last executing test programs:

13.835962109s ago: executing program 2 (id=1120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
getpgid(0x0)
lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.redirect\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

13.097492245s ago: executing program 2 (id=1122):
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xfb, 0xe7, 0xe, 0x20, 0x1209, 0x1006, 0x280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x80, 0x80, 0xf8, [{{0x9, 0x4, 0x92, 0x2, 0x0, 0x58, 0x55, 0xfa}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x9000)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0xc6)

9.912710355s ago: executing program 2 (id=1136):
r0 = syz_usb_connect(0x5, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000015670c20c82d4aaa3db401020301090209000000001000e5d07066c0a18edcb9961369cd63dea9d38f0ff9a992500a7ad5b76403815f6298c5f0beabb3fb5df80e5ff7d024d9bd42ba265e2eabb2615dc9aacd43b9"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10)
setitimer(0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0420"], 0xb)
unshare(0x2040400)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="429fbc1628cfe799f338dca285a14dd73747e0c866fc1540e235f867d4a2cd7452224f54ea4fb2bb5f5e195959c6301130331a37e927aa2fad1af619d2cc9515e9dfee47c7ff5a2c271dbdb88bbc6a93f6b9d1b91b20c9b4426f19cfbd3ee7270a641b2972dfafc718f6", @ANYRESDEC=r5, @ANYRES16=r3, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES64, @ANYRESHEX=r0, @ANYRESDEC=r3], 0x48)

9.491362961s ago: executing program 4 (id=1139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000002"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

9.48890411s ago: executing program 3 (id=1140):
syz_emit_ethernet(0xa7, &(0x7f0000000080)={@local, @random="0000101d00", @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x95, 0x64, 0x0, 0x8, 0x6, 0x0, @local, @broadcast}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x27, 0x0, 0xe7}, {"4e893249fd730317956ecbd54dcee716372a6d282079b5f2e3486b614ab72a3cc1925f936293876a75db57f9a4fa3eb77bd9591a7210251c6a80e210ab053c261c6e09b298ab14fca383413bb3c5554ac31080ad6dbec6eab74599b1670cafebc42350c4ce57b7dbdc75b22dba"}}}}}}, 0x0)

9.369422982s ago: executing program 3 (id=1141):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)={0x20, 0x12, 0xc6, "f430fd91602987d783de85e546341b1358cc867044fe26268a7bd8ea3a3c47f27c418569533a38a40dbb31c3d3f9f8314d87be4221921fb77eb302280dc9ef795b3b2325069fbfee59d98442427c4d5defe34d001808e68ab319751744caf24b44c80a0eb8f5032b64f5c5be3cbb54c653bebe25ef78cc784d35a21c18ec3175a2dc2f2e57a1d6bff8ceba904d73684afd5509792deac05a032ddd69973910b00c2c1128da431280879cc8a7af0919b5bc2ea191ca4da7d27ca76cd2e588ada9587c676720be"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400010bcc)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}}}}}, 0x2e)
r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x42, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)

9.032909534s ago: executing program 4 (id=1142):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@ipv4_getaddr={0x34, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x2, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x9, 0x0, 0x2}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0x4000000)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x101, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4]}})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = getpid()
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)=@userptr={0x81, 0x4, 0x4, 0x8, 0xb002, {}, {0x4, 0xc, 0x80, 0x0, 0x4, 0x8, "0d1e6b95"}, 0x5, 0x2, {0x0}, 0xca})
r4 = syz_pidfd_open(r2, 0x0)
ioctl$VIDIOC_QBUF(r4, 0xc058ff0b, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
close(r0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x1ffffff, 0x33}, 0xa, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8008000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x14, 0x905, 0x70bd25, 0x25dfdbfb, {0xa, 0x6, 0x3, 0x0, {0x4e26, 0x4e23, [0x0, 0x2c000000, 0x6, 0x1], [0xfffffffe, 0x5, 0x1, 0x8a67], 0x0, [0x3, 0x1002]}, 0x4, 0xffffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810)

7.438363073s ago: executing program 4 (id=1145):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000})
prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10)
gettid()
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
timer_create(0xb, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_proto_private(r5, 0x89eb, &(0x7f00000002c0)="d8287f62b207340078173905c6e22af91186ebeb7827bfdcdf5709c5ccbd5f6a70fa79e6dccfc913778d721998606b5a645ce579ea30ae3eef1e5801aea1437cb42cddb357cd445a5c29b80a5ae05b5de9b01f3de2589039d4eb5e6f55e2b25cb43fbaff69fd54c1")
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')

6.316953774s ago: executing program 1 (id=1149):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000140)={0xf000, 0x2, 0x7, 0x5, 0x51})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.15812177s ago: executing program 1 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESOCT, @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
setfsgid(0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000021401"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x100, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x854)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)

5.776541245s ago: executing program 0 (id=1152):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1900, 0xa10, 0x0, 0x0}], 0x1})

