last executing test programs:

8.845096064s ago: executing program 4 (id=2097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pselect6(0x40, &(0x7f0000000040)={0x5, 0x51987d7d, 0x8, 0x4, 0xffffffffffffffff, 0x2, 0x21, 0x66}, &(0x7f0000000080)={0x65, 0x8, 0x1, 0x8, 0x0, 0x4, 0x0, 0x4}, &(0x7f00000000c0)={0x4, 0x4, 0x8000000000000001, 0x9, 0x7, 0x5, 0x5, 0x3}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8})
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
getgid()
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)

7.914150831s ago: executing program 4 (id=2105):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r0, r1, 0x80000)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
ftruncate(r3, 0x6)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={<r4=>0x0, 0xf2, "57ac33d942da1bb30ead8eb05e38d992f06116630faeb302172d78d51678ee0452141176d7ace989e9b7750ea43438e01cf11d64322275fe1e627d3d8c55dfde2684e1db650a94be68062bedaaabef1de81138015fb38e527cbba1ae369b4ba41a45be78af276f5f09b12ff4e0d36a85ed79700a35f56db05f6c94d12bde626439801ba104d0be391f7a6f270a7d0be3ec64431e98bf92f27c426c2a3acd139be291f4ab2e61fbbf2dd0ff431cb783ab1ddd16d2e80aaaa0a16ffa8eafcde9a2446d849519675ab827fb442988511c8e6990e30ca740501fa031b3fe76b0a2c1c099e4012b44644b264d02c3a682b45a3cbb"}, &(0x7f0000000000)=0xfa)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r4, 0x4, 0x400, 0x0, 0x1, 0x7}, 0x14)
listen(r1, 0x0)
shutdown(r0, 0x0)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

7.644421442s ago: executing program 4 (id=2106):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509ff80c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.705210623s ago: executing program 1 (id=2111):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) (async)
io_setup(0x10000, &(0x7f0000000800)) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000076, 0x20000014) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async, rerun: 32)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil})
io_setup(0x7a, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r6) (async)
sendmmsg$unix(r5, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e31}, 0x6e, 0x0}}], 0x2, 0x40008004)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x7, 0x2a980) (async, rerun: 32)
r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 64)
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0844123, &(0x7f0000000000)=0x6) (async)
write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e)

6.683967661s ago: executing program 4 (id=2112):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r0 = socket(0x26, 0x3, 0x7)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x200, 0x0, 0x8009}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x1, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d})
io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
close(r1)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)
socket(0x8, 0x80000, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xcc5fb39023589bf4}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1c, 0xfa00, {0x4, &(0x7f00000000c0), 0x13f, 0x5}}, 0x28)
listen(r6, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$bt_sco(r0, &(0x7f0000000380)={0x1f, @none}, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0)

6.592526831s ago: executing program 0 (id=2113):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7})
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.442421527s ago: executing program 3 (id=2114):
recvmsg(0xffffffffffffffff, 0x0, 0x40002000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x100, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x207, 0x8, 0x3, 0x3}, 0x8, 0x2}}, &(0x7f0000000180), 0x2000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.441916287s ago: executing program 1 (id=2115):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x6b5b, 0x8b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r2)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ftruncate(0xffffffffffffffff, 0x7000000000000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r6)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2)

5.979841323s ago: executing program 0 (id=2116):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup3(r0, r1, 0x0)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = getpgrp(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)

4.850642829s ago: executing program 3 (id=2118):
r0 = socket$inet_sctp(0x2, 0xa, 0x84)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @local}, 0x12, {0x2, 0x4e24, @multicast2}, 'ipvlan0\x00'})
r1 = fcntl$dupfd(r0, 0x406, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [<r2=>0x0, 0x0, <r3=>0x0]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xf8000000}, 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x5, 0x7, 0x200, 0x141]}, 0xc)
io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000180)="756765f3038dc32fa1121a99ca5828d178aee912579474dc3bc171564fc432cb3397ccc51922dbd278b82ae3cae26ca5b905202f9cd081e4e537e62f25269b0ae50bcbf792683bff6dab9219b6c778a0c6460e8128c2028c8d02167eeda931ce88f920b71b431f303380fbad47f7a2c9ce32735c263da2ab6f8be2956f3a3c49db2a9b43b2ccb67daf86a330292b8edfbc86cc06dcc4f2c145fa490be8d1fa459eeabcd244fa3654adf9d0996202640c98e59fc450f0005febca91bb2cc5b5305b8e49f3c23ee652ba0965271955e15f08b02a86fdd3e449242a2f32da841fa913aebdc5f9240bad9fec", 0xea, 0x1, 0x7, 0x70}, 0x1}, 0x1)
recvfrom$rxrpc(r1, &(0x7f0000000300)=""/239, 0xef, 0x10063, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000440))
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='fsi_master_gpio_cmd_abs_addr\x00', r1}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000500))
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000680)={0x10000011})
r8 = openat2(r1, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x48, 0x2}, 0x18)
read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000002780)={0x50, 0x0, r9, {0x7, 0x2b, 0x8, 0x0, 0x8, 0x97, 0x6, 0x2, 0x0, 0x0, 0x20, 0x3ff}}, 0x50)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002800)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e)
syz_kvm_setup_cpu$x86(r10, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000002900)=[@text32={0x20, &(0x7f0000002880)="d912660f3882664c67f2650fb7e8660f388202da7089c4c27918db66baf80cb8e7335b8def66bafc0cecb9800000c00f3235000400000f30660fc7b3008000009af17f00003400", 0x47}], 0x1, 0x1, &(0x7f0000002940)=[@cstype3, @dstype0={0x6, 0x9}], 0x2)
r11 = signalfd4(r4, &(0x7f0000002980)={[0xf1]}, 0x8, 0x80800)
accept4$rose(r11, &(0x7f00000029c0)=@full={0xb, @dev, @rose, 0x0, [@netrom, @bcast, @null, @bcast, @rose, @netrom]}, &(0x7f0000002a00)=0x40, 0x800)
write$yama_ptrace_scope(r8, &(0x7f0000002a40)='1\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wlan0\x00'})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000002ac0)={r2, 0xfffe}, 0x8)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002b40), r12)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000003880)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003840)={&(0x7f0000002f00)={0x918, r13, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "c2f2077621953b1238810096d681c7132951416d5bde3a4fd7a9a33374e93729dde10ecf99bfc6a208455620d9551b130977f9f38297ecdc31dc0cf2b085d4649bb1a3f6b556fdf552ce8c58c8cd10dd362d26da3dde37a720e2f2fc1a38215a10600fca034261c59e82300ba91cd651f358445c1a9d474d293bd4e8801ebb63707f60f29658f87dbaf4fa1c0e50dd643103dfc0fc6b8425550cd03a672b07b04e4213df9cc051523b956a37acadf01be92d306da7cd8597ffe423c0558bad3f80fbb36b1bcdd66dc6e8378e582b000574629c851ba568880741a3fccca4bb48ac878efb0b314147c35ae5c773c9c9"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "1bbf301a3ca48e3c89a0a9f1beedd3936b33b80c7e18ff9b07c966ff7dd7aeec08671499398561b1c2b617f1618ab50b7ea01eda5dbd7496e88a46f6cb7dfd61c7267fa5587e7f13932208f487cad8faa50b77b0352e9d1e4c36d7524ee3f9f51bb0fa99708e9a4195e6da3569cdb1cfce3a1eb043c9762a6bfd101f2b2007c3e6dfb6d3b41e02dc80ccc7152d6cd6a2d41169804dcb292542387cfe2a2aa62ce8d1a40ae71a70952f2d97f6967814ea1df84c0e2088f0a0870a99"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "4b5ca203030197708133802c75f66fbd4099aa69270a7f80a6a5a73f4c7035e0022733b3ca94e1c6a66be54dca96e8ab38626ee377fa1f6b7acbec18d2712ca4ede79dcdae04d5e8f43187e3fa56b7c2496a32963d0351eeaa63ea7ca01b50e6b12b7a756358db91bd1861b90f994927167cd946933ce563"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "4fafab241f66c7fb2e45a7eb0eaa9cfd60071b72c6a9ae4b0de0ceb800b98e00aa461161c89edbc61ca107d4811dfd15b56b0f9c822ee012adf2a1520ca47dc3b704669b86ed8335a24847026c8c6bcb6a01b0b304f0c1888871f41134c0621458cd358f3f445310066a8c62f23f4da9e20b0ba831457f49e576a76d06d03567d3621ca88d199ad5c23f7171ad6b59594c80aff70a921eec2ec7dd280105c474da927e962457a9a70533ebc2727dac13586c6e5b5333b93ef67e4cc1104dd6d2d78ba80407292c2481ad6685fd2d6095cb12"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2fa4}, @ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "5c2e9e085738991627e0b501fae444e6cd55d18f1cd4cfca6464ba0b15cf33e5d7216323f9715b8a5b2dc424bb6d90612dc27f9afab20312f941a1d4776b6463fe41596d0c372f1f85a4ced55e87660d136c84d2e2e524955ac48e1c96c1031ba2796c2a0749893a673a9538a43aba0df4962afc62a71cc603723e4e4686a863bddbc1c3038e9c320910ff066aaf51212596ac6ab6262d5fb6bf29ab0dc54b10fba3"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "b340d2ce3292616bbd01f24ed7756b155026671997d2231468b419edbaed8ea958b7569a818c1be4760d176e0e63b4674ce2a662cae48e357cd209c585e358f9bd004802d5de55c76d7a194f1368cc8fc50a8c383a1f5ab3bc7b02c7d29e8210ee9f60a20d7bf56b9eff7842ca91d2bf4278565e4a62945169c65c637337127abd530d612cd50d278815d0b01e4439b762f8ca2bce3ee17c2e4bacd69dd4afd3a76690f2df7252d99938e68c59fb00a06800b4e0a5d5985f0823e17638e8fc9293883176db7b520438e3436ad99de131ccf328fa17ca68ccdb996f5242588b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x394, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "a3d7a7ded4b17e8d6eeb18ff67895101cec9bd22e9f4c2862d2ee39f0d66695c927e7ecab7b0ae82bc1b8ecc981dad0f23cd4d2e448526f36a3f6610717bf09e30cb5194f1d3fa14f145f25a5b7458f2342de22a5de7996283ad478c381cc3e7baa4eb9668a0686c7fb8"}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "8b06cb0b7a537109857e5f14312ab6f626d2c81b7383c8dcc2d404e2745de71255d8400189dfb33b6b3c5919a6536ba365b20a4ee0a99b3ee7d6b2adb97f3dd26db5b5fdaae54f6956b874cc29896237ab6a7afe287d04160cb6f17bad07a89bc77ef7b6e63fc359cc8833978c3b34af0af9e1fc454e9f634d99b2dfcab03c9a302469623bc6e6149e0195bc7db87acb11e7ec52f6e6f40d49c631943df466b3a9c568732175f12b180cdf1b2c14d8bff08a3a72c3eb7764e53a36632f8a47766d092d28a7967307babdde0a22c1"}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "e1c0473aaef2f0e585caaa40e68729eaafb01d2abbdaa02bb9f77e28ed00f02830a3d3f586041dd7364d442f3dc5718de8782b969e5d31cf26141ee0e6dc56f38b4b5fc7390e7d20e57dc133283f87f37df54d82fa8f3c717a7a16f299587c3a3db9cffb66a1ebb79213ecb88ff22c2c0e5fa129f4747c79c6b8defb43f52ba3ab21e7b4a8d479933d9e0258c896a17bf259368025e1943e71cffbb276ef4d7a3e11f6fdc0f0cf95f3f409f24bb38211a7fdf66c0bcd6784a6be45e34233fc3006e427d281d399538e19df57f7314840dc94e2002c6edae2a4fef7987387d652f1a6e7bde13ce4ceb5fefe5bb1793c2984601af212f9c1de5b5714928905"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcff7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, 'fsi_master_gpio_cmd_abs_addr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6e}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72ce}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*^\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, 'fsi_master_gpio_cmd_abs_addr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "800188738d5a5798f5ef061c8dc9ead72b1de6"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x918}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.662212346s ago: executing program 4 (id=2119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r4}, 0x18)
socket(0x8000000010, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x305041, 0x0)
ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0))
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000001d1, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0)

4.635374252s ago: executing program 1 (id=2120):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001e000103020000200000004705"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8926, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000140)=0x80, 0x80800)
connect$bt_rfcomm(r0, 0x0, 0x0)
connect$bt_rfcomm(r6, 0x0, 0x0)

4.135520773s ago: executing program 2 (id=2123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
clock_gettime(0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, &(0x7f0000000580), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044941, &(0x7f0000000880))
memfd_create(0x0, 0x2)
getpgid(0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)

4.047382293s ago: executing program 4 (id=2124):
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a32ff000000b8d86964395605a562fb92cf6428e2ffe114bb265c8a825e8ec4d9c76c06afffe1fd42ced0daf5c699fed8c92c7558ceb8f4ff47392380d35c32f02b6b7253a2685970f18ed16b8e5b742f986e6b23d0645c45e770c655d0e9975aaf6f7a7730de21abd9"], 0x34}}, 0x800)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
fchdir(r4)
fcntl$notify(r4, 0x402, 0x8000000f)
exit(0xffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
r7 = io_uring_setup(0x2f04, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x802, 0x4, 0x5})
io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x2f, 0x0, r7})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000380)=[r7, r3, r6], 0x3)
waitid(0x5, 0x0, &(0x7f0000002ff9), 0x0, 0x0)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1})
mq_timedsend(r8, 0x0, 0x0, 0xa, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="742b640bbfc054e57fc1cd2293f9f38fe80580e98c7800e0fadc64c64c7a798d0f", @ANYRES16=r9, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008054)

3.913119612s ago: executing program 0 (id=2125):
unshare(0x6a040000) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32)
r0 = socket(0x2a, 0x2, 0x0) (rerun: 32)
ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 64)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb79cd6f0259a31e78497a07e1665bc1277d325b2f475d8aaef5bb8026403006b724068c945e3dec82f4861821846a52f44c12ee4dbc660c46fa71b638ad897e71180c9bd5c9934e72f725adf0b30a5000000400"/119], 0x1c}, 0x1, 0x0, 0x0, 0x4044045}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r7], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000000000ff"], 0x28}}, 0x0) (async)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)

3.130385539s ago: executing program 3 (id=2126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
syz_open_dev$I2C(&(0x7f0000000880), 0x0, 0x101001)
r5 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x8000003d)
fcntl$setsig(r6, 0xa, 0x21)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000200)={0x8000000, 0x80, 0xffff})
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000ac0)=""/46)
r7 = gettid()
tkill(r7, 0x15)
prlimit64(r7, 0xe, &(0x7f00000001c0)={0x8, 0xd6c6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0)

3.129512728s ago: executing program 2 (id=2127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_a, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

