:391): avc:  denied  { name_bind } for  pid=7083 comm="syz.2.271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  155.901117][ T5848] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  155.994527][ T5911] usb usb1-port1: attempt power cycle
[  156.013422][ T7053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.265'.
[  156.341279][ T5911] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  156.423757][ T5911] usb 1-1: device descriptor read/8, error -71
[  156.501261][ T5848] usb 4-1: device descriptor read/64, error -71
[  156.739154][ T5911] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  156.751156][ T5848] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  156.764816][ T5911] usb 1-1: device descriptor read/8, error -71
[  156.807178][ T5514] etas_es58x 2-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain
[  156.815738][ T1545] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  156.826798][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  156.835153][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  156.843895][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  156.845236][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'.
[  156.851552][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  156.868886][ T5514] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  156.881802][ T5911] usb usb1-port1: unable to enumerate USB device
[  156.891637][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.901349][ T5848] usb 4-1: device descriptor read/64, error -71
[  156.902506][ T5903] usb 2-1: USB disconnect, device number 17
[  156.914902][ T5903] etas_es58x 2-1:0.2: Disconnecting syz syz
[  156.961652][ T1545] usb 5-1: Using ep0 maxpacket: 32
[  156.968602][ T1545] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  156.980926][ T1545] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  157.002781][ T1545] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  157.018562][ T1545] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  157.031314][ T5848] usb usb4-port1: attempt power cycle
[  157.032947][ T1545] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.046427][ T1545] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  157.072458][ T1545] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  157.085725][ T1545] usb 5-1: Product: syz
[  157.089898][ T1545] usb 5-1: Manufacturer: syz
[  157.094636][ T1545] usb 5-1: SerialNumber: syz
[  157.101226][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  157.104069][ T1545] usb 5-1: config 0 descriptor??
[  157.130957][ T1545] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  157.143014][ T1545] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  157.251209][ T5919] usb 3-1: device descriptor read/64, error -71
[  157.393919][ T5848] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  157.426980][ T5848] usb 4-1: device descriptor read/8, error -71
[  157.505019][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  157.721622][ T5919] usb 3-1: device descriptor read/64, error -71
[  157.944208][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'.
[  157.955208][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.011615][ T5848] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  158.086355][ T5848] usb 4-1: device descriptor read/8, error -71
[  158.098852][   T30] audit: type=1400 audit(1757171106.554:392): avc:  denied  { append } for  pid=7139 comm="syz.0.278" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  158.131442][ T5919] usb usb3-port1: attempt power cycle
[  158.180257][   T30] audit: type=1400 audit(1757171106.634:393): avc:  denied  { write } for  pid=7139 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  158.222355][ T7138] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  158.231567][ T5848] usb usb4-port1: unable to enumerate USB device
[  158.339540][ T7094] ldusb 5-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  158.377993][ T5848] usb 5-1: USB disconnect, device number 12
[  158.384134][    C1] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  158.405220][ T5848] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  158.651294][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  158.673529][ T5919] usb 3-1: device descriptor read/8, error -71
[  159.026730][ T5848] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  159.034722][ T5919] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  159.124186][ T5919] usb 3-1: device descriptor read/8, error -71
[  159.231140][ T5848] usb 2-1: Using ep0 maxpacket: 16
[  159.299026][ T5848] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  159.318696][ T5919] usb usb3-port1: unable to enumerate USB device
[  159.414463][ T5848] usb 2-1: config 0 has no interface number 0
[  159.500426][ T5848] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.904314][ T5848] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.977137][ T5848] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  160.255550][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.283343][ T5848] usb 2-1: config 0 descriptor??
[  160.315854][ T7163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.282'.
[  160.403480][ T7166] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  160.439784][   T30] audit: type=1400 audit(1757171108.894:394): avc:  denied  { firmware_load } for  pid=7165 comm="syz.2.286" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  160.460192][ T7166] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  161.037473][ T5848] uclogic 0003:28BD:0071.0005: pen parameters not found
[  161.077872][ T5848] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring
[  161.246889][ T5848] usb 2-1: USB disconnect, device number 18
[  161.541243][ T5919] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  161.724806][ T5919] usb 3-1: device descriptor read/64, error -71
[  161.911652][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'.