5.67919563s ago: executing program 4 (id=1153):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x1004007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=<r1=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)={0x2440, 0x1, 0x16}, 0xfffffffffffffec1)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$inet(0x2, 0x1, 0x100)
syz_usb_connect(0x2, 0x2f, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x1e, 0xba, 0xd7, 0x8, 0xeb1a, 0x2801, 0x217a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x8, 0x1, 0x10, 0x3f, 0x8d, 0x4, [], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x7, 0x5, 0x1, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1)
r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400})
socket$inet(0x2, 0x3, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x252102, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="85ba75ea9c200566fd0dcf26ca83e313206f6f59703ec950cd474539fe938648e3f7c8033f05d3551453456ad74800c2c26d7cc95295d8f8cf00ebfba6200371bf7a9ae7127531e3f3ce144be8b1bd4b2e2c2fef1ab688d13e2a3d61d960671c1594308d011538cc56299c8082c6c79e38bd3afd20c3401cbe179e4417821d70d6ab21512ba25c9e6b8d0e4c6cd55cb658430d36ee8782ba6d6fa2cd1ba3384c122c0b78ef6cfee8c624d2d9c67e95fabb82656f8d77d49e89da3dcde6aa59629a2fc9ae3dadb748c7903bf6d3bdf88cba7ed9eb75cead640ee83523ed6af272db979dad513e1fdc15473c988802e64575dd48"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0xffffffa6, 0x0, 0x24000801}, 0x8000)

5.206443361s ago: executing program 1 (id=1154):
mount$bpf(0x0, 0x0, 0x0, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1})
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

5.083751621s ago: executing program 2 (id=1155):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r0, @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
setfsgid(0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000021401"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

4.108715518s ago: executing program 3 (id=1156):
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast2}, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xc)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, 0x0, 0x4000)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r6, 0x7, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000280)=[0x9, 0x4, 0x48], &(0x7f00000002c0)=[0x3, 0x5, 0x5, 0x0], 0x9, 0x3, 0x0, r0}}, 0x40)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005)
write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

3.634977288s ago: executing program 2 (id=1157):
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x2b1e}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'vlan1\x00', {0x2}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x7c, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0x2, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'sit0\x00', <r9=>0x0})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x8}, {0xc, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xe42adb80cfa7e7b7}, 0x0)

3.310116885s ago: executing program 0 (id=1158):
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast2}, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5})
r6 = fsmount(r5, 0x0, 0xc)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, 0x0, 0x4000)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r6, 0x7, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000280)=[0x9, 0x4, 0x48], &(0x7f00000002c0)=[0x3, 0x5, 0x5, 0x0], 0x9, 0x3, 0x0, r0}}, 0x40)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005)
write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

3.219765183s ago: executing program 3 (id=1159):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
socket$inet6(0xa, 0x2, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)