3.054837951s ago: executing program 2 (id=2128):
recvmsg(0xffffffffffffffff, 0x0, 0x40002000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x100, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x207, 0x8, 0x3, 0x3}, 0x8, 0x2}}, &(0x7f0000000180), 0x2000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.770594016s ago: executing program 2 (id=2129):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r2}}}, 0x78) (async)
write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r2}}}, 0x78)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000640), 0x4)
ioctl$TCFLSH(r3, 0x8925, 0x80000000000000)

1.479672246s ago: executing program 3 (id=2130):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000004c0)={{0x7fffffff, 0x120}, 0x100, './file0\x00'})
ioctl$TIOCGPTPEER(r2, 0x933, 0x7)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)

1.378575657s ago: executing program 2 (id=2131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffffd0000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000003f0085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

1.32465092s ago: executing program 2 (id=2132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc, &(0x7f0000003500)={[{0x8, 0x4e00, "998f590d7117f6fc"}]})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x2004c011)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3}, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @loopback}, 0xe2, 0x0, 0x0, &(0x7f0000004880)=""/199, 0xfffffffffffffc97}, 0x9}, {{&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x2, 0x2001, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

1.187494351s ago: executing program 1 (id=2133):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000473e70a8ebdf08b27"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1d}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000"], 0x26}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275470491d135b9b61eac107d21c41aa4db597b25a0b579ee93", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.102350336s ago: executing program 0 (id=2134):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xb6, 0x8}}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000b0001004e45544d41508b00140000001000010000000000000000000000000a"], 0xb0}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000b0001004e45544d41508b00140000001000010000000000000000000000000a"], 0xb0}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r6)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000700000000095000000000000000000002300"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94)
r8 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000300)=""/201, 0xc9, 0x2122, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffff8, @remote, 0x3ff}}, 0x24) (async)
recvfrom$rxrpc(r0, &(0x7f0000000300)=""/201, 0xc9, 0x2122, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffff8, @remote, 0x3ff}}, 0x24)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async)
r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) (async)
write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r3, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.027719452s ago: executing program 1 (id=2135):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115})
shutdown(0xffffffffffffffff, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c)
connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1)

996.55475ms ago: executing program 3 (id=2136):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r6], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r6], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf4ce}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0)

978.783022ms ago: executing program 0 (id=2137):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

786.369483ms ago: executing program 3 (id=2138):
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000045e000/0x2000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
madvise(&(0x7f00000ea000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
mprotect(&(0x7f0000dfa000/0x4000)=nil, 0x4000, 0x0)
read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0xfffffec6, 0x2a, 0x10, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xffff, 0x2}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x99, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x50, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x4, 0x4, {0x7, 0x25, 0x1, 0x1, 0x8, 0x6db}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0x0, 0x1}}}}}}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

299.903905ms ago: executing program 0 (id=2139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x7)
ftruncate(r3, 0xa)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r5, 0x2}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
setresuid(0xee01, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb)

0s ago: executing program 1 (id=2140):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f000090588", @ANYRESHEX], 0x0)

kernel console output (not intermixed with test programs):

 tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  515.030404][   T30] audit: type=1400 audit(769.607:1480): avc:  denied  { read } for  pid=12867 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  515.231377][ T5860] usb 3-1: USB disconnect, device number 67
[  516.641799][T12883] No control pipe specified
[  516.649987][   T30] audit: type=1400 audit(771.627:1481): avc:  denied  { read append } for  pid=12882 comm="syz.3.1676" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  516.786710][   T30] audit: type=1400 audit(771.627:1482): avc:  denied  { open } for  pid=12882 comm="syz.3.1676" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  517.476761][ T5888] usb 2-1: 0:2 : does not exist
[  517.564958][ T5888] usb 2-1: USB disconnect, device number 56
[  517.650787][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  517.738966][T12902] 9pnet_fd: Insufficient options for proto=fd
[  517.840651][T12911] can0: slcan on ptm0.
[  518.273435][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'.
[  518.306237][ T5939] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  518.466349][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  518.471486][T12901] can0 (unregistered): slcan off ptm0.
[  518.494230][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  518.685987][ T5939] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  518.715417][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.737819][ T5939] usb 1-1: config 0 descriptor??
[  518.954368][ T5939] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  519.408906][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  519.408921][   T30] audit: type=1400 audit(774.387:1490): avc:  denied  { listen } for  pid=12955 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  519.454660][   T30] audit: type=1400 audit(774.417:1491): avc:  denied  { accept } for  pid=12955 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  520.120730][   T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  520.246008][T11540] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  520.286110][   T24] usb 2-1: Using ep0 maxpacket: 16
[  520.292657][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.303464][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.314513][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  520.323781][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.332088][   T24] usb 2-1: Product: syz
[  520.336355][   T24] usb 2-1: Manufacturer: syz
[  520.340928][   T24] usb 2-1: SerialNumber: syz
[  520.406005][T11540] usb 4-1: Using ep0 maxpacket: 32
[  520.414791][T11540] usb 4-1: config 0 has an invalid interface number: 3 but max is 2
[  520.423671][T11540] usb 4-1: config 0 has an invalid interface number: 198 but max is 2
[  520.433559][T11540] usb 4-1: config 0 has an invalid interface number: 114 but max is 2
[  520.442476][T11540] usb 4-1: config 0 has an invalid interface number: 100 but max is 2
[  520.451238][T11540] usb 4-1: config 0 has an invalid interface number: 223 but max is 2
[  520.468553][T11540] usb 4-1: config 0 has an invalid interface number: 245 but max is 2
[  520.479042][T11540] usb 4-1: config 0 has 6 interfaces, different from the descriptor's value: 3
[  520.488340][T11540] usb 4-1: config 0 has no interface number 0
[  520.494650][T11540] usb 4-1: config 0 has no interface number 1
[  520.501164][T11540] usb 4-1: config 0 has no interface number 2
[  520.509315][T11540] usb 4-1: config 0 has no interface number 4
[  520.515510][T11540] usb 4-1: config 0 has no interface number 5
[  520.522345][T11540] usb 4-1: config 0 interface 3 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  520.542823][T11540] usb 4-1: config 0 interface 3 altsetting 4 endpoint 0x3 has an invalid bInterval 27, changing to 7
[  520.554341][T11540] usb 4-1: config 0 interface 3 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[  520.570788][T12958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1691'.
[  520.580020][T11540] usb 4-1: config 0 interface 3 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  520.593491][T11540] usb 4-1: config 0 interface 3 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  520.616138][T11540] usb 4-1: config 0 interface 198 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  520.628192][T11540] usb 4-1: config 0 interface 198 altsetting 2 endpoint 0x5 has invalid maxpacket 1007, setting to 64
[  520.639494][T11540] usb 4-1: config 0 interface 198 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  520.651756][T11540] usb 4-1: config 0 interface 198 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  520.663954][T11540] usb 4-1: config 0 interface 198 altsetting 2 endpoint 0x7 has invalid maxpacket 15091, setting to 64
[  520.675931][T11540] usb 4-1: config 0 interface 114 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  520.689434][T11540] usb 4-1: too many endpoints for config 0 interface 100 altsetting 153: 97, using maximum allowed: 30
[  520.701305][T11540] usb 4-1: config 0 interface 100 altsetting 153 has a duplicate endpoint with address 0x4, skipping
[  520.716073][T11540] usb 4-1: config 0 interface 100 altsetting 153 has a duplicate endpoint with address 0x5, skipping
[  520.730224][T11540] usb 4-1: config 0 interface 100 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 97
[  520.744408][T11540] usb 4-1: too many endpoints for config 0 interface 223 altsetting 132: 149, using maximum allowed: 30
[  520.756673][T11540] usb 4-1: config 0 interface 223 altsetting 132 has an invalid descriptor for endpoint zero, skipping
[  520.772390][T11540] usb 4-1: config 0 interface 223 altsetting 132 has a duplicate endpoint with address 0x7, skipping
[  520.786407][T11540] usb 4-1: config 0 interface 223 altsetting 132 has a duplicate endpoint with address 0x4, skipping
[  520.800482][T11540] usb 4-1: config 0 interface 223 altsetting 132 has 5 endpoint descriptors, different from the interface descriptor's value: 149
[  520.827540][T11540] usb 4-1: too many endpoints for config 0 interface 245 altsetting 170: 197, using maximum allowed: 30
[  520.866568][T11540] usb 4-1: config 0 interface 245 altsetting 170 has an invalid descriptor for endpoint zero, skipping
[  520.884419][T11540] usb 4-1: config 0 interface 245 altsetting 170 bulk endpoint 0xE has invalid maxpacket 32
[  520.975714][T11540] usb 4-1: config 0 interface 245 altsetting 170 has a duplicate endpoint with address 0x9, skipping
[  520.987202][T11540] usb 4-1: config 0 interface 245 altsetting 170 has a duplicate endpoint with address 0x4, skipping
[  521.000799][T11540] usb 4-1: config 0 interface 245 altsetting 170 has a duplicate endpoint with address 0xF, skipping
[  521.108045][ T5888] usb 1-1: USB disconnect, device number 53
[  521.245429][T11540] usb 4-1: config 0 interface 245 altsetting 170 has a duplicate endpoint with address 0x4, skipping
[  521.285864][T11540] usb 4-1: config 0 interface 245 altsetting 170 has 8 endpoint descriptors, different from the interface descriptor's value: 197
[  521.317564][T11540] usb 4-1: config 0 interface 3 has no altsetting 0
[  521.333760][T11540] usb 4-1: config 0 interface 198 has no altsetting 0
[  521.348532][T11540] usb 4-1: config 0 interface 114 has no altsetting 0
[  521.349002][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'.
[  521.446491][T11540] usb 4-1: config 0 interface 100 has no altsetting 0
[  521.453364][T11540] usb 4-1: config 0 interface 223 has no altsetting 0
[  521.460810][T11540] usb 4-1: config 0 interface 245 has no altsetting 0
[  521.515101][T11540] usb 4-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=54.86
[  521.525263][T11540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.528180][T12992] loop5: detected capacity change from 0 to 7
[  521.561985][T11540] usb 4-1: Product: syz
[  521.570060][T11540] usb 4-1: Manufacturer: ᨊ탽뮗뙈踕仉䕤�໣ᕾ蛂⸄쌀
[  521.630359][T11540] usb 4-1: SerialNumber: syz
[  521.675512][T11540] usb 4-1: config 0 descriptor??
[  521.913912][ T5810] Dev loop5: unable to read RDB block 7
[  521.919608][ T5810]  loop5: unable to read partition table
[  521.926503][ T5810] loop5: partition table beyond EOD, truncated
[  521.994728][T12964] syzkaller1: entered promiscuous mode
[  522.040352][T12964] syzkaller1: entered allmulticast mode
[  522.049744][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1702'.
[  522.107517][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1702'.
[  522.374127][T13002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.385132][T13002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.786611][   T24] usb 2-1: 0:2 : does not exist
[  522.805361][   T24] usb 2-1: USB disconnect, device number 57
[  522.858473][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  522.996067][  T977] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  523.608237][  T977] usb 1-1: Using ep0 maxpacket: 32
[  523.621435][  T977] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  523.646195][  T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.712221][  T977] usb 1-1: config 0 has no interface number 0
[  523.723964][  T977] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  523.889742][  T977] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  523.899099][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.210091][  T977] usb 1-1: config 0 descriptor??
[  524.306621][  T977] usbhid 1-1:0.1: couldn't find an input interrupt endpoint
[  524.339044][   T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  524.351060][T11540] usb 4-1: USB disconnect, device number 36
[  524.371447][   T30] audit: type=1400 audit(779.347:1492): avc:  denied  { getopt } for  pid=13015 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  524.509610][   T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  524.532316][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.546332][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.566388][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.584875][T13019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1708'.
[  524.601720][   T24] usb 2-1: config 0 descriptor??
[  524.843052][   T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  525.188741][T13051] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1712'.
[  525.410943][   T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  525.418458][   T30] audit: type=1400 audit(780.157:1493): avc:  denied  { bind } for  pid=13034 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  525.576168][   T24] [drm] Initialized udl on minor 2
[  525.632444][   T30] audit: type=1400 audit(780.177:1494): avc:  denied  { read } for  pid=13034 comm="syz.3.1712" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  526.008846][   T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  526.025608][   T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  526.034173][   T30] audit: type=1400 audit(780.177:1495): avc:  denied  { open } for  pid=13034 comm="syz.3.1712" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  526.062463][T11540] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  526.071179][   T24] usb 2-1: USB disconnect, device number 58
[  526.149201][T11540] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  526.157494][   T30] audit: type=1400 audit(780.177:1496): avc:  denied  { ioctl } for  pid=13034 comm="syz.3.1712" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  526.205173][   T30] audit: type=1400 audit(780.497:1497): avc:  denied  { setopt } for  pid=13003 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  526.256103][   T30] audit: type=1400 audit(780.497:1498): avc:  denied  { connect } for  pid=13003 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  526.570653][T13058] netlink: 'syz.4.1717': attribute type 4 has an invalid length.
[  527.255575][T11540] usb 1-1: USB disconnect, device number 54
[  527.275968][   T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  527.487453][   T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  527.987863][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  527.997447][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  528.007188][   T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  528.015352][   T24] usb 2-1: Product: syz
[  528.042353][   T24] usb 2-1: Manufacturer: syz
[  528.057679][   T24] usb 2-1: SerialNumber: syz
[  528.097574][   T24] usb 2-1: config 0 descriptor??
[  528.110103][   T24] usb 2-1: selecting invalid altsetting 0
[  528.636126][T11540] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  528.744461][   T30] audit: type=1400 audit(783.717:1499): avc:  denied  { setopt } for  pid=13080 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  528.772281][T13081] openvswitch: netlink: Flow actions attr not present in new flow.
[  528.801677][  T977] usb 2-1: USB disconnect, device number 59
[  528.847106][T11540] usb 3-1: Using ep0 maxpacket: 32
[  528.861342][T11540] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  528.887510][T11540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  528.905951][T11540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  528.992083][T11540] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  529.021828][T11540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  529.041351][   T43] hid_parser_main: 190 callbacks suppressed
[  529.041369][   T43] hid-generic 0007:FFFFFFF8:0FFF.0016: unknown main item tag 0x0
[  529.078317][T11540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  529.099798][   T43] hid-generic 0007:FFFFFFF8:0FFF.0016: unknown main item tag 0x0
[  529.119917][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.125954][   T43] hid-generic 0007:FFFFFFF8:0FFF.0016: unknown main item tag 0x0
[  529.144379][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.148035][   T43] hid-generic 0007:FFFFFFF8:0FFF.0016: unknown main item tag 0x0
[  529.159595][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.159618][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.159638][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.159658][  T977] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0
[  529.201430][T11540] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  529.203049][  T977] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  529.235179][T11540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.243284][T11540] usb 3-1: Product: syz
[  529.253383][T11540] usb 3-1: Manufacturer: syz
[  529.263551][T11540] usb 3-1: SerialNumber: syz
[  529.288059][T11540] usb 3-1: config 0 descriptor??
[  529.336227][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  529.441208][   T43] hid-generic 0007:FFFFFFF8:0FFF.0016: hidraw0: <UNKNOWN> HID v0.07 Device [syz1] on syz0
[  529.442132][   T30] audit: type=1400 audit(784.407:1500): avc:  denied  { read } for  pid=13089 comm="syz.0.1726" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  529.524344][T11540] usb 3-1: USB disconnect, device number 68
[  529.733688][   T30] audit: type=1400 audit(784.417:1501): avc:  denied  { open } for  pid=13089 comm="syz.0.1726" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  529.896692][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'.
[  530.019572][T13092] fido_id[13092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  530.051219][T13087] veth0_macvtap: left promiscuous mode
[  530.773880][   T30] audit: type=1400 audit(785.407:1502): avc:  denied  { create } for  pid=13104 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  531.140392][T13113] loop6: detected capacity change from 0 to 63
[  531.152931][ T5815] buffer_io_error: 6 callbacks suppressed
[  531.152961][ T5815] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.161338][   T30] audit: type=1400 audit(785.547:1503): avc:  denied  { append } for  pid=13104 comm="syz.1.1728" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  531.191488][ T5815] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.200442][ T5815] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.210595][ T5815] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.220701][ T5815] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.434695][   T30] audit: type=1326 audit(786.047:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.531917][   T30] audit: type=1326 audit(786.047:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.588906][   T30] audit: type=1326 audit(786.047:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.634740][   T30] audit: type=1326 audit(786.057:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.831519][ T5867] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  531.894664][   T30] audit: type=1326 audit(786.057:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.950996][   T30] audit: type=1326 audit(786.057:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  531.976180][   T30] audit: type=1326 audit(786.057:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  532.000123][   T30] audit: type=1326 audit(786.057:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff918b8efc9 code=0x7ffc0000
[  532.000318][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  532.089252][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  532.109164][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  532.125978][   T24] usb 4-1: unable to read config index 0 descriptor/start: -71
[  532.137286][ T5867] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.164289][   T24] usb 4-1: can't read configurations, error -71
[  532.216272][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.245691][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  532.326008][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0
[  532.341278][ T5867] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  532.350478][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.358511][ T5867] usb 2-1: Product: syz
[  532.363116][ T5867] usb 2-1: Manufacturer: syz
[  532.368283][ T5867] usb 2-1: SerialNumber: syz
[  532.384201][T13134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1736'.
[  532.395234][ T5867] usb 2-1: config 0 descriptor??
[  532.611269][ T5867] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39
[  532.634814][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.647561][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.671942][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.685662][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.719999][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.740223][ T5810] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.759201][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.776001][  T977] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  532.786710][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.803469][ T5170] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  532.834224][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'.
[  533.718021][T13146] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  534.126423][  T977] usb 3-1: Using ep0 maxpacket: 16
[  534.403755][  T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  534.413545][  T977] usb 3-1: config 0 has no interface number 0
[  534.422786][  T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.434215][  T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.444349][  T977] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  534.453696][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.517349][  T977] usb 3-1: config 0 descriptor??