[  162.026341][ T7197] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  162.048794][ T7198] 9pnet_fd: Insufficient options for proto=fd
[  162.069318][ T7198] 9pnet_virtio: no channels available for device sit0
[  162.089180][ T7190] xt_time: invalid argument - start or stop time greater than 23:59:59
[  162.145029][   T30] audit: type=1400 audit(1757171110.594:395): avc:  denied  { mount } for  pid=7188 comm="syz.1.292" name="/" dev="ramfs" ino=13614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  162.161135][ T5919] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  162.330404][ T5919] usb 3-1: device descriptor read/64, error -71
[  162.441607][ T5919] usb usb3-port1: attempt power cycle
[  162.860274][ T5919] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  162.881923][ T5919] usb 3-1: device descriptor read/8, error -71
[  163.453272][ T5919] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  163.817808][   T30] audit: type=1400 audit(1757171112.274:396): avc:  denied  { getopt } for  pid=7211 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  163.951188][ T5919] usb 3-1: device not accepting address 23, error -71
[  163.976549][   T30] audit: type=1400 audit(1757171112.374:397): avc:  denied  { name_bind } for  pid=7213 comm="syz.2.298" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  163.978714][ T5919] usb usb3-port1: unable to enumerate USB device
[  164.469343][   T30] audit: type=1400 audit(1757171112.904:398): avc:  denied  { map } for  pid=7213 comm="syz.2.298" path="socket:[13650]" dev="sockfs" ino=13650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  164.523733][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[  164.549520][   T30] audit: type=1400 audit(1757171112.994:399): avc:  denied  { map } for  pid=7227 comm="syz.1.302" path="/proc/246/sched" dev="proc" ino=13291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  164.737186][   T30] audit: type=1400 audit(1757171113.194:400): avc:  denied  { getopt } for  pid=7229 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  164.767586][ T5903] libceph: connect (1)[c::]:6789 error -101
[  164.778299][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[  164.787197][ T7237] ceph: No mds server is up or the cluster is laggy
[  164.908156][ T7247] 9pnet_fd: Insufficient options for proto=fd
[  165.050991][ T7249] xt_time: invalid argument - start or stop time greater than 23:59:59
[  165.249459][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  165.358338][   T30] audit: type=1400 audit(1757171113.804:401): avc:  denied  { watch_mount } for  pid=7246 comm="syz.4.307" path="/57" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  165.411678][ T5903] usb 4-1: Using ep0 maxpacket: 16
[  165.422449][ T5903] usb 4-1: config 2 has an invalid interface number: 196 but max is 1
[  165.443057][ T5903] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  165.472327][ T5903] usb 4-1: config 2 has no interface number 0
[  165.488910][ T5903] usb 4-1: config 2 interface 196 has no altsetting 0
[  165.655363][ T5903] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56
[  165.665987][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.674743][ T5903] usb 4-1: Product: syz
[  165.678939][ T5903] usb 4-1: Manufacturer: syz
[  165.684237][ T5903] usb 4-1: SerialNumber: syz
[  166.667717][ T5903] ums-cypress 4-1:2.196: USB Mass Storage device detected
[  166.758920][ T5903] usb 4-1: USB disconnect, device number 17
[  166.877510][   T30] audit: type=1400 audit(1757171115.314:402): avc:  denied  { connect } for  pid=7269 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  166.929439][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  167.289231][   T30] audit: type=1400 audit(1757171115.744:403): avc:  denied  { read } for  pid=7281 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  168.307366][   T30] audit: type=1400 audit(1757171116.764:404): avc:  denied  { getopt } for  pid=7294 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  168.511134][   T78] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  168.530294][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.321'.
[  168.931889][ T1545] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  169.020970][   T78] usb 2-1: Using ep0 maxpacket: 32
[  169.145002][ T1545] usb 3-1: Using ep0 maxpacket: 32
[  169.473728][ T1545] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.487869][ T1545] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.500427][ T1545] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  169.529690][   T78] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  169.537932][ T1545] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  169.537958][ T1545] usb 3-1: Product: syz
[  169.537971][ T1545] usb 3-1: Manufacturer: syz
[  169.561794][ T7308] FAULT_INJECTION: forcing a failure.