3.208644435s ago: executing program 1 (id=1160):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
write$cgroup_subtree(r1, &(0x7f0000002300)=ANY=[], 0x9)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x45c0, 0x4)
sendto$inet(r6, &(0x7f0000000080)='v', 0x1, 0x0, 0x0, 0x0)
getsockopt$rose(r5, 0x104, 0x4b264316b88a3841, 0x0, &(0x7f00000000c0))
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040))
r7 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000001ac0)={0xff800000, 0x4, 0x5})
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d000000b702000000000000739af0ff00000000c5090000190f0020c38168ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.083148826s ago: executing program 3 (id=1161):
r0 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000006380)=[{{&(0x7f0000000380)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000400)="9956e259ff84f69a73569bc75e8dfbf623f6562aec694bb65608c0a7ce2a1b755c4733cdbbbd82331ed42dfc963bb8ef93c8d4570821d609b70e06228635cd89bb7b1feb05f80ef4e85c614629d7789d7d88a06469c89aa33e3890ab0e499acfc547ec30afd40c9bb33895c453973bc05001da56eac3ba0eec92003be2ea0bf56b0d35243283f5763e07a78c28c721f493d5fc6405d204b83d3a13a1b0f40a57e4612d8540dd1f638ef1d3a5c4564804e17dbb32a5dcb17d06b831a0242bc1be45e4dd8738058f5c1b60830b93d803acb5a4ec938d1b6a91ec507350c2713688499f398da9f25b142f97dd32", 0xec}, {&(0x7f0000000580)="e01eef95efa048699e13617dbb38f2e332fbdffbdd00dff21a1632798dc1532346a05bd5ba0c6e06bc727d95be188fb8530802b6d9b89f86891fe80ef20dcad52b585deba34581ec4716", 0x4a}, {&(0x7f0000000600)="19b273a01df5e083a9ef6902d2868dc972531e93c5a3eaa545c2385ceb0f74a048a69248a5457bff4eb35458224a12642a2e1c848d47681f4cdf4d190f5975623a73db87586ac04fa6758249bf676e8166987a7f283a580e55020f57402e51de7421885461c911a8bd132dceaaf00760857714813673a16e64389d8db4b442f95788caa0e2a424f7a447d4f870aaec755e36915c00c5745b9ff38fc93cb713422c2a20b5dad41770d7f40ca1e18b1806f8bf256ca3a9aad205486bd98d81855fd1550e36ebc79819494a10c2113083d0aa7ea3486ceee97ed7e5861a5b96e57d62f03e2f8673de9083f99b0ae0ac", 0xee}, {&(0x7f0000000700)="f5507ef261e165f99b725bbf7e21248189d67f7214ea0496b7ac4767e6f4a36bbcf9b50049b2fbab70ac2b708c876915b540b7e9a8fce9293b5cacb287d6d22e439cb63efb706768996aaa60e3f1e18e46a479cbc01424ddce126bee3c550c9ef2636f502dc1c9707d7f3a58c589f4b7332136fa47265d0764f6f7b4a2757ab6edbf06dd012e7a7057b76c063a9b15aa2047dac923a4504370d351c64a78959192491aa2bcfb0fbb5e56c08b71e5ce5f6a2cfd69", 0xb4}, {&(0x7f00000007c0)="df956acdd0e3443c0a4e1eb38bd7391c42dbac4adcf52dc8fa031609cdd12feaaf25acf9cb602749b61a59f0b4a7f93ef6fac8177b43d0a7fc6b3ce92c497521846742a27adfa27856659df3d473066caced8b875b53fc8a9eea7d9a1e2bee8a5855b0a2f39cb0abcacb6af56f08048a4cff55bfa8e5a12c964eeef595fb27b3da9d8bc35de91a48bc39fce013be6208582ff8cf294845ee62e796a5b9f5d42807ef2389936ed5", 0xa7}, {&(0x7f0000000880)="72fcd6b7635aa5ca15283f532a6fbe1193806431b16bb9d98051c0e68ffc47d5c6e7d9e5ec6c1f3fc1e1072942bd214835644c58017c2ec4b0d9b7199fc644c6a4d4223242f02f908ae2ab3bacb2096c1aa284620ba2853ea81527f9f24c67dae95437c2", 0x64}, {&(0x7f0000000900)="eeedaafc22c2b85d92a37f7d9d7ff63070a9573ae356b3400f854c7d6e3f93224db261ad0d5a7fd280ba3b95d99e9e85caf338c167b82fdd8ec83daea0a5151513307f598e21cea3761b78c8ebe3dd60b98f6d137459f549c3562143c8fdf3d3c32f3d2379fc8200d80255bc07224dd55dc267f02bb64bab39965be37f79ff9860b7e65943677c38fa698253f24fe602f33ad97bf075f9e4b26589069a5bcec4794be207b493568882", 0xa9}, {&(0x7f0000000140)="c0bcfa1151117d0f34f6952cb8c793ca17", 0x11}, {&(0x7f00000009c0)="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", 0x1000}], 0x9, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20, 