[  534.605156][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'.
[  534.896002][ T5860] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  535.047430][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.057754][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  535.067811][ T5860] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  535.077007][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  535.085018][ T5860] usb 1-1: SerialNumber: syz
[  535.162549][  T977] uclogic 0003:28BD:0071.0018: pen parameters not found
[  535.169690][  T977] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring
[  535.698361][  T977] usb 2-1: USB disconnect, device number 60
[  535.740699][T13164] loop2: detected capacity change from 0 to 7
[  535.749428][T13164] Dev loop2: unable to read RDB block 7
[  535.755021][T13164]  loop2: unable to read partition table
[  535.914020][T13164] loop2: partition table beyond EOD, truncated
[  535.920470][T13164] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  535.951786][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  535.956198][T13168] Cannot find add_set index 65532 as target
[  535.962220][   T30] audit: type=1400 audit(790.927:1547): avc:  denied  { read write } for  pid=13150 comm="syz.0.1741" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  536.477930][   T30] audit: type=1400 audit(790.927:1548): avc:  denied  { open } for  pid=13150 comm="syz.0.1741" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  536.504381][T13151] input: syz1 as /devices/virtual/input/input40
[  536.563489][ T5860] usb 1-1: 0:2 : does not exist
[  536.594872][   T30] audit: type=1400 audit(791.407:1549): avc:  denied  { read } for  pid=13150 comm="syz.0.1741" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  536.640470][ T5860] usb 1-1: USB disconnect, device number 55
[  536.667641][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.903075][   T30] audit: type=1400 audit(791.407:1550): avc:  denied  { open } for  pid=13150 comm="syz.0.1741" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  537.037777][   T30] audit: type=1400 audit(791.417:1551): avc:  denied  { ioctl } for  pid=13150 comm="syz.0.1741" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  537.137699][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'.
[  537.143159][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1750'.
[  537.161049][   T30] audit: type=1400 audit(792.117:1552): avc:  denied  { mounton } for  pid=13179 comm="syz.4.1750" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  537.471636][   T30] audit: type=1400 audit(792.417:1553): avc:  denied  { write } for  pid=13185 comm="syz.3.1752" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  537.530707][   T30] audit: type=1400 audit(792.417:1554): avc:  denied  { ioctl } for  pid=13185 comm="syz.3.1752" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  537.826537][   T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  537.850719][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'.
[  537.971253][   T10] usb 3-1: USB disconnect, device number 69
[  538.071039][T13198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.089673][   T30] audit: type=1400 audit(793.047:1555): avc:  denied  { setopt } for  pid=13197 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  538.124385][   T24] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  538.139209][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.161351][   T24] usb 1-1: config 0 has no interfaces?
[  538.224513][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  538.243255][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.253211][   T24] usb 1-1: config 0 descriptor??
[  538.650536][T13208] IPv6: NLM_F_CREATE should be specified when creating new route
[  538.716165][   T30] audit: type=1400 audit(793.687:1556): avc:  denied  { setattr } for  pid=13209 comm="syz.2.1759" path="socket:[42033]" dev="sockfs" ino=42033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  539.135974][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  539.701646][ T5860] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  539.807554][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  539.820242][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  539.854015][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  539.870992][ T5860] usb 2-1: config 4 has an invalid interface number: 224 but max is 0
[  539.889164][ T5860] usb 2-1: config 4 has no interface number 0
[  539.890790][   T24] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  539.912683][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.914867][ T5860] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 8.b6
[  539.929943][   T24] usb 4-1: Product: syz
[  539.929964][   T24] usb 4-1: Manufacturer: syz
[  539.929977][   T24] usb 4-1: SerialNumber: syz
[  539.937024][   T24] usb 4-1: config 0 descriptor??
[  539.951853][T13212] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  539.967643][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.975658][ T5860] usb 2-1: Product: syz
[  540.038991][ T5860] usb 2-1: Manufacturer: syz
[  540.050303][ T5860] usb 2-1: SerialNumber: syz
[  540.075976][ T5860] mdc800 2-1:4.224: probe fails -> wrong Interface
[  540.279373][T11540] usb 2-1: USB disconnect, device number 61
[  540.425787][   T24] powermate: unknown product id 0240
[  540.439551][   T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  540.458056][   T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41
[  540.481816][    C1] powermate: config urb returned -71
[  540.487346][    C1] powermate: config urb returned -71
[  540.492708][    C1] powermate: config urb returned -71
[  540.498700][    C1] powermate: config urb returned -71
[  540.526976][   T24] usb 4-1: USB disconnect, device number 39
[  540.532969][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  540.660320][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'.
[  541.004773][ T5860] usb 1-1: USB disconnect, device number 56
[  541.230133][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  541.318043][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1772'.
[  541.692988][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  541.692998][   T30] audit: type=1400 audit(796.667:1558): avc:  denied  { map } for  pid=13278 comm="syz.1.1777" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  541.879531][   T30] audit: type=1400 audit(796.697:1559): avc:  denied  { execute } for  pid=13278 comm="syz.1.1777" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  541.921445][T13285] netlink: 'syz.4.1778': attribute type 1 has an invalid length.
[  542.505069][T13285] bond2: entered promiscuous mode
[  542.533825][T13285] 8021q: adding VLAN 0 to HW filter on device bond2
[  542.717681][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.732374][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.812256][T13287] 8021q: adding VLAN 0 to HW filter on device bond2
[  542.819382][T13287] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  542.884480][T13287] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  542.920888][T13287] bond2: (slave gre1): making interface the new active one
[  542.928256][T13287] gre1: entered promiscuous mode
[  542.955978][T11540] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  542.994876][T13287] bond2: (slave gre1): Enslaving as an active interface with an up link
[  543.105971][T11540] usb 2-1: Using ep0 maxpacket: 32
[  543.114914][T11540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.125973][T11540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  543.135735][T11540] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  543.165111][T11540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.209329][T11540] usb 2-1: config 0 descriptor??
[  543.226027][ T5939] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  543.385938][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  543.393080][ T5939] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  543.402528][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.415714][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400
[  543.433528][ T5939] pvrusb2: **********
[  543.442384][T11540] usbhid 2-1:0.0: can't add hid device: -71
[  543.448457][T11540] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  543.457328][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  543.458970][T11540] usb 2-1: USB disconnect, device number 62
[  543.489924][ T5939] pvrusb2: Important functionality might not be entirely working.
[  543.519886][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  543.532540][ T5939] pvrusb2: **********
[  543.625361][ T2339] pvrusb2: Invalid write control endpoint
[  543.652796][ T5939] usb 1-1: USB disconnect, device number 57
[  543.668732][ T2339] pvrusb2: Invalid write control endpoint
[  543.675632][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  543.685199][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  543.696906][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  543.707149][ T2339] pvrusb2: Device being rendered inoperable
[  543.724035][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  543.754807][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  543.771545][ T2339] pvrusb2: Attached sub-driver cx25840
[  543.782736][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  543.793106][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  543.962434][   T30] audit: type=1400 audit(798.938:1560): avc:  denied  { mount } for  pid=13319 comm="syz.2.1787" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  543.976039][T13325] input: syz1 as /devices/virtual/input/input42
[  543.997735][T13325] input: failed to attach handler leds to device input42, error: -6
[  544.010754][   T30] audit: type=1400 audit(798.938:1561): avc:  denied  { write } for  pid=13319 comm="syz.2.1787" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  544.067131][   T30] audit: type=1400 audit(798.938:1562): avc:  denied  { write } for  pid=13323 comm="syz.1.1788" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  544.321658][T13328] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  544.868865][T13336] overlayfs: failed to clone upperpath
[  545.644515][T13350] xt_TCPMSS: Only works on TCP SYN packets
[  547.298415][T13355] input: syz1 as /devices/virtual/input/input43
[  547.316086][T13355] input: failed to attach handler leds to device input43, error: -6
[  547.533879][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'.
[  547.569704][T13360] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  547.676023][   T30] audit: type=1400 audit(802.648:1563): avc:  denied  { execstack } for  pid=13376 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  548.067366][T13380] Device name cannot be null; rc = [-22]
[  548.086173][T13377] team0: Port device team_slave_0 removed
[  548.462024][   T30] audit: type=1400 audit(803.438:1564): avc:  denied  { write } for  pid=13391 comm="syz.4.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  548.602603][T13403] netlink: 'syz.1.1811': attribute type 10 has an invalid length.
[  548.610635][T13403] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1811'.
[  548.825555][   T30] audit: type=1400 audit(803.798:1565): avc:  denied  { bind } for  pid=13401 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  548.872653][   T30] audit: type=1400 audit(803.798:1566): avc:  denied  { name_bind } for  pid=13401 comm="syz.3.1808" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  548.898839][T13411] overlayfs: failed to clone upperpath
[  548.914888][   T30] audit: type=1400 audit(803.798:1567): avc:  denied  { node_bind } for  pid=13401 comm="syz.3.1808" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  549.037304][T13410] bridge1: entered allmulticast mode
[  549.301077][T13422] input: syz1 as /devices/virtual/input/input44
[  549.342503][T13422] input: failed to attach handler leds to device input44, error: -6
[  549.497475][   T30] audit: type=1400 audit(804.468:1568): avc:  denied  { mount } for  pid=13425 comm="syz.3.1817" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  550.047931][   T30] audit: type=1400 audit(804.478:1569): avc:  denied  { remount } for  pid=13425 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  550.086503][T13429] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  550.331331][T13435] netlink: 'syz.1.1818': attribute type 33 has an invalid length.
[  550.351858][T13435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1818'.
[  550.540394][   T30] audit: type=1400 audit(805.518:1570): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  550.956594][   T30] audit: type=1400 audit(805.928:1571): avc:  denied  { create } for  pid=13450 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  551.226773][ T5136] Bluetooth: hci4: unexpected event for opcode 0x1408
[  551.635979][   T24] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  551.874960][   T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  551.888987][   T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.902809][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  552.010272][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.022920][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'.
[  552.114268][   T24] hub 2-1:4.0: USB hub found
[  552.241183][T13457] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1824'.
[  552.250911][   T30] audit: type=1400 audit(807.218:1572): avc:  denied  { mount } for  pid=13456 comm="syz.3.1824" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  552.284247][   T24] hub 2-1:4.0: 13 ports detected
[  552.316892][   T24] usb 2-1: selecting invalid altsetting 1
[  552.342896][   T24] hub 2-1:4.0: Using single TT (err -22)
[  552.372906][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.403854][   T24] hub 2-1:4.0: insufficient power available to use all downstream ports
[  552.416916][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.049947][T13491] tmpfs: Bad value for 'mpol'
[  553.066973][T13491] comedi comedi3: rti802: I/O port conflict (0x6,4)
[  553.112150][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  553.112164][   T30] audit: type=1400 audit(808.078:1575): avc:  denied  { ioctl } for  pid=13488 comm="syz.3.1833" path="socket:[42480]" dev="sockfs" ino=42480 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  553.418195][   T24] hub 2-1:4.0: hub_hub_status failed (err = -32)
[  553.443721][   T24] hub 2-1:4.0: config failed, can't get hub status (err -32)
[  553.611130][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'.
[  553.846191][   T24] usb 2-1: USB disconnect, device number 63
[  553.980492][T13508] overlayfs: failed to clone upperpath
[  554.266590][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'.
[  554.280187][   T30] audit: type=1400 audit(809.248:1576): avc:  denied  { read } for  pid=13509 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  554.301685][T13475] Bluetooth: hci4: command 0x0406 tx timeout
[  554.453696][T13513] netlink: 'syz.2.1839': attribute type 9 has an invalid length.
[  555.193862][T13525] sp0: Synchronizing with TNC
[  555.255003][   T30] audit: type=1400 audit(810.228:1577): avc:  denied  { read } for  pid=13521 comm="syz.2.1843" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  555.312860][   T30] audit: type=1400 audit(810.288:1578): avc:  denied  { write } for  pid=13526 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  555.626661][T13538] trusted_key: encrypted_key: key user:syz not found
[  555.832980][T13527] SELinux: failed to load policy
[  555.991675][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'.
[  556.035981][ T5860] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  556.183895][   T30] audit: type=1400 audit(811.158:1579): avc:  denied  { create } for  pid=13549 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  556.189999][T13550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1851'.
[  556.213248][   T30] audit: type=1400 audit(811.168:1580): avc:  denied  { bind } for  pid=13549 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  556.273983][ T5860] usb 1-1: Using ep0 maxpacket: 32
[  556.289651][T13551] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1850'.
[  556.298797][T13551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  556.698270][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.722334][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.732820][ T5860] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  556.770734][T13556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  556.790150][   T30] audit: type=1400 audit(811.748:1581): avc:  denied  { read } for  pid=13555 comm="syz.3.1852" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  556.801217][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.852429][ T5860] usb 1-1: config 0 descriptor??
[  556.869148][ T5860] hub 1-1:0.0: USB hub found
[  556.957614][   T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  556.984486][T13568] xt_connbytes: Forcing CT accounting to be enabled
[  556.991688][T13568] set match dimension is over the limit!
[  557.102660][ T5860] hub 1-1:0.0: 1 port detected
[  557.129598][   T30] audit: type=1400 audit(812.108:1582): avc:  denied  { remount } for  pid=13564 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  557.396276][   T24] usb 3-1: Using ep0 maxpacket: 32
[  557.403135][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.418839][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  557.430558][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  557.440100][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.445531][T13577] tipc: Started in network mode
[  557.454699][T13577] tipc: Node identity , cluster identity 4711
[  557.462283][   T24] usb 3-1: config 0 descriptor??
[  557.467902][T13577] tipc: Failed to obtain node identity
[  557.473530][T13577] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  557.474747][   T24] hub 3-1:0.0: USB hub found
[  557.957033][ T5860] hub 1-1:0.0: hub_ext_port_status failed (err = 0)
[  557.983742][   T24] hub 3-1:0.0: 1 port detected
[  558.276243][ T5860] usb 1-1: USB disconnect, device number 58
[  558.355943][   T43] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  558.507723][   T43] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  558.516349][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.526969][   T43] usb 4-1: config 0 has no interface number 0
[  558.533287][   T43] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  558.543681][   T43] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  558.560349][T13594] overlayfs: failed to clone upperpath
[  558.568900][   T43] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  558.578449][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.591855][   T43] usb 4-1: Product: syz
[  558.592740][   T24] hub 3-1:0.0: hub_ext_port_status failed (err = 0)
[  558.603738][   T43] usb 4-1: Manufacturer: syz
[  558.608696][   T43] usb 4-1: SerialNumber: syz
[  558.617167][   T43] usb 4-1: config 0 descriptor??
[  558.906359][ T5867] usb 3-1: USB disconnect, device number 70