[  169.561794][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.575700][   T78] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  169.590946][   T78] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  169.596245][ T1545] hub 3-1:4.0: USB hub found
[  169.605151][   T78] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  169.621754][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) 
[  169.621776][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  169.621786][ T7308] Call Trace:
[  169.621791][ T7308]  <TASK>
[  169.621797][ T7308]  dump_stack_lvl+0x16c/0x1f0
[  169.621823][ T7308]  should_fail_ex+0x512/0x640
[  169.621849][ T7308]  _copy_from_iter+0x29f/0x1720
[  169.621878][ T7308]  ? __pfx__copy_from_iter+0x10/0x10
[  169.621902][ T7308]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  169.621932][ T7308]  copy_page_from_iter+0xde/0x180
[  169.621958][ T7308]  tun_build_skb.constprop.0+0x2e8/0x1500
[  169.621993][ T7308]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  169.622017][ T7308]  ? unwind_get_return_address+0x59/0xa0
[  169.622037][ T7308]  ? arch_stack_walk+0xa6/0x100
[  169.622071][ T7308]  ? _kstrtoull+0x145/0x200
[  169.622089][ T7308]  ? __pfx__kstrtoull+0x10/0x10
[  169.622108][ T7308]  tun_get_user+0x14ae/0x3ce0
[  169.622143][ T7308]  ? __pfx_tun_get_user+0x10/0x10
[  169.622171][ T7308]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  169.622202][ T7308]  ? find_held_lock+0x2b/0x80
[  169.622234][ T7308]  ? tun_get+0x191/0x370
[  169.622263][ T7308]  tun_chr_write_iter+0xdc/0x210
[  169.622291][ T7308]  vfs_write+0x7d0/0x11d0
[  169.622309][ T7308]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  169.622338][ T7308]  ? __pfx_vfs_write+0x10/0x10
[  169.622352][ T7308]  ? find_held_lock+0x2b/0x80
[  169.622386][ T7308]  ksys_write+0x12a/0x250
[  169.622403][ T7308]  ? __pfx_ksys_write+0x10/0x10
[  169.622427][ T7308]  do_syscall_64+0xcd/0x4c0
[  169.622451][ T7308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.622481][ T7308] RIP: 0033:0x7efee098d69f
[  169.622495][ T7308] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  169.622509][ T7308] RSP: 002b:00007efee1859000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  169.622526][ T7308] RAX: ffffffffffffffda RBX: 00007efee0bc5fa0 RCX: 00007efee098d69f
[  169.622537][ T7308] RDX: 000000000000034e RSI: 0000200000001140 RDI: 00000000000000c8
[  169.622547][ T7308] RBP: 00007efee1859090 R08: 0000000000000000 R09: 0000000000000000
[  169.622557][ T7308] R10: 000000000000034e R11: 0000000000000293 R12: 0000000000000001
[  169.622567][ T7308] R13: 00007efee0bc6038 R14: 00007efee0bc5fa0 R15: 00007fff9435c638
[  169.622590][ T7308]  </TASK>
[  169.624393][   T78] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.755609][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'.
[  169.989386][   T30] audit: type=1326 audit(1757171118.434:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6539f8ebe9 code=0x7ffc0000
[  170.112940][   T30] audit: type=1326 audit(1757171118.434:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6539f8ebe9 code=0x7ffc0000
[  170.201326][   T78] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  170.210534][   T78] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  170.219199][   T78] usb 2-1: Product: syz
[  170.223623][   T78] usb 2-1: Manufacturer: syz
[  170.228324][   T78] usb 2-1: SerialNumber: syz
[  170.253477][   T78] usb 2-1: config 0 descriptor??
[  170.277963][   T30] audit: type=1326 audit(1757171118.434:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6539f8ebe9 code=0x7ffc0000
[  170.317493][   T78] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  170.361594][   T78] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  170.582561][   T30] audit: type=1326 audit(1757171118.434:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6539f90b07 code=0x7ffc0000
[  170.626924][   T30] audit: type=1326 audit(1757171118.434:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6539f90a7c code=0x7ffc0000
[  170.853733][   T30] audit: type=1326 audit(1757171118.434:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6539f909b4 code=0x7ffc0000
[  170.953085][   T30] audit: type=1326 audit(1757171118.434:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6539f909b4 code=0x7ffc0000
[  171.051713][   T30] audit: type=1326 audit(1757171118.434:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6539f8d84a code=0x7ffc0000
[  171.077821][   T30] audit: type=1326 audit(1757171118.434:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6539f8ebe9 code=0x7ffc0000
[  171.109827][   T30] audit: type=1326 audit(1757171118.434:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6539f8ebe9 code=0x7ffc0000
[  171.133921][ T7326] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  171.135869][    T9] usb 2-1: USB disconnect, device number 19
[  171.140914][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  171.153671][   T78] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  171.174966][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  171.248947][ T7292] ldusb: No device or device unplugged -19
[  171.333057][   T78] usb 5-1: Using ep0 maxpacket: 8
[  171.464422][   T78] usb 5-1: config 0 has an invalid interface number: 46 but max is 0
[  171.472897][   T78] usb 5-1: config 0 has no interface number 0
[  171.487773][   T78] usb 5-1: New USB device found, idVendor=093a, idProduct=260f, bcdDevice=a4.45
[  171.502478][   T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.881191][   T78] usb 5-1: Product: syz
[  171.885389][   T78] usb 5-1: Manufacturer: syz
[  171.889985][   T78] usb 5-1: SerialNumber: syz
[  171.912074][   T78] usb 5-1: config 0 descriptor??