0x24040050}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001c00)="6b6fc7b30b8485ac13a0f3d736a143980b50a2580ae264fc731d0128", 0x1c}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="13da79f1aa21b507b687074d575adbebdb188565a786fb2fc4ca86cc650e14469ace79804de2a431a510a315bd00"/55, 0x37}, {&(0x7f0000002c80)="bd0c3b3406bbc9f6a985320811165928d86864428f669967ab25ce4d0495496089c3", 0x22}, {&(0x7f0000002cc0)="94617eab53dee1718087cfb05457f071938717fcd8c634d6c6f953a6357c03c99f084111ed550839672b78cd5d8c4660c6ad2548842d9a6ae10700d60c36fd10c737f42c54d269f3e80f49712b7682039deee51bc72bc4428beba9d06f1fdfb09a78aa59699c78531f4605925a2ae5d461fd637b67d1d1bc44cb887a2f5041ed41a594afb4b772dacfaaf6f0c1c5ba310020f93eac5ca153591603e226162c48ac54b36940cbb2ed6ba5a5c0148bc0620008e116c71846e04041f6ce28713b0a6c79ffaf6e7fc2ca611924cbaf2fb5b7bbc1b0db3f32638cd35a7ae7bcbd", 0xde}, {&(0x7f0000002dc0)="7e2e91f20e22bd94ebf4c615e9d08a1894ecc72e2189e7d4bf8b", 0x1a}], 0x6, 0x0, 0x0, 0x4081}}, {{&(0x7f0000002e80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002f00)="4cb719e0418578fb6b6e4c9d4538c966daf2c6a2889bed9619d94c8011223e35c6fc8ccef17345eb1ff20200995dcdebe49ae2be8eb6c713822763f7d99c57c834683b56b8e99a108486009463d894ad90d3e0000a74d15c7b48cf11b9a4700c8074b981a78c2f26fb639c35077688e00a9ff530f402eeb3f0d3fa7082fecb0b812d62618c225d6af448a2e34b7a25d137a198b433e2c3bbd42a7836ee924acf971bbae9ce2f9c758ba9b9dc3deb31132f5f6d81f5341c75a0a4d0d6310f35c64b15e3b45159", 0xc6}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00040000000000000000155d42e42ce400000100", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x4000001}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003400)="2973d7975f671a93364570ed4d36f2cd89d3f83c5bf5d48e6db0", 0x1a}, {&(0x7f0000003440)="38741de6ccc6cd96fb82d19bc6caa2393d2beb25dd3b5cd5d0d92b4ee123ed683dcb553c71765925dee90e356bf75ff6c9255d086c9996e30a107e09d5f6b830010d38981ee9631281946311868c52cbaa5d726b876567144102314b12da926ddfe44d9eb4d8be4b11a04e3761ffadcebd352986182ed524f9427b616042aa85ffaf315b1030c52658c4aabe508afcaad88593371aff763b033c20e44db021b264053752563d66d2863d49e7b02dd090f99232b0e2d01f085bd7a192809bdbe58c594ec077f5e64e78873224d7142c468935e6744e20f8db32f224c2b660dad78ab6dc953c4e92af2d4f480200"/250, 0xfa}, {&(0x7f0000003540)="4504c40de631bc39d05c15f0a365614eb0ff2dcb95ef66b5cab87da45e8e265aea7e8be37da62f62039d710bb2a566bfd32e3f1a9f15b135cc57cfc236cf0e854ef55f29bf30ba183d70590ee06c0d90142aabe819dc9711ccd29c5a4ea0f0b0a1ff30a9ae24c7a3404f6ca67641e5fad3c0df79e70d2c353e465037f89627be47be392fadca910a53a6ddcb7ae46b5d2d87058d365c9839dcc2ec5059d3b00376c7c9a4a9841845e08abbdcb74e51d440f8785dc9e97784b7bc720ec7", 0xbd}, {&(0x7f0000003600)="ab841bfc5258fa3488f12cac3972c1571bc5b99578b67db1ce98f409c2b31ec6ca8b3643d964f04b4973ae25cb381039b4bb9357083104e3261f6f2c2e68ab5482c35140cd44f5f58d729b040a646f730a3feb400313747489d601ff72a5fe6d97dc826ffb7fb1104c89976a9998a805f67326ed1fdb9fa4c7719915e86519f99c126cb435c88988cc2bbfea556c147e739c2b52f64804b35498662d9c4d1d02490e632006009696ea0023aa0cef09c8ae5556db7575f25d9ec321", 0xbb}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f00000046c0)="4d79f0ec19ba5f24cd8dcf95ef04c981d52551be06873f524c703e816c3feff14696aab23d52b3d81d2b0f580487e04d7f204907dd", 0x35}], 0x6, &(0x7f00000049c0), 0x0, 0x24020004}}], 0x4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000008000200ff030000050006000200000014000100fe8800000000000000000000000001010800030006000000"], 0x40}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x1}, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x6, 0x5, 0x7, 0x3, 0x1, 0x0, [{0x9, 0x75264262, 0x20000000000005, '\x00', 0x102}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000000)