[  559.126025][   T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  559.378283][   T24] usb 1-1: Using ep0 maxpacket: 32
[  559.419311][T13590] fuse: Unknown parameter 'ç:d7o"v‰£Ü²­i×>Zêî_cd'
[  559.437151][   T43] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input45
[  559.902560][   T24] usb 1-1: config 0 has an invalid interface number: 182 but max is 0
[  560.018713][   T24] usb 1-1: config 0 has no interface number 0
[  560.025995][   T24] usb 1-1: config 0 interface 182 has no altsetting 0
[  560.038613][   T24] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db
[  560.047850][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.061140][   T24] usb 1-1: Product: syz
[  560.065313][   T24] usb 1-1: Manufacturer: syz
[  560.078993][   T24] usb 1-1: SerialNumber: syz
[  560.086865][   T24] usb 1-1: config 0 descriptor??
[  560.097080][   T24] hub 1-1:0.182: bad descriptor, ignoring hub
[  560.103533][   T24] hub 1-1:0.182: probe with driver hub failed with error -5
[  560.299084][   T30] audit: type=1400 audit(815.278:1583): avc:  denied  { write } for  pid=13595 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  560.317874][    C0] vkms_vblank_simulate: vblank timer overrun
[  560.335667][   T24] kaweth 1-1:0.182: Firmware present in device.
[  560.342807][   T24] kaweth 1-1:0.182: Error reading configuration (-71), no net device created
[  560.352416][   T24] kaweth 1-1:0.182: probe with driver kaweth failed with error -5
[  560.377028][   T24] usb 1-1: USB disconnect, device number 59
[  560.456004][   T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  560.476124][T11540] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  560.606041][   T43] usb 3-1: Using ep0 maxpacket: 16
[  560.612533][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  560.622913][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  560.631957][T11540] usb 2-1: Using ep0 maxpacket: 16
[  560.638681][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  560.647834][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.655959][T11540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  560.666053][   T43] usb 3-1: Product: syz
[  560.670257][T11540] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  560.679142][   T43] usb 3-1: Manufacturer: syz
[  560.683724][   T43] usb 3-1: SerialNumber: syz
[  560.690116][T11540] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  560.700608][T11540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.710401][T11540] usb 2-1: Product: syz
[  560.714626][T11540] usb 2-1: Manufacturer: syz
[  560.719301][T11540] usb 2-1: SerialNumber: syz
[  560.913508][T13644] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1867'.
[  560.934511][T13646] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1868'.
[  561.270774][   T30] audit: type=1400 audit(816.178:1584): avc:  denied  { ioctl } for  pid=13650 comm="syz.0.1870" path="socket:[42760]" dev="sockfs" ino=42760 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  561.405405][ T5860] usb 4-1: USB disconnect, device number 40
[  561.465151][   T30] audit: type=1400 audit(816.438:1585): avc:  denied  { write } for  pid=13658 comm="syz.3.1871" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  561.489975][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'.
[  561.521577][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'.
[  561.562376][ T5939] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  561.564131][T13659] netlink: 'syz.3.1871': attribute type 15 has an invalid length.
[  561.602833][T13659] netlink: 'syz.3.1871': attribute type 18 has an invalid length.
[  561.791665][ T5939] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  561.817424][ T5939] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  561.826769][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.838152][ T5939] usb 1-1: Product: syz
[  561.850184][ T5939] usb 1-1: Manufacturer: syz
[  561.875126][ T5939] usb 1-1: SerialNumber: syz
[  561.898313][ T5939] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  561.928966][T13667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1875'.
[  562.151420][T13672] netlink: 'syz.4.1876': attribute type 2 has an invalid length.
[  562.163492][T13672] �9: entered promiscuous mode
[  562.176001][  T977] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  562.328221][  T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.419008][  T977] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  562.428596][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.436985][  T977] usb 4-1: Product: syz
[  562.442478][  T977] usb 4-1: Manufacturer: syz
[  562.447530][  T977] usb 4-1: SerialNumber: syz
[  562.458528][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  562.458898][  T977] usb 4-1: config 0 descriptor??
[  562.519034][  T977] usb 4-1: ucan: probing device on interface #0
[  562.533075][  T977] usb 4-1: ucan: invalid EP count (0)
[  562.538862][  T977] usb 4-1: ucan: probe failed; try to update the device firmware
[  563.130896][T13682] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1878'.
[  563.303161][   T43] usb 3-1: 0:2 : does not exist
[  563.386592][T11540] usb 2-1: 0:2 : does not exist
[  563.393237][   T43] usb 3-1: USB disconnect, device number 71
[  563.452389][T12753] Bluetooth: hci5: Frame reassembly failed (-84)
[  563.517310][T13689] sctp: [Deprecated]: syz.1.1880 (pid 13689) Use of int in max_burst socket option.
[  563.517310][T13689] Use struct sctp_assoc_value instead
[  563.535791][T13475] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  563.545704][T11540] usb 2-1: USB disconnect, device number 64
[  563.699158][   T30] audit: type=1400 audit(818.438:1586): avc:  denied  { write } for  pid=13688 comm="syz.2.1879" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  563.845208][ T5815] udevd[5815]: setting owner of /dev/bus/usb/003/071 to uid=0, gid=0 failed: No such file or directory
[  563.902441][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  563.927974][T13695] netlink: 'syz.2.1879': attribute type 4 has an invalid length.
[  563.949430][T13695] netlink: 'syz.2.1879': attribute type 4 has an invalid length.
[  563.970859][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  564.012432][ T5939] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  564.049562][T13697] comedi comedi3: rti802: I/O port conflict (0x6,4)
[  564.112746][ T5939] usb 1-1: USB disconnect, device number 60
[  564.277682][T13701] overlayfs: empty lowerdir
[  564.436035][ T5939] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  564.587784][ T5939] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  564.639504][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.663797][ T5939] usb 1-1: config 0 has no interfaces?
[  564.673593][ T5939] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  564.687308][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.704119][ T5939] usb 1-1: config 0 descriptor??
[  564.918446][  T977] usb 1-1: USB disconnect, device number 61
[  564.998919][T11540] usb 4-1: USB disconnect, device number 41
[  565.026188][ T5939] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  565.325993][ T5939] usb 3-1: Using ep0 maxpacket: 8
[  565.336821][ T5939] usb 3-1: too many configurations: 239, using maximum allowed: 8
[  565.357774][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  565.389123][ T5939] usb 3-1: New USB device strings: Mfr=125, Product=16, SerialNumber=196
[  565.400524][ T5939] usb 3-1: Product: syz
[  565.404689][ T5939] usb 3-1: Manufacturer: syz
[  565.410019][ T5939] usb 3-1: SerialNumber: syz
[  565.426253][ T5939] usb 3-1: config 0 descriptor??
[  565.437601][ T5939] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  565.452849][ T5939] dvb-usb: bulk message failed: -22 (2/0)
[  565.464216][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  565.481701][ T5939] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  565.496052][ T5136] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  565.550619][ T5939] usb 3-1: media controller created
[  565.588868][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  565.694076][ T5939] dvb-usb: bulk message failed: -22 (1/0)
[  565.702232][ T5939] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  565.744189][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46
[  565.764352][ T5939] dvb-usb: schedule remote query interval to 50 msecs.
[  565.832131][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  565.844966][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  565.853893][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'.
[  565.862776][T13725] netlink: 'syz.1.1889': attribute type 14 has an invalid length.
[  565.966521][ T5939] dvb-usb: bulk message failed: -22 (2/0)
[  565.972350][ T5939] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  566.027480][ T5940] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  566.063875][  T977] dvb-usb: bulk message failed: -22 (1/0)
[  566.074189][  T977] dvb-usb: error while querying for an remote control event.
[  566.155959][  T977] dvb-usb: bulk message failed: -22 (1/0)
[  566.164530][  T977] dvb-usb: error while querying for an remote control event.
[  566.179666][T13730] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  566.189676][T13730] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  566.192662][ T5939] usb 3-1: USB disconnect, device number 72
[  566.207361][   T30] audit: type=1400 audit(821.158:1587): avc:  denied  { bind } for  pid=13729 comm="syz.1.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  566.236172][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  566.310334][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.320911][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  566.358675][ T5939] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  566.377333][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  566.416074][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.424094][ T5940] usb 1-1: Product: syz
[  566.435510][ T5940] usb 1-1: Manufacturer: syz
[  566.756187][ T5940] usb 1-1: SerialNumber: syz
[  566.768157][   T30] audit: type=1400 audit(821.748:1588): avc:  denied  { setopt } for  pid=13735 comm="syz.1.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  566.877215][   T30] audit: type=1400 audit(821.808:1589): avc:  denied  { accept } for  pid=13741 comm="syz.3.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  566.979660][T13727] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1890'.
[  567.031038][T13750] xt_TCPMSS: Only works on TCP SYN packets
[  567.139294][   T43] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  568.622680][   T43] usb 3-1: Using ep0 maxpacket: 16
[  568.629763][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  568.640363][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  568.665331][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  568.680276][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.066904][   T43] usb 3-1: Product: syz
[  569.071105][   T43] usb 3-1: Manufacturer: syz
[  569.075729][   T43] usb 3-1: SerialNumber: syz
[  569.302374][T13743] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1894'.
[  569.845274][T13776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  569.893891][T13777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.643714][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'.
[  570.729391][ T5940] usb 1-1: 0:2 : does not exist
[  570.771030][ T5940] usb 1-1: USB disconnect, device number 62
[  571.030920][T13785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  571.295747][   T43] usb 3-1: 0:2 : does not exist
[  571.319992][   T43] usb 3-1: USB disconnect, device number 73
[  571.649304][T13801] geneve3: entered promiscuous mode
[  571.654551][T13801] geneve3: entered allmulticast mode
[  571.660674][   T30] audit: type=1400 audit(826.598:1590): avc:  denied  { write } for  pid=13795 comm="syz.1.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  571.705916][   T30] audit: type=1400 audit(826.598:1591): avc:  denied  { setopt } for  pid=13795 comm="syz.1.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  571.724804][ T5940] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  571.821771][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'.
[  571.966035][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  572.064288][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.082858][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  572.279903][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  572.289017][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.297195][ T5940] usb 1-1: Product: syz
[  572.301331][ T5940] usb 1-1: Manufacturer: syz
[  572.306142][ T5940] usb 1-1: SerialNumber: syz
[  572.533065][T13789] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1907'.
[  573.078326][   T30] audit: type=1400 audit(828.058:1592): avc:  denied  { write } for  pid=13828 comm="syz.3.1916" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  573.406088][ T5888] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  573.559501][ T5888] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  573.766002][ T5136] Bluetooth: hci4: command 0x0406 tx timeout
[  574.038544][ T5888] usb 3-1: config 0 has no interface number 0
[  574.044778][ T5888] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  574.064879][ T5888] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  574.074271][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.096142][   T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  574.105128][ T5888] usb 3-1: Product: syz
[  574.113066][ T5888] usb 3-1: Manufacturer: syz
[  574.122312][ T5888] usb 3-1: SerialNumber: syz
[  574.140168][ T5888] usb 3-1: config 0 descriptor??
[  574.194094][ T5940] usb 1-1: 0:2 : does not exist
[  574.212619][ T5940] usb 1-1: USB disconnect, device number 63
[  574.246974][   T43] usb 4-1: Using ep0 maxpacket: 16
[  574.253274][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.294329][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.318462][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  574.332389][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  574.343073][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.366032][   T43] usb 4-1: Product: syz
[  574.370348][   T43] usb 4-1: Manufacturer: syz
[  574.404874][   T43] usb 4-1: SerialNumber: syz
[  574.452953][ T5888] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  574.460991][ T5888] keyspan 3-1:0.133: unsupported endpoint type 0
[  574.475091][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  574.483554][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  574.491610][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  574.520156][ T5888] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  574.547839][ T5888] usb 3-1: USB disconnect, device number 74
[  574.574982][ T5888] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  574.604945][ T5888] keyspan 3-1:0.133: device disconnected
[  574.647299][ T5940] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  574.784779][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'.
[  574.870622][T13832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1917'.
[  574.979684][T13832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.992971][T13832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.004898][T13832] bond0 (unregistering): Released all slaves
[  575.018613][ T5940] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  575.032304][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.052325][ T5940] usb 1-1: config 0 has no interfaces?
[  575.061321][ T5940] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  575.071480][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.084304][ T5940] usb 1-1: config 0 descriptor??
[  575.327437][T11540] usb 1-1: USB disconnect, device number 64
[  575.378968][T13862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1926'.
[  575.675946][  T977] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  575.753937][   T30] audit: type=1400 audit(830.728:1593): avc:  denied  { mounton } for  pid=13863 comm="syz.1.1927" path="/369/file0" dev="tmpfs" ino=1998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  575.825991][  T977] usb 3-1: Using ep0 maxpacket: 8
[  575.901293][  T977] usb 3-1: config 0 has an invalid interface number: 96 but max is 0
[  575.910847][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.921497][  T977] usb 3-1: config 0 has no interface number 0
[  575.928361][  T977] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0
[  576.335674][  T977] usb 3-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  576.348657][  T977] usb 3-1: config 0 interface 96 has no altsetting 0
[  576.372047][   T30] audit: type=1400 audit(831.348:1594): avc:  denied  { accept } for  pid=13866 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  576.409264][  T977] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=e6.eb
[  576.433993][T13870] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.443470][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.454375][  T977] usb 3-1: Product: syz
[  576.460274][  T977] usb 3-1: Manufacturer: syz
[  576.468190][T13870] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.475644][  T977] usb 3-1: SerialNumber: syz
[  576.483772][  T977] usb 3-1: config 0 descriptor??
[  576.512715][  T977] usbhid 3-1:0.96: couldn't find an input interrupt endpoint
[  576.699757][   T43] usb 4-1: 0:2 : does not exist
[  577.219284][T13866] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN'
[  577.247785][   T43] usb 4-1: USB disconnect, device number 42
[  577.285985][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  577.309351][T13884] input: syz1 as /devices/virtual/input/input48
[  577.322348][T13884] input: failed to attach handler leds to device input48, error: -6
[  577.842358][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'.
[  577.865554][T13884] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  578.270664][T13908] FAULT_INJECTION: forcing a failure.
[  578.270664][T13908] name failslab, interval 1, probability 0, space 0, times 0
[  578.284477][T13908] CPU: 1 UID: 0 PID: 13908 Comm: syz.1.1938 Not tainted syzkaller #0 PREEMPT(full) 
[  578.284501][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  578.284512][T13908] Call Trace:
[  578.284518][T13908]  <TASK>
[  578.284524][T13908]  dump_stack_lvl+0x16c/0x1f0
[  578.284553][T13908]  should_fail_ex+0x512/0x640
[  578.284572][T13908]  ? __kmalloc_noprof+0xca/0x880
[  578.284595][T13908]  should_failslab+0xc2/0x120
[  578.284614][T13908]  __kmalloc_noprof+0xdd/0x880
[  578.284635][T13908]  ? fuse_direct_io+0x538/0x24f0
[  578.284657][T13908]  ? fuse_direct_io+0x538/0x24f0
[  578.284673][T13908]  fuse_direct_io+0x538/0x24f0
[  578.284710][T13908]  ? __pfx_fuse_direct_io+0x10/0x10
[  578.284732][T13908]  ? lockdep_init_map_type+0x5c/0x280
[  578.284753][T13908]  fuse_direct_IO+0x624/0xf40
[  578.284778][T13908]  ? __pfx_aio_complete_rw+0x10/0x10
[  578.284801][T13908]  ? __pfx_fuse_direct_IO+0x10/0x10
[  578.284819][T13908]  ? __pfx___might_resched+0x10/0x10
[  578.284839][T13908]  ? generic_write_check_limits+0x1f1/0x290
[  578.284870][T13908]  ? arch_stack_walk+0xa6/0x100
[  578.284896][T13908]  fuse_direct_write_iter+0x4c7/0x840