[  171.925932][   T78] gspca_main: pac7311-2.14.0 probing 093a:260f
[  171.950547][ T1545] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  172.017200][ T1545] usb 3-1: USB disconnect, device number 24
[  172.180699][ T7344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.334'.
[  172.326166][   T78] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  172.356000][   T78] pac7311 5-1:0.46: probe with driver pac7311 failed with error -71
[  172.383507][   T78] usb 5-1: USB disconnect, device number 13
[  172.435202][ T7349] mkiss: ax0: crc mode is auto.
[  173.241732][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  173.868753][    T9] usb 2-1: Using ep0 maxpacket: 32
[  173.883073][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.909409][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.922175][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  173.931736][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.942428][    T9] usb 2-1: config 0 descriptor??
[  174.649623][    T9] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  174.859638][ T7360] wireguard0: entered promiscuous mode
[  174.919719][    T9] usb 2-1: USB disconnect, device number 20
[  174.931797][ T7360] wireguard0: entered allmulticast mode
[  174.990963][ T7366] fido_id[7366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  175.399704][ T7369] tipc: New replicast peer: 255.255.255.255
[  175.417499][ T7369] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.057467][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  176.237804][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.290218][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[  176.376236][ T7387] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  176.404398][ T7387] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  176.418759][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.464460][   T78] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  176.472722][ T7384] dummy0: entered promiscuous mode
[  176.480657][    T9] usb 5-1: config 1 has no interface number 0
[  176.500105][    T9] usb 5-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  176.530788][    T9] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  176.540639][    T9] usb 5-1: config 1 interface 2 has no altsetting 1
[  176.548804][ T1545] tipc: Node number set to 3945226789
[  176.646746][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.658197][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.671593][   T78] usb 2-1: Using ep0 maxpacket: 32
[  176.673890][    T9] usb 5-1: Product: syz
[  177.155225][    T9] usb 5-1: Manufacturer: syz
[  177.159850][    T9] usb 5-1: SerialNumber: syz
[  177.228716][ T7394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.349'.
[  177.237324][   T78] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  177.238482][ T7383] dummy0: left promiscuous mode
[  177.251536][   T78] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  177.251571][   T78] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  177.251595][   T78] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  177.251619][   T78] usb 2-1: config 0 interface 0 has no altsetting 0
[  177.253367][   T78] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  177.305954][   T78] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  177.457981][   T78] usb 2-1: Product: syz
[  177.462938][   T78] usb 2-1: Manufacturer: syz
[  177.467604][   T78] usb 2-1: SerialNumber: syz
[  177.481122][   T78] usb 2-1: config 0 descriptor??
[  177.496992][   T78] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  177.506888][   T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  178.100842][   T78] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  178.356950][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  178.356965][   T30] audit: type=1400 audit(1757171126.814:445): avc:  denied  { shutdown } for  pid=7409 comm="syz.2.353" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  178.511543][ T1545] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  178.647540][ T7412] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  178.647908][    T9] usb 2-1: USB disconnect, device number 21
[  178.654640][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  178.667812][ T1545] usb 4-1: Using ep0 maxpacket: 32
[  178.679150][ T1545] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  178.693642][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  178.700308][ T1545] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  178.718860][ T1545] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  178.735020][ T7380] ldusb: No device or device unplugged -19
[  178.736598][ T1545] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  178.755756][ T1545] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.767930][ T1545] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  178.777345][ T1545] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  178.786143][ T1545] usb 4-1: Product: syz
[  178.790379][ T1545] usb 4-1: Manufacturer: syz
[  178.795629][ T1545] usb 4-1: SerialNumber: syz
[  178.810561][ T1545] usb 4-1: config 0 descriptor??