2.941025324s ago: executing program 2 (id=1162):
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r4, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xc0002002})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0)

2.485885365s ago: executing program 4 (id=1163):
openat$fb0(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000001c00)={0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0})

2.369028087s ago: executing program 4 (id=1164):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000"], 0x40}}, 0x4000800)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r12, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}}, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

2.330875546s ago: executing program 1 (id=1165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a83c0081000b0008004500001c00000002001190784c5b07ea91069714ad497adef674053b00000000000000000020000000089092703eb0c2dc438c85bac5f760d7f562bf2be19bbbe01408e609c63492a2d33290ba8846beb0fff64fa7f589ba81bd24b18627c77772dd28308e628f8ea6122cdd0417ba39f533875217f95244cc6b56e985956e5f079d6d43b6df30"], 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16, @ANYBLOB="040028bd7000ffdbdf250200000038000380060007004e2200000800030002000000060004000300000008000500e00000021400020076657468315f6d61637674617000000008000400080000002c00028005000d000000000006000b0002000000080004000f00000005000d000100000006000f0003000000080004000700000024000280060002004e230000060002004e220000000600060000000800090000000000080006000700000030000280080004000000010008000500090000000800040036d6000014000100fc0200000000000000000000000000012800018008000b007369700008000800fcffffff14000300"/262], 0x10c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}, 0x1, 0x0, 0x0, 0x604c000}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x7}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r4, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540), 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000007c0), r4, 0x0, 0x1, 0x4}}, 0x20)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)={'dummy0\x00'})

2.247416072s ago: executing program 0 (id=1166):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008084}, 0x24004085)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2}}}}, 0x0)

1.977085696s ago: executing program 0 (id=1167):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r0, @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
setfsgid(0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000021401"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

1.60484624s ago: executing program 3 (id=1168):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1900, 0xa10, 0x0, &(0x7f00000000c0)}], 0x1})

1.109678608s ago: executing program 1 (id=1169):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000002060108000000000000000000000000000000007379fb797894d36777d6f79fb6267a310000000014000780050015000a000000"], 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000003240)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x8, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r5, &(0x7f0000000200)='THAWED\x00', 0x7)
bind$netlink(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$packet(0x11, 0x2, 0x300)