[  578.284912][T13908]  ? register_lock_class+0x41/0x4c0
[  578.284923][T13908]  ? __pfx_fuse_direct_write_iter+0x10/0x10
[  578.284937][T13908]  ? __lock_acquire+0xb8a/0x1c90
[  578.284964][T13908]  ? kasan_save_stack+0x42/0x60
[  578.284981][T13908]  ? kasan_save_track+0x14/0x30
[  578.285009][T13908]  fuse_file_write_iter+0x5c9/0x990
[  578.285033][T13908]  aio_write+0x3b9/0x910
[  578.285055][T13908]  ? __pfx_aio_write+0x10/0x10
[  578.285074][T13908]  ? __lock_acquire+0xb8a/0x1c90
[  578.285116][T13908]  ? __might_fault+0xe3/0x190
[  578.285140][T13908]  ? __might_fault+0x13b/0x190
[  578.285171][T13908]  ? io_submit_one+0x1243/0x1df0
[  578.285188][T13908]  io_submit_one+0x1243/0x1df0
[  578.285206][T13908]  ? __lock_acquire+0xb8a/0x1c90
[  578.285224][T13908]  ? __pfx_io_submit_one+0x10/0x10
[  578.285241][T13908]  ? __might_fault+0xe3/0x190
[  578.285254][T13908]  ? __might_fault+0x13b/0x190
[  578.285272][T13908]  ? __x64_sys_io_submit+0x1a9/0x350
[  578.285284][T13908]  __x64_sys_io_submit+0x1a9/0x350
[  578.285298][T13908]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  578.285327][T13908]  do_syscall_64+0xcd/0xfa0
[  578.285353][T13908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.285370][T13908] RIP: 0033:0x7faa8b58efc9
[  578.285384][T13908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  578.285398][T13908] RSP: 002b:00007faa8c47f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  578.285412][T13908] RAX: ffffffffffffffda RBX: 00007faa8b7e5fa0 RCX: 00007faa8b58efc9
[  578.285419][T13908] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007faa8c435000
[  578.285425][T13908] RBP: 00007faa8c47f090 R08: 0000000000000000 R09: 0000000000000000
[  578.285431][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.285437][T13908] R13: 00007faa8b7e6038 R14: 00007faa8b7e5fa0 R15: 00007ffc4f2d8138
[  578.285452][T13908]  </TASK>
[  578.654244][  T977] usb 3-1: USB disconnect, device number 75
[  579.023556][T11540] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  579.198569][T11540] usb 2-1: Using ep0 maxpacket: 32
[  579.209549][T11540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.220933][T11540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.238980][T11540] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  579.254439][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'.
[  579.272156][T11540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.350069][T11540] usb 2-1: config 0 descriptor??
[  579.392949][T11540] hub 2-1:0.0: USB hub found
[  579.435728][T13925] team1: entered promiscuous mode
[  579.443058][T13925] team1: entered allmulticast mode
[  579.450179][T13925] 8021q: adding VLAN 0 to HW filter on device team1
[  579.471242][   T30] audit: type=1400 audit(834.448:1595): avc:  denied  { getopt } for  pid=13923 comm="syz.3.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  579.591030][T11540] hub 2-1:0.0: 1 port detected
[  579.772064][T13934] tipc: Enabling of bearer <ud0:syz> rejected, media not registered
[  580.690305][T11540] hub 2-1:0.0: hub_ext_port_status failed (err = 0)
[  580.759517][T13942] netlink: 'syz.3.1948': attribute type 29 has an invalid length.
[  581.351852][  T977] usb 2-1: USB disconnect, device number 65
[  581.368086][   T30] audit: type=1400 audit(836.348:1596): avc:  denied  { name_bind } for  pid=13949 comm="syz.4.1950" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  581.420702][   T30] audit: type=1400 audit(836.378:1597): avc:  denied  { connect } for  pid=13952 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  581.687050][  T977] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[  581.718761][   T30] audit: type=1400 audit(836.698:1598): avc:  denied  { getopt } for  pid=13960 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  581.718989][T13961] IPVS: length: 149 != 8
[  581.857486][  T977] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  581.904688][  T977] usb 3-1: config 54 has no interface number 0
[  581.947882][  T977] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  582.089711][  T977] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  582.102309][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.585999][  T977] usb 3-1: Product: syz
[  582.590245][  T977] usb 3-1: Manufacturer: syz
[  582.595225][  T977] usb 3-1: SerialNumber: syz
[  583.053405][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'.
[  583.128727][   T30] audit: type=1400 audit(838.108:1599): avc:  denied  { name_bind } for  pid=13989 comm="syz.1.1961" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  583.297819][T12752] usb 3-1: Failed to submit usb control message: -71
[  583.304848][  T977] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  583.770763][T12752] usb 3-1: unable to send the bmi data to the device: -71
[  583.786812][T12752] usb 3-1: unable to get target info from device
[  583.798916][  T977] usb 3-1: USB disconnect, device number 76
[  583.817712][T12752] usb 3-1: could not get target info (-71)
[  583.835067][T12752] usb 3-1: could not probe fw (-71)
[  584.679212][T14010] xt_TCPMSS: Only works on TCP SYN packets
[  586.113846][   T30] audit: type=1400 audit(841.088:1600): avc:  denied  { create } for  pid=14018 comm="syz.1.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  586.326856][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'.
[  586.568360][T14034] binder: BINDER_SET_CONTEXT_MGR already set
[  586.574451][T14034] binder: 14033:14034 ioctl 4018620d 200000000100 returned -16
[  586.582392][ T5888] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  586.730024][T14041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1973'.
[  586.736736][ T5888] usb 3-1: Using ep0 maxpacket: 32
[  586.747178][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.767578][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.786841][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  586.796321][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.807232][ T5888] usb 3-1: config 0 descriptor??
[  586.814600][ T5888] hub 3-1:0.0: USB hub found
[  586.834761][   T30] audit: type=1400 audit(841.808:1601): avc:  denied  { watch } for  pid=14044 comm="syz.4.1974" path="/380/file1" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  587.083859][   T30] audit: type=1400 audit(841.808:1602): avc:  denied  { watch_sb watch_reads } for  pid=14044 comm="syz.4.1974" path="/380/file1" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  587.138332][ T5888] hub 3-1:0.0: 1 port detected
[  587.218490][T14048] sctp: [Deprecated]: syz.0.1972 (pid 14048) Use of int in max_burst socket option deprecated.
[  587.218490][T14048] Use struct sctp_assoc_value instead
[  587.535996][T11540] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  587.793870][ T5888] hub 3-1:0.0: hub_ext_port_status failed (err = 0)
[  587.905996][T11540] usb 4-1: Using ep0 maxpacket: 8
[  587.913343][T11540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  587.925287][T11540] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  587.934847][T11540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.143054][  T977] usb 3-1: USB disconnect, device number 77
[  588.388873][T11540] usb 4-1: config 0 descriptor??
[  588.631859][T11540] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  588.891453][T14078] 8021q: adding VLAN 0 to HW filter on device team0
[  588.914806][T14078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  589.743022][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'.
[  590.045955][   T30] audit: type=1800 audit(844.968:1603): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1989" name="bus" dev="overlay" ino=2068 res=0 errno=0
[  590.045979][  T977] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  590.076898][   T30] audit: type=1400 audit(845.058:1604): avc:  denied  { mount } for  pid=14100 comm="syz.1.1989" name="/" dev="rpc_pipefs" ino=44627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  590.288299][  T977] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  590.310230][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.311219][T11540] usb 4-1: USB disconnect, device number 43
[  590.320984][  T977] usb 1-1: Product: syz
[  590.328952][  T977] usb 1-1: Manufacturer: syz
[  590.333887][  T977] usb 1-1: SerialNumber: syz
[  590.452787][T14110] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1992'.
[  590.649187][  T977] usb 1-1: config 0 descriptor??
[  590.655303][  T977] hub 1-1:0.0: bad descriptor, ignoring hub
[  590.678462][  T977] hub 1-1:0.0: probe with driver hub failed with error -5
[  590.686717][  T977] f81232 1-1:0.0: f81534a converter detected
[  590.871569][  T977] usb 1-1: f81534a converter now attached to ttyUSB0
[  590.903720][   T30] audit: type=1400 audit(845.848:1605): avc:  denied  { write } for  pid=14118 comm="syz.1.1996" path="socket:[43548]" dev="sockfs" ino=43548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  591.038348][T14132] sp0: Synchronizing with TNC
[  591.392228][T14149] lo: Caught tx_queue_len zero misconfig
[  591.456887][  T977] usb 1-1: USB disconnect, device number 65
[  592.354596][  T977] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  592.383437][  T977] f81232 1-1:0.0: device disconnected
[  592.519984][T14149] fuse: Unknown parameter '	'
[  593.928609][T11540] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  594.041024][   T30] audit: type=1400 audit(849.018:1606): avc:  denied  { ioctl } for  pid=14176 comm="syz.4.2007" path="socket:[43618]" dev="sockfs" ino=43618 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  594.080265][ T5888] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  594.106550][T11540] usb 1-1: Using ep0 maxpacket: 8
[  594.113960][T11540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.130820][T11540] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  594.140425][T11540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.201488][T11540] usb 1-1: config 0 descriptor??
[  594.241846][   T30] audit: type=1400 audit(849.218:1607): avc:  denied  { map } for  pid=14186 comm="syz.1.2008" path="socket:[43635]" dev="sockfs" ino=43635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  594.280742][ T5888] usb 3-1: Using ep0 maxpacket: 16
[  594.287114][   T30] audit: type=1400 audit(849.218:1608): avc:  denied  { accept } for  pid=14186 comm="syz.1.2008" path="socket:[43635]" dev="sockfs" ino=43635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  594.368838][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.398591][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  594.427226][T11540] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  594.465274][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  594.489243][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.511905][ T5888] usb 3-1: Product: syz
[  594.520435][ T5888] usb 3-1: Manufacturer: syz
[  594.530266][ T5888] usb 3-1: SerialNumber: syz
[  594.789519][T14168] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2004'.
[  595.163004][T14227] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  595.396079][   T43] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  595.738188][T14238] set match dimension is over the limit!
[  596.026025][   T30] audit: type=1400 audit(850.998:1609): avc:  denied  { create } for  pid=14235 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  596.051108][   T30] audit: type=1400 audit(851.008:1610): avc:  denied  { map } for  pid=14235 comm="syz.1.2019" path="/proc/1400/net/ip_tables_names" dev="proc" ino=4026533212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  596.138734][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'.
[  596.194033][  T977] usb 1-1: USB disconnect, device number 66
[  597.004571][  T977] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  597.246913][  T977] usb 4-1: device descriptor read/64, error -71
[  597.263618][   T30] audit: type=1400 audit(852.238:1611): avc:  denied  { read write } for  pid=14263 comm="syz.0.2025" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  597.362763][T14270] FAULT_INJECTION: forcing a failure.
[  597.362763][T14270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.376103][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.1.2026 Not tainted syzkaller #0 PREEMPT(full) 
[  597.376129][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  597.376140][T14270] Call Trace:
[  597.376147][T14270]  <TASK>
[  597.376155][T14270]  dump_stack_lvl+0x16c/0x1f0
[  597.376189][T14270]  should_fail_ex+0x512/0x640
[  597.376214][T14270]  _copy_from_user+0x2e/0xd0
[  597.376236][T14270]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[  597.376259][T14270]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  597.376279][T14270]  ? rcu_is_watching+0x12/0xc0
[  597.376302][T14270]  ? lockdep_hardirqs_on+0x7c/0x110
[  597.376333][T14270]  packet_setsockopt+0xbbd/0x33c0
[  597.376358][T14270]  ? selinux_netlbl_socket_setsockopt+0x7a/0x470
[  597.376381][T14270]  ? __pfx_packet_setsockopt+0x10/0x10
[  597.376402][T14270]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  597.376422][T14270]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  597.376449][T14270]  ? find_held_lock+0x2b/0x80
[  597.376475][T14270]  ? selinux_socket_setsockopt+0x6a/0x80
[  597.376503][T14270]  ? __pfx_packet_setsockopt+0x10/0x10
[  597.376528][T14270]  do_sock_setsockopt+0xf3/0x1d0
[  597.376557][T14270]  __sys_setsockopt+0x1a0/0x230
[  597.376597][T14270]  __x64_sys_setsockopt+0xbd/0x160
[  597.376617][T14270]  ? do_syscall_64+0x91/0xfa0
[  597.376641][T14270]  ? lockdep_hardirqs_on+0x7c/0x110
[  597.376666][T14270]  do_syscall_64+0xcd/0xfa0
[  597.376693][T14270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.376711][T14270] RIP: 0033:0x7faa8b58efc9
[  597.376725][T14270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  597.376742][T14270] RSP: 002b:00007faa8c43d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  597.376759][T14270] RAX: ffffffffffffffda RBX: 00007faa8b7e6180 RCX: 00007faa8b58efc9
[  597.376771][T14270] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005
[  597.376781][T14270] RBP: 00007faa8c43d090 R08: 0000000000000004 R09: 0000000000000000
[  597.376791][T14270] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  597.376802][T14270] R13: 00007faa8b7e6218 R14: 00007faa8b7e6180 R15: 00007ffc4f2d8138
[  597.376828][T14270]  </TASK>
[  597.626385][   T30] audit: type=1400 audit(852.238:1612): avc:  denied  { open } for  pid=14263 comm="syz.0.2025" path="/366/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  597.662203][ T5888] usb 3-1: 0:2 : does not exist
[  597.672163][ T5888] usb 3-1: USB disconnect, device number 78
[  597.675896][  T977] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  597.793276][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  597.915922][  T977] usb 4-1: device descriptor read/64, error -71
[  598.026237][  T977] usb usb4-port1: attempt power cycle
[  598.095578][   T30] audit: type=1400 audit(853.068:1613): avc:  denied  { read } for  pid=14288 comm="syz.1.2032" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  598.119539][   T30] audit: type=1400 audit(853.068:1614): avc:  denied  { open } for  pid=14288 comm="syz.1.2032" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  598.142742][    C0] vkms_vblank_simulate: vblank timer overrun
[  598.163684][   T30] audit: type=1326 audit(853.138:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.1.2032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa8b58efc9 code=0x0
[  598.188937][ T5888] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  598.326055][ T5888] usb 3-1: device descriptor read/64, error -71
[  598.327398][ T5860] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  598.385997][  T977] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  598.406398][  T977] usb 4-1: device descriptor read/8, error -71
[  598.486075][ T5860] usb 1-1: Using ep0 maxpacket: 8
[  598.492740][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  598.504035][ T5860] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  598.513584][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.524415][ T5860] usb 1-1: config 0 descriptor??
[  598.565944][ T5888] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  598.665999][  T977] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  598.686408][  T977] usb 4-1: device descriptor read/8, error -71
[  598.695985][ T5888] usb 3-1: device descriptor read/64, error -71
[  598.735617][ T5860] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  598.796177][  T977] usb usb4-port1: unable to enumerate USB device
[  598.806227][ T5888] usb usb3-port1: attempt power cycle
[  599.146661][ T5888] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  599.166609][ T5888] usb 3-1: device descriptor read/8, error -71
[  599.336189][  T977] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  599.427144][ T5888] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  599.457871][ T5888] usb 3-1: device descriptor read/8, error -71
[  599.485995][  T977] usb 2-1: Using ep0 maxpacket: 16
[  599.496468][  T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  599.514875][  T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  599.576528][ T5888] usb usb3-port1: unable to enumerate USB device
[  599.577578][  T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  599.599517][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.612449][  T977] usb 2-1: Product: syz
[  599.619298][  T977] usb 2-1: Manufacturer: syz
[  599.627377][  T977] usb 2-1: SerialNumber: syz
[  599.864772][T14297] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2034'.
[  599.965716][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  599.965802][   T30] audit: type=1400 audit(854.938:1617): avc:  denied  { setopt } for  pid=14304 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  600.146112][ T5888] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  600.316005][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  600.327273][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  600.338086][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  600.366333][ T5888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  600.393111][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.426526][ T5888] usb 4-1: Product: syz
[  600.431477][ T5888] usb 4-1: Manufacturer: syz
[  600.437427][ T5888] usb 4-1: SerialNumber: syz
[  600.672866][T14301] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2035'.
[  600.990542][   T24] usb 1-1: USB disconnect, device number 67
[  601.356165][   T43] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  601.590115][T14328] FAULT_INJECTION: forcing a failure.
[  601.590115][T14328] name failslab, interval 1, probability 0, space 0, times 0
[  601.603519][T14328] CPU: 0 UID: 0 PID: 14328 Comm: syz.0.2042 Not tainted syzkaller #0 PREEMPT(full) 
[  601.603544][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  601.603554][T14328] Call Trace:
[  601.603562][T14328]  <TASK>
[  601.603570][T14328]  dump_stack_lvl+0x16c/0x1f0
[  601.603604][T14328]  should_fail_ex+0x512/0x640
[  601.603624][T14328]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  601.603644][T14328]  should_failslab+0xc2/0x120
[  601.603664][T14328]  __kvmalloc_node_noprof+0x141/0x9c0