[  178.819431][ T1545] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  178.837045][ T1545] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  179.107000][ T7416] vxcan0: tx drop: invalid da for name 0x0000000000000012
[  179.347544][ T1545] usb 5-1: USB disconnect, device number 14
[  179.406850][   T30] audit: type=1400 audit(1757171127.864:446): avc:  denied  { setopt } for  pid=7417 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  179.795331][   T30] audit: type=1400 audit(1757171128.254:447): avc:  denied  { execute } for  pid=7417 comm="syz.2.355" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  180.132921][ T5848] usb 4-1: USB disconnect, device number 18
[  180.138857][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  180.145882][ T7426] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  180.195790][   T30] audit: type=1400 audit(1757171128.624:448): avc:  denied  { ioctl } for  pid=7419 comm="syz.4.356" path="socket:[14707]" dev="sockfs" ino=14707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  180.324802][ T7433] dummy0: entered promiscuous mode
[  180.342994][ T5848] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  180.610940][   T30] audit: type=1400 audit(1757171129.064:449): avc:  denied  { write } for  pid=7436 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  180.795939][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[  181.485200][ T7429] dummy0: left promiscuous mode
[  183.262440][   T30] audit: type=1400 audit(1757171131.184:450): avc:  denied  { setopt } for  pid=7472 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  183.286554][   T30] audit: type=1400 audit(1757171131.184:451): avc:  denied  { name_bind } for  pid=7472 comm="syz.2.367" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  183.307142][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.371086][ T1545] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  183.456252][   T30] audit: type=1400 audit(1757171131.904:452): avc:  denied  { ioctl } for  pid=7480 comm="syz.0.370" path="socket:[14931]" dev="sockfs" ino=14931 ioctlcmd=0xae71 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  183.596253][ T7485] tipc: Started in network mode
[  183.604305][ T7485] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  183.611794][ T7485] tipc: Enabled bearer <eth:team0>, priority 0
[  184.142394][ T1545] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 64, using maximum allowed: 30
[  184.162067][ T1545] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  184.176829][ T1545] usb 5-1: config 0 interface 0 has no altsetting 0
[  184.185078][ T1545] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  184.195975][ T1545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.223757][ T1545] usb 5-1: config 0 descriptor??
[  184.669644][ T1545] hackrf 5-1:0.0: Board ID: 00
[  184.686690][ T1545] hackrf 5-1:0.0: Firmware version: 
[  184.716603][ T1545] hackrf 5-1:0.0: Registered as swradio24
[  184.731203][   T78] tipc: Node number set to 11578026
[  184.731589][ T1545] videodev: could not get a free minor
[  184.798905][ T1545] hackrf 5-1:0.0: Failed to register as video device (-23)
[  184.824268][ T1545] hackrf 5-1:0.0: probe with driver hackrf failed with error -23
[  184.836793][ T7505] ==================================================================
[  184.844860][ T7505] BUG: KASAN: slab-use-after-free in _vb2_fop_release+0x218/0x280
[  184.852655][ T7505] Read of size 8 at addr ffff88807f3c4568 by task v4l_id/7505
[  184.860107][ T7505] 
[  184.862413][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  184.862429][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  184.862438][ T7505] Call Trace:
[  184.862443][ T7505]  <TASK>
[  184.862448][ T7505]  dump_stack_lvl+0x116/0x1f0
[  184.862467][ T7505]  print_report+0xcd/0x630
[  184.862481][ T7505]  ? __virt_addr_valid+0x81/0x610