1.040424318s ago: executing program 0 (id=1170):
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast2}, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xc)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, 0x0, 0x4000)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r6, 0x7, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000280)=[0x9, 0x4, 0x48], &(0x7f00000002c0)=[0x3, 0x5, 0x5, 0x0], 0x9, 0x3, 0x0, r0}}, 0x40)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005)
write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

0s ago: executing program 0 (id=1171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000004f40)=0xffffffffffffff53)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x240)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
ioctl$int_in(r6, 0x40000000af01, 0x0)
syz_io_uring_setup(0x239c, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x20000}, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340))
dup(r5)

kernel console output (not intermixed with test programs):

1:680): avc:  denied  { mount } for  pid=9405 comm="syz.2.875" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  366.560384][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'.
[  366.572597][   T30] audit: type=1400 audit(1756350475.501:681): avc:  denied  { unmount } for  pid=9405 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  366.595512][ T5927] usb 5-1: USB disconnect, device number 57
[  366.659457][ T5998] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  366.821948][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  366.832976][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.843527][ T5998] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  366.994250][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.041062][ T5998] usb 1-1: config 0 descriptor??
[  367.058238][ T5998] hub 1-1:0.0: USB hub found
[  367.337242][ T5978] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  367.344892][ T5998] hub 1-1:0.0: 2 ports detected
[  367.373462][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'.
[  367.863418][ T5978] usb 4-1: Using ep0 maxpacket: 16
[  367.891425][ T5978] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  368.077513][ T5978] usb 4-1: config 0 has no interface number 0
[  368.110008][ T9441] rdma_rxe: rxe_newlink: failed to add vxcan1
[  369.307332][ T5978] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  369.351216][ T5978] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  369.362318][ T5998] hub 1-1:0.0: hub_ext_port_status failed (err = -32)
[  369.371028][ T5978] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  369.380850][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  369.389366][ T5978] usb 4-1: Product: syz
[  369.428267][ T9452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'.
[  369.500070][ T5978] usb 4-1: SerialNumber: syz
[  369.509326][ T5978] usb 4-1: config 0 descriptor??
[  369.525835][ T5978] cm109 4-1:0.8: invalid payload size 0, expected 4
[  369.538687][ T5978] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input24
[  369.688513][  T978] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  369.820470][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  369.848503][  T978] usb 2-1: Using ep0 maxpacket: 16
[  369.857789][  T978] usb 2-1: config 0 has no interfaces?
[  369.864645][  T978] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  369.874592][  T978] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  369.882997][  T978] usb 2-1: Manufacturer: syz
[  369.895146][  T978] usb 2-1: config 0 descriptor??
[  370.046056][  T978] usb 4-1: USB disconnect, device number 37
[  370.065301][  T978] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  370.468325][   T30] audit: type=1400 audit(1756350479.391:682): avc:  denied  { read append } for  pid=9458 comm="syz.0.885" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  370.492600][   T10] usb 1-1: USB disconnect, device number 34
[  370.560082][   T30] audit: type=1400 audit(1756350479.391:683): avc:  denied  { open } for  pid=9458 comm="syz.0.885" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  370.871988][   T30] audit: type=1400 audit(1756350479.391:684): avc:  denied  { ioctl } for  pid=9458 comm="syz.0.885" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  371.428490][ T5927] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  371.490397][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'.
[  371.572298][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  371.623147][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  371.791678][ T5927] usb 4-1: Using ep0 maxpacket: 16
[  371.829644][ T5927] usb 4-1: config 0 has no interfaces?
[  371.836777][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  371.848114][ T5927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  371.859530][ T5927] usb 4-1: Manufacturer: syz
[  371.872787][ T5927] usb 4-1: config 0 descriptor??
[  372.346862][ T5998] usb 2-1: USB disconnect, device number 48
[  374.220526][ T9498] FAULT_INJECTION: forcing a failure.
[  374.220526][ T9498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.369175][ T9498] CPU: 1 UID: 0 PID: 9498 Comm: syz.4.893 Not tainted syzkaller #0 PREEMPT(full) 
[  374.369193][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  374.369199][ T9498] Call Trace:
[  374.369203][ T9498]  <TASK>
[  374.369207][ T9498]  dump_stack_lvl+0x16c/0x1f0
[  374.369223][ T9498]  should_fail_ex+0x512/0x640
[  374.369238][ T9498]  _copy_from_user+0x2e/0xd0
[  374.369253][ T9498]  copy_msghdr_from_user+0x98/0x160
[  374.369266][ T9498]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  374.369285][ T9498]  ___sys_sendmsg+0xfe/0x1d0
[  374.369297][ T9498]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.369328][ T9498]  __sys_sendmsg+0x16d/0x220
[  374.369340][ T9498]  ? __pfx___sys_sendmsg+0x10/0x10
[  374.369360][ T9498]  do_syscall_64+0xcd/0x4c0
[  374.369375][ T9498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.369386][ T9498] RIP: 0033:0x7f07e4f8ebe9
[  374.369396][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.369406][ T9498] RSP: 002b:00007f07e31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.369417][ T9498] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8ebe9
[  374.369425][ T9498] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003
[  374.369431][ T9498] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  374.369438][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.369444][ T9498] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  374.369457][ T9498]  </TASK>
[  374.678667][ T5927] usb 4-1: USB disconnect, device number 38
[  374.717683][   T30] audit: type=1400 audit(1756350483.641:685): avc:  denied  { shutdown } for  pid=9502 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  374.898689][  T975] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  374.939423][   T30] audit: type=1400 audit(1756350483.851:686): avc:  denied  { setopt } for  pid=9504 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  375.064443][ T9513] netlink: 'syz.3.898': attribute type 4 has an invalid length.
[  375.459963][  T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.488086][  T975] usb 2-1: config 0 has no interfaces?
[  375.498522][  T975] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  375.507812][  T975] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  375.519430][  T975] usb 2-1: Product: syz
[  375.524474][  T975] usb 2-1: Manufacturer: syz
[  375.530311][  T975] usb 2-1: SerialNumber: syz
[  375.635865][  T975] usb 2-1: config 0 descriptor??
[  375.698761][   T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  375.855536][  T975] usb 2-1: USB disconnect, device number 49
[  375.910288][   T10] usb 5-1: Using ep0 maxpacket: 32
[  375.944982][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  376.048756][   T10] usb 5-1: config index 0 descriptor too short (expected 53, got 34)
[  376.056834][   T10] usb 5-1: config 2 has an invalid interface number: 221 but max is 0