[  601.603683][T14328]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  601.603706][T14328]  ? packet_setsockopt+0x2043/0x33c0
[  601.603735][T14328]  ? packet_setsockopt+0x2043/0x33c0
[  601.603756][T14328]  packet_setsockopt+0x2043/0x33c0
[  601.603781][T14328]  ? sock_has_perm+0x170/0x2f0
[  601.603808][T14328]  ? __pfx_packet_setsockopt+0x10/0x10
[  601.603830][T14328]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  601.603854][T14328]  ? rcu_is_watching+0x12/0xc0
[  601.603876][T14328]  ? irqentry_exit+0x3b/0x90
[  601.603906][T14328]  ? lockdep_hardirqs_on+0x7c/0x110
[  601.603934][T14328]  ? __pfx_packet_setsockopt+0x10/0x10
[  601.603961][T14328]  ? __pfx_packet_setsockopt+0x10/0x10
[  601.603985][T14328]  do_sock_setsockopt+0xf3/0x1d0
[  601.604014][T14328]  __sys_setsockopt+0x1a0/0x230
[  601.604041][T14328]  __x64_sys_setsockopt+0xbd/0x160
[  601.604061][T14328]  ? do_syscall_64+0x91/0xfa0
[  601.604086][T14328]  ? lockdep_hardirqs_on+0x7c/0x110
[  601.604110][T14328]  do_syscall_64+0xcd/0xfa0
[  601.604137][T14328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.604154][T14328] RIP: 0033:0x7fa71258efc9
[  601.604168][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  601.604184][T14328] RSP: 002b:00007fa7107d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  601.604201][T14328] RAX: ffffffffffffffda RBX: 00007fa7127e6180 RCX: 00007fa71258efc9
[  601.604213][T14328] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005
[  601.604223][T14328] RBP: 00007fa7107d5090 R08: 0000000000000004 R09: 0000000000000000
[  601.604234][T14328] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  601.604244][T14328] R13: 00007fa7127e6218 R14: 00007fa7127e6180 R15: 00007ffcdc81ce88
[  601.604271][T14328]  </TASK>
[  601.842283][   T43] usb 3-1: Using ep0 maxpacket: 32
[  601.849441][   T43] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  601.860478][   T43] usb 3-1: config 0 has no interface number 0
[  601.867246][   T43] usb 3-1: config 0 interface 196 has no altsetting 0
[  601.877757][   T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  601.887282][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.919309][   T43] usb 3-1: Product: syz
[  601.923898][   T43] usb 3-1: Manufacturer: syz
[  601.928794][   T43] usb 3-1: SerialNumber: syz
[  601.971037][   T43] usb 3-1: config 0 descriptor??
[  602.196612][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.224677][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.225674][  T977] usb 2-1: 0:2 : does not exist
[  602.259902][  T977] usb 2-1: USB disconnect, device number 67
[  602.275547][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.316605][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.362842][   T43] ipheth 3-1:0.196: Unable to find endpoints
[  602.566021][ T5860] usb 3-1: USB disconnect, device number 83
[  602.596920][T14342] batman_adv: batadv0: Removing interface: batadv_slave_0
[  602.607759][T14342] batman_adv: batadv0: Removing interface: batadv_slave_1
[  602.636660][ T5940] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  602.644589][T14345] netlink: 5236 bytes leftover after parsing attributes in process `syz.4.2047'.
[  602.656093][   T30] audit: type=1400 audit(857.638:1618): avc:  denied  { getopt } for  pid=14344 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  602.765953][ T5940] usb 1-1: device descriptor read/64, error -71
[  603.007063][ T5940] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  603.044604][ T5888] usb 4-1: 0:2 : does not exist
[  603.125012][ T5888] usb 4-1: USB disconnect, device number 48
[  603.323051][ T5940] usb 1-1: device descriptor read/64, error -71
[  603.378621][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  603.447355][ T5940] usb usb1-port1: attempt power cycle
[  603.785984][ T5940] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  603.817039][ T5940] usb 1-1: device descriptor read/8, error -71
[  603.879264][ T5888] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  604.067221][ T5888] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  604.075670][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  604.086697][ T5888] usb 4-1: config 0 has no interfaces?
[  604.092196][ T5888] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  604.095928][ T5940] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  604.114790][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.179268][   T30] audit: type=1400 audit(859.138:1619): avc:  denied  { connect } for  pid=14363 comm="syz.4.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  604.490241][   T30] audit: type=1400 audit(859.138:1620): avc:  denied  { bind } for  pid=14363 comm="syz.4.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  604.529620][ T5888] usb 4-1: config 0 descriptor??
[  604.605102][ T5940] usb 1-1: device descriptor read/8, error -71
[  604.726198][ T5940] usb usb1-port1: unable to enumerate USB device
[  605.549413][T14379] FAULT_INJECTION: forcing a failure.
[  605.549413][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.563599][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.2.2055 Not tainted syzkaller #0 PREEMPT(full) 
[  605.563621][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  605.563631][T14379] Call Trace:
[  605.563637][T14379]  <TASK>
[  605.563644][T14379]  dump_stack_lvl+0x16c/0x1f0
[  605.563675][T14379]  should_fail_ex+0x512/0x640
[  605.563699][T14379]  _copy_to_user+0x32/0xd0
[  605.563723][T14379]  simple_read_from_buffer+0xcb/0x170
[  605.563752][T14379]  proc_fail_nth_read+0x197/0x240
[  605.563775][T14379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  605.563797][T14379]  ? rw_verify_area+0xcf/0x6c0
[  605.563821][T14379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  605.563889][T14379]  vfs_read+0x1e4/0xcf0
[  605.563911][T14379]  ? __pfx___mutex_lock+0x10/0x10
[  605.563929][T14379]  ? __pfx_vfs_read+0x10/0x10
[  605.563952][T14379]  ? __fget_files+0x20e/0x3c0
[  605.563978][T14379]  ksys_read+0x12a/0x250
[  605.563994][T14379]  ? __pfx_ksys_read+0x10/0x10
[  605.564018][T14379]  do_syscall_64+0xcd/0xfa0
[  605.564046][T14379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.564064][T14379] RIP: 0033:0x7ff918b8d9dc
[  605.564079][T14379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  605.564096][T14379] RSP: 002b:00007ff9199b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  605.564112][T14379] RAX: ffffffffffffffda RBX: 00007ff918de6180 RCX: 00007ff918b8d9dc
[  605.564125][T14379] RDX: 000000000000000f RSI: 00007ff9199b20a0 RDI: 0000000000000006
[  605.564136][T14379] RBP: 00007ff9199b2090 R08: 0000000000000000 R09: 0000000000000000
[  605.564147][T14379] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  605.564157][T14379] R13: 00007ff918de6218 R14: 00007ff918de6180 R15: 00007ffd3f006968
[  605.564183][T14379]  </TASK>
[  606.339893][T14384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14384 comm=syz.0.2058
[  606.358165][T14384] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2058'.
[  606.498151][ T5940] usb 4-1: USB disconnect, device number 49
[  606.531465][ T5860] libceph: connect (1)[c::]:6789 error -101
[  606.537903][ T5860] libceph: mon0 (1)[c::]:6789 connect error
[  606.553071][T14391] ceph: No mds server is up or the cluster is laggy
[  606.563377][ T5860] libceph: connect (1)[c::]:6789 error -101
[  606.578132][ T5860] libceph: mon0 (1)[c::]:6789 connect error
[  606.713094][   T43] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  606.829063][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'.
[  606.924332][T14404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2063'.
[  606.940083][T14401] sp0: Synchronizing with TNC
[  606.960109][T14407] smc: net device bond0 applied user defined pnetid SYZ2
[  606.974518][T14401] comedi comedi1: rti802: I/O port conflict (0x6,4)
[  606.976139][T14407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2064'.
[  607.007011][   T43] usb 3-1: Using ep0 maxpacket: 16
[  607.014711][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.049165][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.082489][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  607.092083][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.109665][   T43] usb 3-1: Product: syz
[  607.143338][   T43] usb 3-1: Manufacturer: syz
[  607.144696][T14417] comedi comedi3: rti802: I/O port conflict (0x6,4)
[  607.166106][   T43] usb 3-1: SerialNumber: syz
[  607.889576][T14387] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2059'.
[  607.929088][   T30] audit: type=1400 audit(862.898:1621): avc:  denied  { setattr } for  pid=14426 comm="syz.3.2069" name="" dev="pipefs" ino=43990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  607.953833][   T30] audit: type=1400 audit(862.908:1622): avc:  denied  { read } for  pid=14426 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  608.962433][   T30] audit: type=1400 audit(863.938:1623): avc:  denied  { read } for  pid=14442 comm="syz.0.2074" path="socket:[45334]" dev="sockfs" ino=45334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  609.050588][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'.
[  609.085124][   T30] audit: type=1400 audit(864.058:1624): avc:  denied  { write } for  pid=14439 comm="syz.3.2072" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  609.108069][   T24] delete_channel: no stack
[  609.132446][T14441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  609.372120][T14455] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2077'.
[  609.386030][ T5860] usb 2-1: new low-speed USB device number 68 using dummy_hcd
[  609.485942][ T5940] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  609.545981][ T5860] usb 2-1: Invalid ep0 maxpacket: 16
[  609.616616][ T5940] usb 1-1: device descriptor read/64, error -71
[  609.675915][ T5860] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[  609.830318][ T5860] usb 2-1: Invalid ep0 maxpacket: 16
[  609.837248][ T5860] usb usb2-port1: attempt power cycle
[  609.856288][ T5940] usb 1-1: new low-speed USB device number 73 using dummy_hcd
[  609.959983][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'.
[  609.988358][ T5940] usb 1-1: device descriptor read/64, error -71
[  610.013455][T14461] comedi: valid board names for 8255 driver are:
[  610.023543][T14461]  8255
[  610.028051][T14461] comedi: valid board names for vmk80xx driver are:
[  610.036368][T14461]  vmk80xx
[  610.039492][T14461] comedi: valid board names for usbduxsigma driver are:
[  610.047542][T14461]  usbduxsigma
[  610.051038][T14461] comedi: valid board names for usbduxfast driver are:
[  610.223924][T14461]  usbduxfast
[  610.227730][T14461] comedi: valid board names for usbdux driver are:
[  610.236114][ T5940] usb usb1-port1: attempt power cycle
[  610.295967][ T5860] usb 2-1: new low-speed USB device number 70 using dummy_hcd
[  610.317452][ T5860] usb 2-1: Invalid ep0 maxpacket: 16
[  610.743221][ T5940] usb 1-1: new low-speed USB device number 74 using dummy_hcd
[  610.760596][T14461]  usbdux
[  610.777360][ T5940] usb 1-1: device descriptor read/8, error -71
[  610.789172][T14461] comedi: valid board names for ni6501 driver are:
[  610.805350][T14461]  ni6501
[  610.809729][ T5860] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  610.817511][T14461] comedi: valid board names for dt9812 driver are:
[  610.824248][T14461]  dt9812
[  610.843460][T14461] comedi: valid board names for ni_labpc_cs driver are:
[  610.851757][T14461]  ni_labpc_cs
[  610.855489][ T5860] usb 2-1: Invalid ep0 maxpacket: 16
[  610.863277][ T5860] usb usb2-port1: unable to enumerate USB device
[  610.869839][T14461] comedi: valid board names for ni_daq_700 driver are:
[  610.876861][T14461]  ni_daq_700
[  610.880224][T14461] comedi: valid board names for labpc_pci driver are:
[  610.887086][T14461]  labpc_pci
[  610.890424][T14461] comedi: valid board names for adl_pci9118 driver are:
[  610.897492][T14461]  pci9118dg
[  610.900848][T14461]  pci9118hg
[  610.904156][T14461]  pci9118hr
[  610.907531][T14461] comedi: valid board names for 8255_pci driver are:
[  610.914597][T14461]  8255_pci
[  610.920072][T14461] comedi: valid board names for s526 driver are:
[  610.926832][T14461]  s526
[  610.929713][T14461] comedi: valid board names for multiq3 driver are:
[  610.938510][T14461]  multiq3
[  610.941757][T14461] comedi: valid board names for pcmuio driver are:
[  610.948801][T14461]  pcmuio48
[  610.952381][T14461]  pcmuio96
[  610.955554][T14461] comedi: valid board names for pcmmio driver are:
[  610.965777][T14461]  pcmmio
[  610.969038][T14461] comedi: valid board names for pcmda12 driver are:
[  610.969517][   T43] usb 3-1: 0:2 : does not exist
[  610.975757][T14461]  pcmda12
[  610.984055][T14461] comedi: valid board names for pcmad driver are:
[  611.003739][T14461]  pcmad12
[  611.007105][T14461]  pcmad16
[  611.010363][T14461] comedi: valid board names for ni_labpc driver are:
[  611.045979][ T5940] usb 1-1: new low-speed USB device number 75 using dummy_hcd
[  611.085193][T14461]  lab-pc-1200
[  611.091597][T14461]  lab-pc-1200ai
[  611.095315][T14461]  lab-pc+
[  611.098541][T14461] comedi: valid board names for atmio16 driver are:
[  611.105191][T14461]  atmio16
[  611.108428][T14461]  atmio16d
[  611.111624][T14461] comedi: valid board names for ni_at_ao driver are:
[  611.119484][T14461]  at-ao-6
[  611.123687][T14461]  at-ao-10
[  611.136417][ T5940] usb 1-1: device descriptor read/8, error -71
[  611.156385][T14461] comedi: valid board names for ni_at_a2150 driver are:
[  611.163420][T14461]  ni_at_a2150
[  611.163645][   T43] usb 3-1: USB disconnect, device number 84
[  611.176412][T14461] comedi: valid board names for adq12b driver are:
[  611.183143][T14461]  adq12b
[  611.207188][T14461] comedi: valid board names for mpc624 driver are:
[  611.228765][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  611.244883][T14461]  mpc624
[  611.249803][T14461] comedi: valid board names for c6xdigio driver are:
[  611.257410][T14461]  c6xdigio
[  611.261365][T14461] comedi: valid board names for aio_iiro_16 driver are:
[  611.273313][T14461]  aio_iiro_16
[  611.276949][T14461] comedi: valid board names for aio_aio12_8 driver are:
[  611.284915][T14461]  aio_aio12_8
[  611.290274][T14461]  aio_ai12_8
[  611.293576][T14461]  aio_ao12_4
[  611.297007][T14461] comedi: valid board names for fl512 driver are:
[  611.303583][T14461]  fl512
[  611.306616][T14461] comedi: valid board names for dmm32at driver are:
[  611.313317][T14461]  dmm32at
[  611.317179][T14461] comedi: valid board names for dt282x driver are:
[  611.323780][T14461]  dt2821
[  611.330528][T14461]  dt2821-f
[  611.333729][T14461]  dt2821-g
[  611.339975][T14461]  dt2823
[  611.343590][T14461]  dt2824-pgh
[  611.348496][T14461]  dt2824-pgl
[  611.351878][T14461]  dt2825
[  611.354830][T14461]  dt2827
[  611.358295][T14461]  dt2828
[  611.362171][T14461]  dt2829
[  611.374297][T14461]  dt21-ez
[  611.384417][T14461]  dt23-ez
[  611.390150][T14461]  dt24-ez
[  611.393237][T14461]  dt24-ez-pgl
[  611.398012][T14461] comedi: valid board names for dt2817 driver are:
[  611.404571][T14461]  dt2817
[  611.407932][T14461] comedi: valid board names for dt2815 driver are:
[  611.414562][T14461]  dt2815
[  611.418001][T14461] comedi: valid board names for dt2814 driver are:
[  611.424574][T14461]  dt2814
[  611.429316][T14461] comedi: valid board names for dt2811 driver are:
[  611.435918][T14461]  dt2811-pgh
[  611.439325][T14461]  dt2811-pgl
[  611.442899][T14461] comedi: valid board names for dt2801 driver are:
[  611.450630][ T5940] usb usb1-port1: unable to enumerate USB device
[  611.461257][T14461]  dt2801
[  611.464244][T14461] comedi: valid board names for das6402 driver are:
[  611.471179][T14461]  das6402-12
[  611.474500][T14461]  das6402-16
[  611.478105][T14461] comedi: valid board names for das1800 driver are:
[  611.484787][T14461]  das-1701st
[  611.488458][T14461]  das-1701st-da
[  611.492039][T14461]  das-1702st
[  611.495389][T14461]  das-1702st-da
[  611.499461][T14461]  das-1702hr
[  611.502787][T14461]  das-1702hr-da
[  611.506657][T14461]  das-1701ao
[  611.510051][T14461]  das-1702ao
[  611.513710][T14461]  das-1801st
[  611.517511][T14461]  das-1801st-da
[  611.521096][T14461]  das-1802st
[  611.524498][T14461]  das-1802st-da
[  611.528400][T14461]  das-1802hr
[  611.531708][T14461]  das-1802hr-da
[  611.535270][T14461]  das-1801hc
[  611.539247][T14461]  das-1802hc
[  611.542615][T14461]  das-1801ao
[  611.549587][T14461]  das-1802ao
[  611.552897][T14461] comedi: valid board names for das800 driver are:
[  611.560636][T14461]  das-800
[  611.569676][   T30] audit: type=1400 audit(866.538:1625): avc:  denied  { read } for  pid=14479 comm="syz.2.2084" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  611.592975][T14461]  cio-das800
[  611.596333][T14461]  das-801
[  611.599376][T14461]  cio-das801
[  611.602654][T14461]  das-802
[  611.605728][T14461]  cio-das802
[  611.609114][T14461]  cio-das802/16
[  611.619676][T14461] comedi: valid board names for isa-das08 driver are:
[  611.627552][T14461]  isa-das08
[  611.631049][T14461]  das08-pgm
[  611.634496][   T30] audit: type=1400 audit(866.538:1626): avc:  denied  { open } for  pid=14479 comm="syz.2.2084" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  611.634589][T14461]  das08-pgh
[  611.663618][T14461]  das08-pgl
[  611.667209][T14461]  das08-aoh
[  611.670433][T14461]  das08-aol
[  611.674764][T14461]  das08-aom
[  611.678262][T14461]  das08/jr-ao
[  611.681690][T14461]  das08jr-16-ao
[  611.685401][T14461]  pc104-das08
[  611.688910][T14461]  das08jr/16
[  611.692306][T14461] comedi: valid board names for das16m1 driver are:
[  611.699079][T14461]  das16m1
[  611.702156][T14461] comedi: valid board names for dac02 driver are:
[  611.709406][T14461]  dac02
[  611.712298][T14461] comedi: valid board names for rti802 driver are:
[  611.729405][T14461]  rti802
[  611.737881][T14461] comedi: valid board names for rti800 driver are:
[  611.744463][T14461]  rti800
[  611.747820][T14461]  rti815
[  611.750846][T14461] comedi: valid board names for pcm3724 driver are:
[  611.757560][T14461]  pcm3724
[  611.762778][T14461] comedi: valid board names for pcl818 driver are:
[  611.769389][T14461]  pcl818l
[  611.772560][T14461]  pcl818h
[  611.775725][T14461]  pcl818hd
[  611.779405][T14461]  pcl818hg
[  611.782549][T14461]  pcl818
[  611.785523][T14461]  pcl718
[  611.788542][T14461]  pcm3718
[  611.791637][T14461] comedi: valid board names for pcl816 driver are:
[  611.798254][T14461]  pcl816
[  611.801224][T14461]  pcl814b
[  611.804696][T14461] comedi: valid board names for pcl812 driver are:
[  611.811346][T14461]  pcl812
[  611.814309][T14461]  pcl812pg
[  611.817494][T14461]  acl8112pg
[  611.820704][T14461]  acl8112dg
[  611.823913][T14461]  acl8112hg
[  611.827155][T14461]  a821pgl
[  611.830170][T14461]  a821pglnda
[  611.833465][T14461]  a821pgh
[  611.836618][T14461]  a822pgl
[  611.839670][T14461]  a822pgh
[  611.842706][T14461]  a823pgl
[  611.845742][T14461]  a823pgh
[  611.849353][T14461]  pcl813
[  611.852347][T14461]  pcl813b
[  611.855421][T14461]  acl8113
[  611.858532][T14461]  iso813
[  611.861509][T14461]  acl8216
[  611.864589][T14461]  a826pg
[  611.867607][T14461] comedi: valid board names for pcl730 driver are:
[  611.874152][T14461]  pcl730
[  611.877208][T14461]  iso730
[  611.880185][T14461]  acl7130
[  611.883223][T14461]  pcm3730
[  611.886301][T14461]  pcl725
[  611.889267][T14461]  p8r8dio
[  611.892303][T14461]  acl7225b
[  611.895430][T14461]  p16r16dio
[  611.898869][T14461]  pcl733
[  611.901839][T14461]  pcl734
[  611.904792][T14461]  opmm-1616-xt
[  611.908298][T14461]  pearl-mm-p
[  611.911597][T14461]  ir104-pbf
[  611.914827][T14461] comedi: valid board names for pcl726 driver are:
[  611.921448][T14461]  pcl726
[  611.924421][T14461]  pcl727
[  611.930887][T14461]  pcl728
[  611.933909][T14461]  acl6126
[  611.937639][T14461]  acl6128
[  611.940692][T14461] comedi: valid board names for pcl724 driver are:
[  611.947264][T14461]  pcl724
[  611.950308][T14461]  pcl722
[  611.953260][T14461]  pcl731
[  611.956468][T14461]  acl7122
[  611.959536][T14461]  acl7124
[  611.962681][T14461]  pet48dio
[  611.965981][T14461]  pcmio48
[  611.969064][T14461]  onyx-mm-dio
[  611.972550][T14461] comedi: valid board names for pcl711 driver are:
[  611.979454][T14461]  pcl711
[  611.982429][T14461]  pcl711b
[  611.985545][T14461]  acl8112hg
[  611.992080][T14461]  acl8112dg
[  611.995327][T14461] comedi: valid board names for amplc_pc263 driver are:
[  612.002599][T14461]  pc263
[  612.005491][T14461] comedi: valid board names for amplc_pc236 driver are:
[  612.012692][T14461]  pc36at
[  612.015663][T14461] comedi: valid board names for amplc_dio200 driver are:
[  612.022934][T14461]  pc212e
[  612.026102][T14461]  pc214e
[  612.029089][T14461]  pc215e
[  612.032037][T14461]  pc218e
[  612.035025][T14461]  pc272e
[  612.051018][T14461] comedi: valid board names for comedi_parport driver are:
[  612.063398][T14461]  comedi_parport
[  612.068395][T14461] comedi: valid board names for comedi_test driver are:
[  612.078261][T14461]  comedi_test
[  612.081769][T14461] comedi: valid board names for comedi_bond driver are:
[  612.095758][T14461]  comedi_bond
[  612.244250][T14489] xt_TCPMSS: Only works on TCP SYN packets
[  612.262480][T14490] input: syz1 as /devices/virtual/input/input50
[  613.766613][   T30] audit: type=1400 audit(868.728:1627): avc:  denied  { write } for  pid=14497 comm="syz.2.2090" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  613.937687][T14504] netlink: 'syz.0.2091': attribute type 12 has an invalid length.
[  613.956266][T14504] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  613.988770][T14504] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2091'.
[  614.027128][T14507] netlink: 'syz.1.2092': attribute type 10 has an invalid length.
[  614.066390][T14504] netlink: 'syz.0.2091': attribute type 2 has an invalid length.
[  614.080187][T14504] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2091'.
[  614.576017][  T977] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  614.736019][  T977] usb 1-1: Using ep0 maxpacket: 8
[  614.807761][  T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  614.846048][  T977] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  614.861554][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.873037][  T977] usb 1-1: config 0 descriptor??
[  615.022376][T14521] xt_TCPMSS: Only works on TCP SYN packets
[  615.137747][  T977] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  615.623406][T14542] comedi comedi0: s526: I/O port conflict (0xffffffffffffffff,64)
[  615.635121][T14524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2096'.
[  615.756026][  T977] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  615.945935][  T977] usb 4-1: Using ep0 maxpacket: 16
[  615.962847][  T977] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  615.977581][  T977] usb 4-1: config 0 has no interface number 0
[  615.995229][  T977] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  616.020168][  T977] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  616.040350][  T977] usb 4-1: config 0 interface 41 has no altsetting 0
[  616.049806][  T977] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  616.062259][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.079838][  T977] usb 4-1: Product: syz
[  616.089522][  T977] usb 4-1: Manufacturer: syz
[  616.099359][  T977] usb 4-1: SerialNumber: syz
[  616.111271][  T977] usb 4-1: config 0 descriptor??
[  616.125286][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  616.135216][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  616.143259][   T30] audit: type=1400 audit(871.118:1628): avc:  denied  { recv } for  pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.148 dest=57364 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  616.284991][T14556] comedi comedi3: rti802: I/O port conflict (0x6,4)
[  616.292195][T14556] FAULT_INJECTION: forcing a failure.
[  616.292195][T14556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  616.305548][T14556] CPU: 1 UID: 0 PID: 14556 Comm: syz.1.2107 Not tainted syzkaller #0 PREEMPT(full) 
[  616.305573][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  616.305584][T14556] Call Trace:
[  616.305590][T14556]  <TASK>
[  616.305597][T14556]  dump_stack_lvl+0x16c/0x1f0
[  616.305628][T14556]  should_fail_ex+0x512/0x640
[  616.305653][T14556]  _copy_to_user+0x32/0xd0
[  616.305677][T14556]  simple_read_from_buffer+0xcb/0x170
[  616.305707][T14556]  proc_fail_nth_read+0x197/0x240
[  616.305729][T14556]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  616.305751][T14556]  ? rw_verify_area+0xcf/0x6c0
[  616.305776][T14556]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  616.305796][T14556]  vfs_read+0x1e4/0xcf0
[  616.305816][T14556]  ? __pfx___mutex_lock+0x10/0x10
[  616.305835][T14556]  ? __pfx_vfs_read+0x10/0x10
[  616.305857][T14556]  ? __fget_files+0x20e/0x3c0
[  616.305885][T14556]  ksys_read+0x12a/0x250
[  616.305902][T14556]  ? __pfx_ksys_read+0x10/0x10
[  616.305926][T14556]  do_syscall_64+0xcd/0xfa0
[  616.305955][T14556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.305972][T14556] RIP: 0033:0x7faa8b58d9dc
[  616.305987][T14556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  616.306005][T14556] RSP: 002b:00007faa8c47f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  616.306024][T14556] RAX: ffffffffffffffda RBX: 00007faa8b7e5fa0 RCX: 00007faa8b58d9dc
[  616.306036][T14556] RDX: 000000000000000f RSI: 00007faa8c47f0a0 RDI: 0000000000000004
[  616.306046][T14556] RBP: 00007faa8c47f090 R08: 0000000000000000 R09: 0000000000000000
[  616.306056][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.306066][T14556] R13: 00007faa8b7e6038 R14: 00007faa8b7e5fa0 R15: 00007ffc4f2d8138
[  616.306093][T14556]  </TASK>
[  616.485209][    C1] vkms_vblank_simulate: vblank timer overrun
[  616.501887][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  616.509928][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  616.967732][  T977] Error reading MAC address
[  616.973306][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  616.981627][T14540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  617.196117][ T5860] usb 1-1: USB disconnect, device number 76
[  617.206616][T14540] set match dimension is over the limit!
[  617.291813][  T977] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  617.313958][  T977] usb 4-1: USB disconnect, device number 50
[  617.441847][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'.
[  617.889883][   T30] audit: type=1400 audit(872.848:1629): avc:  denied  { getopt } for  pid=14585 comm="syz.0.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  618.908968][   T30] audit: type=1326 audit(872.848:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  618.950770][   T30] audit: type=1326 audit(872.848:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  618.974351][    C1] vkms_vblank_simulate: vblank timer overrun
[  618.999713][   T30] audit: type=1326 audit(872.848:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.028053][T14595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14595 comm=syz.3.2118
[  619.033691][   T30] audit: type=1326 audit(872.848:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.097834][   T30] audit: type=1326 audit(872.848:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.182281][   T30] audit: type=1326 audit(872.848:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.253725][   T30] audit: type=1326 audit(872.848:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.276395][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.430899][T14610] mkiss: ax0: crc mode is auto.
[  619.539977][   T30] audit: type=1326 audit(872.848:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.562560][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.754709][   T30] audit: type=1326 audit(872.848:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  619.777416][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.823895][   T30] audit: type=1326 audit(872.848:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71258efc9 code=0x50000
[  620.691991][T14627] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2124'.
[  622.260772][T14645] CUSE: unknown device info ""
[  622.292600][T14645] CUSE: zero length info key specified
[  622.299223][T14646] Falling back ldisc for ptm0.
[  622.674064][T14651] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  622.698250][T14651] block device autoloading is deprecated and will be removed.
[  622.715280][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14664 comm=syz.0.2134
[  622.909139][ T5860] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  623.441071][ T5860] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  623.462326][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.479280][ T5860] usb 3-1: Product: syz
[  623.490166][ T5860] usb 3-1: Manufacturer: syz
[  623.499897][ T5860] usb 3-1: SerialNumber: syz
[  623.524149][ T5860] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  623.540532][ T5939] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  623.767546][    C0] usb 3-1: ath: unknown panic pattern!
[  623.915015][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  728.955757][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  728.962387][    C1] rcu: 	1-...!: (1 GPs behind) idle=fbbc/1/0x4000000000000000 softirq=71264/71265 fqs=239
[  728.973446][    C1] rcu: 	(t=10500 jiffies g=58017 q=371 ncpus=2)
[  728.979673][    C1] rcu: rcu_preempt kthread starved for 10009 jiffies! g58017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  728.990841][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  729.000791][    C1] rcu: RCU grace-period kthread stack dump:
[  729.006652][    C1] task:rcu_preempt     state:R  running task     stack:28080 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  729.020104][    C1] Call Trace:
[  729.023377][    C1]  <TASK>
[  729.026290][    C1]  __schedule+0x1190/0x5de0
[  729.030808][    C1]  ? __pfx___schedule+0x10/0x10
[  729.035651][    C1]  ? find_held_lock+0x2b/0x80
[  729.040319][    C1]  ? schedule+0x2d7/0x3a0
[  729.044639][    C1]  schedule+0xe7/0x3a0
[  729.048709][    C1]  schedule_timeout+0x123/0x290
[  729.053561][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  729.058926][    C1]  ? __pfx_process_timeout+0x10/0x10
[  729.064193][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  729.069973][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  729.075434][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  729.080207][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  729.085483][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  729.090685][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  729.095607][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  729.100451][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  729.106252][    C1]  rcu_gp_kthread+0x26d/0x380
[  729.110906][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  729.116073][    C1]  ? rcu_is_watching+0x12/0xc0
[  729.120827][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  729.126003][    C1]  ? __kthread_parkme+0x19e/0x250
[  729.131021][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  729.136196][    C1]  kthread+0x3c5/0x780
[  729.140245][    C1]  ? __pfx_kthread+0x10/0x10
[  729.144822][    C1]  ? rcu_is_watching+0x12/0xc0
[  729.149587][    C1]  ? __pfx_kthread+0x10/0x10
[  729.154160][    C1]  ret_from_fork+0x675/0x7d0
[  729.158742][    C1]  ? __pfx_kthread+0x10/0x10
[  729.163312][    C1]  ret_from_fork_asm+0x1a/0x30
[  729.168070][    C1]  </TASK>
[  729.171068][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  729.177365][    C1] Sending NMI from CPU 1 to CPUs 0:
[  729.182545][    C0] NMI backtrace for cpu 0
[  729.182558][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  729.182575][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  729.182587][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  729.182608][    C0] Code: b6 6b 57 00 48 89 df 5b e9 1d 1a 5d 00 be 03 00 00 00 5b e9 e2 a5 e7 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 34 24 65 48 8b 15 78 54 e4 11 65 8b 05 89 54 e4
[  729.182621][    C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00000046
[  729.182633][    C0] RAX: 0000000000000000 RBX: 0000000000000083 RCX: ffffffff875b3655
[  729.182642][    C0] RDX: ffffffff8e097a00 RSI: 0000000000000003 RDI: 0000000000000005
[  729.182651][    C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000003
[  729.182660][    C0] R10: 0000000000000003 R11: ffff888144bf7470 R12: ffff888144b68000
[  729.182669][    C0] R13: 0000000000000003 R14: 0000000000000000 R15: ffff888144b686c8
[  729.182677][    C0] FS:  0000000000000000(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000
[  729.182692][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  729.182702][    C0] CR2: 00007f9bf62ef7d9 CR3: 0000000078fe9000 CR4: 00000000003526f0
[  729.182711][    C0] Call Trace:
[  729.182717][    C0]  <IRQ>
[  729.182722][    C0]  find_endpoint+0x103/0x2c0
[  729.182745][    C0]  dummy_timer+0x4dd/0x3a00
[  729.182762][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  729.182783][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  729.182804][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  729.182827][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  729.182841][    C0]  ? rcu_is_watching+0x12/0xc0
[  729.182859][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  729.182878][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  729.182891][    C0]  __hrtimer_run_queues+0x202/0xad0
[  729.182911][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  729.182927][    C0]  ? read_tsc+0x9/0x20
[  729.182947][    C0]  hrtimer_run_softirq+0x17d/0x350
[  729.182964][    C0]  handle_softirqs+0x219/0x8e0
[  729.182984][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  729.183002][    C0]  __irq_exit_rcu+0x109/0x170
[  729.183018][    C0]  irq_exit_rcu+0x9/0x30
[  729.183034][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  729.183054][    C0]  </IRQ>
[  729.183059][    C0]  <TASK>
[  729.183064][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  729.183080][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  729.183099][    C0] Code: 07 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 d5 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  729.183110][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[  729.183121][    C0] RAX: 0000000002d4d6f5 RBX: 0000000000000000 RCX: ffffffff8b6052a9
[  729.183130][    C0] RDX: 0000000000000000 RSI: ffffffff8da2a259 RDI: ffffffff8bf06e40
[  729.183140][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[  729.183149][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[  729.183157][    C0] R13: ffffffff8e097a00 R14: ffffffff9081f6d0 R15: 0000000000000000
[  729.183170][    C0]  ? ct_kernel_exit+0x139/0x190
[  729.183193][    C0]  default_idle+0x13/0x20
[  729.183207][    C0]  default_idle_call+0x6c/0xb0
[  729.183220][    C0]  do_idle+0x38d/0x500
[  729.183237][    C0]  ? __pfx_do_idle+0x10/0x10
[  729.183254][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[  729.183271][    C0]  cpu_startup_entry+0x4f/0x60
[  729.183289][    C0]  rest_init+0x16b/0x2b0
[  729.183303][    C0]  ? acpi_subsystem_init+0x133/0x180
[  729.183320][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  729.183342][    C0]  start_kernel+0x3f6/0x4e0
[  729.183359][    C0]  x86_64_start_reservations+0x18/0x30
[  729.183376][    C0]  x86_64_start_kernel+0x130/0x190
[  729.183393][    C0]  common_startup_64+0x13e/0x148
[  729.183413][    C0]  </TASK>
[  729.183544][    C1] CPU: 1 UID: 0 PID: 1300 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  729.183558][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  729.183567][    C1] RIP: 0010:uart_write_room+0x0/0x940
[  729.183588][    C1] Code: fc e9 7a fe ff ff e8 ff e0 fe fc e9 a9 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 10 e8
[  729.183602][    C1] RSP: 0018:ffffc9000429f9b0 EFLAGS: 00000293
[  729.183616][    C1] RAX: 0000000000000000 RBX: ffff88802556f000 RCX: ffffffff8669974f
[  729.183626][    C1] RDX: ffff88802871c900 RSI: ffffffff851fd02d RDI: ffff88802556f000
[  729.183636][    C1] RBP: 0000000000000800 R08: 0000000000000005 R09: 0000000000000000
[  729.183644][    C1] R10: 0000000000000020 R11: 0000000000000001 R12: ffffffff8526b700
[  729.183654][    C1] R13: ffff88801b7f4d80 R14: 0000000000000020 R15: ffff88801b7f4000
[  729.183661][    C1] FS:  0000000000000000(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000
[  729.183671][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  729.183677][    C1] CR2: 0000200000404030 CR3: 0000000059bb5000 CR4: 00000000003526f0
[  729.183684][    C1] Call Trace:
[  729.183687][    C1]  <TASK>
[  729.183690][    C1]  tty_write_room+0x66/0x90
[  729.183702][    C1]  handle_tx+0x14f/0x630
[  729.183722][    C1]  dev_hard_start_xmit+0x97/0x740
[  729.183746][    C1]  __dev_queue_xmit+0xa46/0x4490
[  729.183768][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  729.183788][    C1]  ? finish_task_switch.isra.0+0x221/0xc10
[  729.183807][    C1]  ? rcu_is_watching+0x12/0xc0
[  729.183825][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  729.183835][    C1]  ? __schedule+0x11a3/0x5de0
[  729.183849][    C1]  ? __lock_acquire+0xb8a/0x1c90
[  729.183864][    C1]  ? __lock_acquire+0xb8a/0x1c90
[  729.183881][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  729.183907][    C1]  ? rcu_is_watching+0x12/0xc0
[  729.183930][    C1]  tx+0xcc/0x190
[  729.183946][    C1]  ? __pfx_tx+0x10/0x10
[  729.183959][    C1]  kthread+0x1e4/0x3e0
[  729.183982][    C1]  ? find_held_lock+0x2b/0x80
[  729.183996][    C1]  ? __pfx_kthread+0x10/0x10
[  729.184010][    C1]  ? __pfx_default_wake_function+0x10/0x10
[  729.184022][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  729.184037][    C1]  ? __kthread_parkme+0x19e/0x250
[  729.184051][    C1]  ? __pfx_kthread+0x10/0x10
[  729.184072][    C1]  kthread+0x3c5/0x780
[  729.184092][    C1]  ? __pfx_kthread+0x10/0x10
[  729.184109][    C1]  ? rcu_is_watching+0x12/0xc0
[  729.184128][    C1]  ? __pfx_kthread+0x10/0x10
[  729.184144][    C1]  ret_from_fork+0x675/0x7d0
[  729.184155][    C1]  ? __pfx_kthread+0x10/0x10
[  729.184164][    C1]  ret_from_fork_asm+0x1a/0x30
[  729.184184][    C1]  </TASK>
[  729.811795][    C1] vkms_vblank_simulate: vblank timer overrun