[  184.862498][ T7505]  ? __phys_addr+0xe8/0x180
[  184.862514][ T7505]  ? _vb2_fop_release+0x218/0x280
[  184.862531][ T7505]  kasan_report+0xe0/0x110
[  184.862545][ T7505]  ? _vb2_fop_release+0x218/0x280
[  184.862564][ T7505]  ? __pfx_vb2_fop_release+0x10/0x10
[  184.862582][ T7505]  _vb2_fop_release+0x218/0x280
[  184.862599][ T7505]  ? __pfx_vb2_fop_release+0x10/0x10
[  184.862616][ T7505]  v4l2_release+0x37f/0x460
[  184.862629][ T7505]  ? evm_file_release+0xd0/0x200
[  184.862649][ T7505]  ? __pfx_v4l2_release+0x10/0x10
[  184.862661][ T7505]  __fput+0x402/0xb70
[  184.862680][ T7505]  fput_close_sync+0x118/0x210
[  184.862698][ T7505]  ? __pfx_fput_close_sync+0x10/0x10
[  184.862715][ T7505]  ? dnotify_flush+0x79/0x4c0
[  184.862734][ T7505]  __x64_sys_close+0x8b/0x120
[  184.862752][ T7505]  do_syscall_64+0xcd/0x4c0
[  184.862770][ T7505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.862783][ T7505] RIP: 0033:0x7fedf1ca7407
[  184.862794][ T7505] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  184.862807][ T7505] RSP: 002b:00007fffcc31ff90 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  184.862820][ T7505] RAX: ffffffffffffffda RBX: 00007fedf2366880 RCX: 00007fedf1ca7407
[  184.862829][ T7505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  184.862836][ T7505] RBP: 00007fedf23666e8 R08: 0000000000000000 R09: 0000000000000000
[  184.862844][ T7505] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  184.862852][ T7505] R13: 00007fffcc3201c0 R14: 00007fedf246b000 R15: 000055c60b57e4d8
[  184.862865][ T7505]  </TASK>
[  184.862869][ T7505] 
[  185.061165][ T7505] Allocated by task 1545:
[  185.065465][ T7505]  kasan_save_stack+0x33/0x60
[  185.070119][ T7505]  kasan_save_track+0x14/0x30
[  185.074771][ T7505]  __kasan_kmalloc+0xaa/0xb0
[  185.079336][ T7505]  hackrf_probe+0xd0/0x1ce0
[  185.083815][ T7505]  usb_probe_interface+0x303/0xa40
[  185.088897][ T7505]  really_probe+0x241/0xa90
[  185.093378][ T7505]  __driver_probe_device+0x1de/0x440
[  185.098638][ T7505]  driver_probe_device+0x4c/0x1b0
[  185.103638][ T7505]  __device_attach_driver+0x1df/0x310
[  185.108984][ T7505]  bus_for_each_drv+0x159/0x1e0
[  185.113809][ T7505]  __device_attach+0x1e4/0x4b0
[  185.118547][ T7505]  bus_probe_device+0x17f/0x1c0
[  185.123371][ T7505]  device_add+0x1148/0x1aa0
[  185.127854][ T7505]  usb_set_configuration+0x1187/0x1e20
[  185.133291][ T7505]  usb_generic_driver_probe+0xb1/0x110
[  185.138728][ T7505]  usb_probe_device+0xec/0x3e0
[  185.143469][ T7505]  really_probe+0x241/0xa90
[  185.147947][ T7505]  __driver_probe_device+0x1de/0x440
[  185.153206][ T7505]  driver_probe_device+0x4c/0x1b0
[  185.158206][ T7505]  __device_attach_driver+0x1df/0x310
[  185.163557][ T7505]  bus_for_each_drv+0x159/0x1e0
[  185.168385][ T7505]  __device_attach+0x1e4/0x4b0
[  185.173126][ T7505]  bus_probe_device+0x17f/0x1c0
[  185.177951][ T7505]  device_add+0x1148/0x1aa0
[  185.182434][ T7505]  usb_new_device+0xd07/0x1a60
[  185.187176][ T7505]  hub_event+0x2f34/0x4fe0
[  185.191572][ T7505]  process_one_work+0x9cc/0x1b70
[  185.196485][ T7505]  worker_thread+0x6c8/0xf10
[  185.201053][ T7505]  kthread+0x3c2/0x780
[  185.205094][ T7505]  ret_from_fork+0x5d4/0x6f0
[  185.209659][ T7505]  ret_from_fork_asm+0x1a/0x30
[  185.214402][ T7505] 
[  185.216704][ T7505] Freed by task 1545:
[  185.220656][ T7505]  kasan_save_stack+0x33/0x60
[  185.225311][ T7505]  kasan_save_track+0x14/0x30
[  185.229961][ T7505]  kasan_save_free_info+0x3b/0x60
[  185.234975][ T7505]  __kasan_slab_free+0x60/0x70
[  185.239735][ T7505]  kfree+0x2b4/0x4d0
[  185.243620][ T7505]  hackrf_probe+0x4c8/0x1ce0
[  185.248198][ T7505]  usb_probe_interface+0x303/0xa40
[  185.253289][ T7505]  really_probe+0x241/0xa90
[  185.257769][ T7505]  __driver_probe_device+0x1de/0x440
[  185.263030][ T7505]  driver_probe_device+0x4c/0x1b0