[  376.065823][   T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  376.075991][   T10] usb 5-1: config 2 has no interface number 0
[  376.086093][   T10] usb 5-1: config 2 interface 221 has no altsetting 0
[  376.105688][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  376.152314][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.176344][   T10] usb 5-1: SerialNumber: syz
[  376.370730][  T975] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  376.402384][   T10] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  376.418644][   T10] usb 5-1: No valid video chain found.
[  376.452415][   T10] usb 5-1: USB disconnect, device number 58
[  376.530068][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  376.544494][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.558072][  T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  376.568739][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.600737][  T975] usb 2-1: config 0 descriptor??
[  376.615746][  T975] hub 2-1:0.0: USB hub found
[  376.827951][  T975] hub 2-1:0.0: 2 ports detected
[  377.168183][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  378.396368][ T9547] syz2: rxe_newlink: already configured on vxcan1
[  379.123468][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  379.129914][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  379.138635][   T10] usb 1-1: Using ep0 maxpacket: 16
[  379.213565][  T975] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  379.226366][   T10] usb 1-1: config 0 has no interfaces?
[  379.258712][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  379.286593][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  379.343289][   T10] usb 1-1: Manufacturer: syz
[  379.440447][   T10] usb 1-1: config 0 descriptor??
[  379.578742][  T975] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  379.647526][ T5927] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  379.663977][   T44] usb 1-1: USB disconnect, device number 35
[  379.984406][  T975] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  379.994330][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.003936][  T975] usb 5-1: Product: syz
[  380.012342][  T975] usb 5-1: Manufacturer: syz
[  380.017025][  T975] usb 5-1: SerialNumber: syz
[  380.056009][  T975] usb 5-1: config 0 descriptor??
[  380.063288][  T975] gspca_main: sq905c-2.14.0 probing 2770:9052
[  380.102285][ T5927] usb 3-1: Using ep0 maxpacket: 16
[  380.222758][ T5927] usb 3-1: config 0 has no interfaces?
[  380.244189][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  380.253299][ T5927] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  380.262195][ T5927] usb 3-1: Manufacturer: syz
[  380.275125][ T5927] usb 3-1: config 0 descriptor??
[  380.487133][   T44] usb 2-1: USB disconnect, device number 50
[  380.789626][  T975] gspca_sq905c: sq905c_read: usb_control_msg failed (-110)
[  380.830279][  T975] sq905c 5-1:0.0: Reading version command failed
[  380.836683][  T975] sq905c 5-1:0.0: probe with driver sq905c failed with error -110
[  380.904468][  T975] usb 5-1: USB disconnect, device number 59
[  381.143843][ T9564] overlayfs: missing 'workdir'
[  381.213368][   T44] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  381.383380][   T30] audit: type=1400 audit(1756350490.311:687): avc:  denied  { bind } for  pid=9573 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  381.452280][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.477088][   T44] usb 2-1: config 0 has no interfaces?
[  381.491680][   T44] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  381.676241][   T30] audit: type=1400 audit(1756350490.431:688): avc:  denied  { write } for  pid=9573 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  381.705947][   T44] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  381.745821][   T44] usb 2-1: Product: syz
[  381.777710][   T44] usb 2-1: Manufacturer: syz
[  381.789255][   T44] usb 2-1: SerialNumber: syz
[  381.812875][ T5852] Bluetooth: hci3: unexpected event for opcode 0x200a
[  381.856059][   T44] usb 2-1: config 0 descriptor??
[  382.107097][  T978] usb 2-1: USB disconnect, device number 51
[  382.671568][ T5926] usb 3-1: USB disconnect, device number 48
[  382.908144][  T975] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  383.178487][ T5927] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  383.208716][  T975] usb 4-1: Using ep0 maxpacket: 16
[  383.217339][  T975] usb 4-1: config 1 has an invalid interface number: 6 but max is 2
[  383.297695][  T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  383.358346][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.369451][ T5927] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  383.388862][  T975] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  383.400505][ T5927] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  383.409624][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.455879][  T975] usb 4-1: config 1 has no interface number 1
[  383.462909][ T5926] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  383.471723][ T5927] usb 5-1: Product: syz
[  383.478638][ T5927] usb 5-1: Manufacturer: syz
[  383.483518][  T975] usb 4-1: too many endpoints for config 1 interface 6 altsetting 40: 173, using maximum allowed: 30
[  383.507336][ T5927] usb 5-1: SerialNumber: syz
[  383.527258][ T5927] usb 5-1: config 0 descriptor??
[  383.538029][  T975] usb 4-1: config 1 interface 6 altsetting 40 has an invalid descriptor for endpoint zero, skipping
[  383.573070][  T975] usb 4-1: config 1 interface 6 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 173
[  383.589226][   T44] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  383.597942][  T975] usb 4-1: config 1 interface 6 has no altsetting 0
[  383.608092][  T975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  383.630652][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.641127][ T5926] usb 3-1: config 0 has no interfaces?
[  383.649464][ T5926] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  383.658501][ T5926] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  383.667850][ T5926] usb 3-1: Product: syz
[  383.678000][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.686820][ T5926] usb 3-1: Manufacturer: syz
[  383.696213][  T975] usb 4-1: Product: syz
[  383.701872][ T5926] usb 3-1: SerialNumber: syz
[  383.716444][  T975] usb 4-1: Manufacturer: syz
[  383.726055][ T5926] usb 3-1: config 0 descriptor??
[  383.733353][  T975] usb 4-1: SerialNumber: syz
[  383.749466][   T44] usb 2-1: Using ep0 maxpacket: 16
[  383.769106][   T10] usb 5-1: USB disconnect, device number 60
[  383.809395][  T978] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  383.839252][   T44] usb 2-1: unable to read config index 0 descriptor/start: -61
[  383.846876][   T44] usb 2-1: can't read configurations, error -61
[  383.958529][  T978] usb 1-1: Using ep0 maxpacket: 16
[  383.971766][ T5978] usb 3-1: USB disconnect, device number 49
[  383.978917][   T44] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  383.994207][  T978] usb 1-1: config 0 has no interfaces?
[  384.000850][  T978] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  384.010130][  T978] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  384.018109][  T978] usb 1-1: Manufacturer: syz
[  384.039161][  T978] usb 1-1: config 0 descriptor??
[  384.139033][   T44] usb 2-1: Using ep0 maxpacket: 16
[  384.150376][   T44] usb 2-1: unable to read config index 0 descriptor/start: -61
[  384.161604][   T44] usb 2-1: can't read configurations, error -61
[  384.168867][   T44] usb usb2-port1: attempt power cycle
[  384.323657][ T5978] usb 1-1: USB disconnect, device number 36
[  384.426363][ T9608] siw: device registration error -23
[  384.508558][   T44] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  384.658520][   T44] usb 2-1: Using ep0 maxpacket: 16
[  384.690935][   T44] usb 2-1: unable to read config index 0 descriptor/start: -61
[  384.698681][   T44] usb 2-1: can't read configurations, error -61
[  384.828904][   T44] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  384.888926][   T44] usb 2-1: Using ep0 maxpacket: 16