[  185.268030][ T7505]  __device_attach_driver+0x1df/0x310
[  185.273378][ T7505]  bus_for_each_drv+0x159/0x1e0
[  185.278204][ T7505]  __device_attach+0x1e4/0x4b0
[  185.282946][ T7505]  bus_probe_device+0x17f/0x1c0
[  185.287786][ T7505]  device_add+0x1148/0x1aa0
[  185.292281][ T7505]  usb_set_configuration+0x1187/0x1e20
[  185.297821][ T7505]  usb_generic_driver_probe+0xb1/0x110
[  185.303259][ T7505]  usb_probe_device+0xec/0x3e0
[  185.308006][ T7505]  really_probe+0x241/0xa90
[  185.312486][ T7505]  __driver_probe_device+0x1de/0x440
[  185.317747][ T7505]  driver_probe_device+0x4c/0x1b0
[  185.322750][ T7505]  __device_attach_driver+0x1df/0x310
[  185.328099][ T7505]  bus_for_each_drv+0x159/0x1e0
[  185.332933][ T7505]  __device_attach+0x1e4/0x4b0
[  185.337677][ T7505]  bus_probe_device+0x17f/0x1c0
[  185.342503][ T7505]  device_add+0x1148/0x1aa0
[  185.346996][ T7505]  usb_new_device+0xd07/0x1a60
[  185.351736][ T7505]  hub_event+0x2f34/0x4fe0
[  185.356130][ T7505]  process_one_work+0x9cc/0x1b70
[  185.361042][ T7505]  worker_thread+0x6c8/0xf10
[  185.365611][ T7505]  kthread+0x3c2/0x780
[  185.369652][ T7505]  ret_from_fork+0x5d4/0x6f0
[  185.374216][ T7505]  ret_from_fork_asm+0x1a/0x30
[  185.378957][ T7505] 
[  185.381255][ T7505] The buggy address belongs to the object at ffff88807f3c4000
[  185.381255][ T7505]  which belongs to the cache kmalloc-8k of size 8192
[  185.395456][ T7505] The buggy address is located 1384 bytes inside of
[  185.395456][ T7505]  freed 8192-byte region [ffff88807f3c4000, ffff88807f3c6000)
[  185.409399][ T7505] 
[  185.411700][ T7505] The buggy address belongs to the physical page:
[  185.418086][ T7505] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f3c0
[  185.426816][ T7505] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  185.435287][ T7505] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  185.442806][ T7505] page_type: f5(slab)
[  185.446763][ T7505] raw: 00fff00000000040 ffff88801b842280 ffffea0000d83600 dead000000000004
[  185.455319][ T7505] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  185.463877][ T7505] head: 00fff00000000040 ffff88801b842280 ffffea0000d83600 dead000000000004
[  185.472519][ T7505] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  185.481166][ T7505] head: 00fff00000000003 ffffea0001fcf001 00000000ffffffff 00000000ffffffff
[  185.489811][ T7505] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  185.498452][ T7505] page dumped because: kasan: bad access detected
[  185.504855][ T7505] page_owner tracks the page as allocated
[  185.510625][ T7505] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6547, tgid 6538 (syz.1.147), ts 118110804462, free_ts 116158368266
[  185.531700][ T7505]  post_alloc_hook+0x1c0/0x230
[  185.536470][ T7505]  get_page_from_freelist+0x132b/0x38e0
[  185.541996][ T7505]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  185.548048][ T7505]  alloc_pages_mpol+0x1fb/0x550
[  185.552886][ T7505]  new_slab+0x247/0x330
[  185.557040][ T7505]  ___slab_alloc+0xcf2/0x1750
[  185.561713][ T7505]  __slab_alloc.constprop.0+0x56/0xb0
[  185.567072][ T7505]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  185.573461][ T7505]  kmalloc_reserve+0xef/0x2c0
[  185.578119][ T7505]  __alloc_skb+0x166/0x380
[  185.582510][ T7505]  netlink_dump+0x644/0xd30
[  185.586992][ T7505]  netlink_recvmsg+0x7dc/0xa90
[  185.591731][ T7505]  ____sys_recvmsg+0x5f6/0x6b0
[  185.596479][ T7505]  ___sys_recvmsg+0x114/0x1a0
[  185.601133][ T7505]  do_recvmmsg+0x2fe/0x750
[  185.605528][ T7505]  __x64_sys_recvmmsg+0x22a/0x280
[  185.610537][ T7505] page last free pid 5219 tgid 5219 stack trace:
[  185.616833][ T7505]  __free_frozen_pages+0x7d5/0x10f0
[  185.622013][ T7505]  __put_partials+0x165/0x1c0
[  185.626668][ T7505]  qlist_free_all+0x4d/0x120
[  185.631230][ T7505]  kasan_quarantine_reduce+0x195/0x1e0
[  185.636663][ T7505]  __kasan_slab_alloc+0x69/0x90
[  185.641486][ T7505]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  185.647355][ T7505]  __alloc_skb+0x2b2/0x380
[  185.651746][ T7505]  netlink_alloc_large_skb+0x69/0x130
[  185.657096][ T7505]  netlink_sendmsg+0x6a1/0xdd0
[  185.661843][ T7505]  ____sys_sendmsg+0xa98/0xc70
[  185.666585][ T7505]  ___sys_sendmsg+0x134/0x1d0
[  185.671235][ T7505]  __sys_sendmsg+0x16d/0x220
[  185.675820][ T7505]  do_syscall_64+0xcd/0x4c0
[  185.680302][ T7505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.686170][ T7505] 
[  185.688469][ T7505] Memory state around the buggy address:
[  185.694070][ T7505]  ffff88807f3c4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.702126][ T7505]  ffff88807f3c4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.710163][ T7505] >ffff88807f3c4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.718195][ T7505]                                                           ^
[  185.725626][ T7505]  ffff88807f3c4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.733665][ T7505]  ffff88807f3c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  185.741695][ T7505] ==================================================================
[  185.749831][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.995591][ T5848] usb 5-1: USB disconnect, device number 15
[  186.327926][ T7505] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  186.335131][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  186.344033][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  186.354058][ T7505] Call Trace:
[  186.357308][ T7505]  <TASK>
[  186.360214][ T7505]  dump_stack_lvl+0x3d/0x1f0
[  186.364781][ T7505]  vpanic+0x6e8/0x7a0
[  186.368747][ T7505]  ? __pfx_vpanic+0x10/0x10
[  186.373227][ T7505]  ? __pfx_vprintk_emit+0x10/0x10
[  186.378231][ T7505]  ? _vb2_fop_release+0x218/0x280
[  186.383230][ T7505]  panic+0xca/0xd0
[  186.386926][ T7505]  ? __pfx_panic+0x10/0x10
[  186.391317][ T7505]  ? _vb2_fop_release+0x218/0x280
[  186.396325][ T7505]  ? preempt_schedule_common+0x44/0xc0
[  186.401764][ T7505]  ? preempt_schedule_thunk+0x16/0x30
[  186.407117][ T7505]  ? check_panic_on_warn+0x1f/0xb0
[  186.412209][ T7505]  check_panic_on_warn+0xab/0xb0
[  186.417121][ T7505]  end_report+0x107/0x170
[  186.421424][ T7505]  kasan_report+0xee/0x110
[  186.425837][ T7505]  ? _vb2_fop_release+0x218/0x280
[  186.430836][ T7505]  ? __pfx_vb2_fop_release+0x10/0x10
[  186.436105][ T7505]  _vb2_fop_release+0x218/0x280
[  186.440928][ T7505]  ? __pfx_vb2_fop_release+0x10/0x10
[  186.446184][ T7505]  v4l2_release+0x37f/0x460
[  186.450662][ T7505]  ? evm_file_release+0xd0/0x200
[  186.455572][ T7505]  ? __pfx_v4l2_release+0x10/0x10
[  186.460565][ T7505]  __fput+0x402/0xb70
[  186.464521][ T7505]  fput_close_sync+0x118/0x210
[  186.469268][ T7505]  ? __pfx_fput_close_sync+0x10/0x10
[  186.474532][ T7505]  ? dnotify_flush+0x79/0x4c0
[  186.479212][ T7505]  __x64_sys_close+0x8b/0x120
[  186.483886][ T7505]  do_syscall_64+0xcd/0x4c0
[  186.488814][ T7505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.494794][ T7505] RIP: 0033:0x7fedf1ca7407
[  186.499187][ T7505] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  186.518776][ T7505] RSP: 002b:00007fffcc31ff90 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  186.527176][ T7505] RAX: ffffffffffffffda RBX: 00007fedf2366880 RCX: 00007fedf1ca7407
[  186.535131][ T7505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  186.543080][ T7505] RBP: 00007fedf23666e8 R08: 0000000000000000 R09: 0000000000000000
[  186.551033][ T7505] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  186.558990][ T7505] R13: 00007fffcc3201c0 R14: 00007fedf246b000 R15: 000055c60b57e4d8
[  186.566953][ T7505]  </TASK>
[  186.570133][ T7505] Kernel Offset: disabled
[  186.574434][ T7505] Rebooting in 86400 seconds..