[  384.925463][   T44] usb 2-1: unable to read config index 0 descriptor/start: -61
[  384.940194][   T44] usb 2-1: can't read configurations, error -61
[  384.948866][   T44] usb usb2-port1: unable to enumerate USB device
[  384.958516][  T978] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  385.088211][  T975] usb 4-1: skipping empty audio interface (v1)
[  385.138602][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  385.160682][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.185877][  T975] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  385.199361][  T978] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  385.252603][  T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.259433][ T5926] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  385.276935][  T978] usb 3-1: config 0 descriptor??
[  385.287006][  T978] hub 3-1:0.0: USB hub found
[  385.430239][  T975] usb 4-1: USB disconnect, device number 39
[  385.509340][ T5926] usb 1-1: Using ep0 maxpacket: 16
[  385.521494][ T5926] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  385.893957][ T5926] usb 1-1: config 0 has no interface number 0
[  385.900195][ T5926] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  385.911112][ T5926] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  385.944497][ T7961] udevd[7961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  385.961075][  T978] hub 3-1:0.0: 2 ports detected
[  385.962261][ T5926] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  385.995000][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  386.013098][ T5926] usb 1-1: Product: syz
[  386.018829][ T5926] usb 1-1: SerialNumber: syz
[  386.033777][ T5926] usb 1-1: config 0 descriptor??
[  386.043830][ T5926] cm109 1-1:0.8: invalid payload size 0, expected 4
[  386.053595][ T5926] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input25
[  386.247751][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  386.855949][ T9631] rdma_rxe: rxe_newlink: failed to add vxcan1
[  387.777060][  T978] usb 1-1: USB disconnect, device number 37
[  387.791007][  T978] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  387.818727][ T5998] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  387.827274][ T5978] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  388.048081][ T5998] usb 4-1: Using ep0 maxpacket: 32
[  388.095995][ T5998] usb 4-1: unable to get BOS descriptor or descriptor too short
[  388.165979][ T5998] usb 4-1: config index 0 descriptor too short (expected 53, got 34)
[  388.177392][ T5998] usb 4-1: config 2 has an invalid interface number: 221 but max is 0
[  388.186596][ T5998] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  388.200211][ T5998] usb 4-1: config 2 has no interface number 0
[  388.206597][ T5998] usb 4-1: config 2 interface 221 has no altsetting 0
[  388.248942][ T5998] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  388.258217][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.266776][ T5998] usb 4-1: SerialNumber: syz
[  388.318577][ T5926] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  388.337568][ T9643] siw: device registration error -23
[  388.522764][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.577587][ T5926] usb 2-1: config 0 has no interfaces?
[  388.592701][ T5926] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  388.602458][ T5926] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  388.602628][ T5998] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  388.617919][ T5926] usb 2-1: Product: syz
[  388.634664][ T9648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'.
[  388.637773][ T5998] usb 4-1: No valid video chain found.
[  388.658890][ T5926] usb 2-1: Manufacturer: syz
[  388.661072][ T5998] usb 4-1: USB disconnect, device number 40
[  388.675099][ T5926] usb 2-1: SerialNumber: syz
[  388.687546][ T5926] usb 2-1: config 0 descriptor??
[  389.180942][ T5934] usb 3-1: USB disconnect, device number 50
[  389.181584][ T5978] usb 2-1: USB disconnect, device number 56
[  389.522562][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'.
[  390.476058][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'.
[  390.488489][   T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  390.718521][ T5934] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  390.838507][   T10] usb 2-1: Using ep0 maxpacket: 8
[  390.929121][   T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  390.939026][   T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  390.948199][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.956244][   T10] usb 2-1: Product: syz
[  390.960609][   T10] usb 2-1: Manufacturer: syz
[  390.998808][ T5934] usb 3-1: Using ep0 maxpacket: 16
[  391.014269][ T5934] usb 3-1: config 1 has an invalid interface number: 6 but max is 2
[  391.030267][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.046382][   T10] usb 2-1: SerialNumber: syz
[  391.052616][ T5934] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  391.107064][   T10] usb 2-1: config 0 descriptor??
[  391.113648][ T5934] usb 3-1: config 1 has no interface number 1
[  391.159076][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  391.167127][ T5934] usb 3-1: too many endpoints for config 1 interface 6 altsetting 40: 173, using maximum allowed: 30
[  391.638855][ T9667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.938'.
[  392.568558][   T10] usb 2-1: setting power ON
[  392.573780][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  392.598612][ T5934] usb 3-1: config 1 interface 6 altsetting 40 has an invalid descriptor for endpoint zero, skipping
[  392.660485][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  392.679338][ T5934] usb 3-1: config 1 interface 6 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 173
[  392.808858][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  392.820721][ T5934] usb 3-1: config 1 interface 6 has no altsetting 0
[  392.956984][   T10] usb 2-1: media controller created
[  392.976464][ T5934] usb 3-1: string descriptor 0 read error: -71
[  392.996641][ T5934] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  393.447068][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.458843][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  393.591919][ T5934] usb 3-1: can't set config #1, error -71
[  393.606406][   T10] usb 2-1: selecting invalid altsetting 6
[  393.621304][ T5934] usb 3-1: USB disconnect, device number 51
[  393.629082][   T10] usb 2-1: digital interface selection failed (-22)
[  393.636283][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  393.693951][   T10] usb 2-1: setting power OFF
[  393.794736][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  393.800525][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  393.809821][   T10] (NULL device *): no alternate interface
[  393.844591][ T5998] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  394.370093][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  394.436524][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  394.520009][   T10] usb 2-1: USB disconnect, device number 57
[  394.596017][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.617884][ T5998] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  394.627150][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.667927][ T5998] usb 4-1: config 0 descriptor??
[  394.748087][ T5998] hub 4-1:0.0: USB hub found
[  394.948507][ T5927] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  395.327091][   T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  395.353422][ T5998] hub 4-1:0.0: 2 ports detected
[  395.510601][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  395.520905][   T10] usb 2-1: Using ep0 maxpacket: 32
[  395.528335][ T5927] usb 5-1: config 0 has no interfaces?
[  395.537314][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  395.545956][ T5927] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  395.556111][ T5927] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  395.556508][   T10] usb 2-1: config index 0 descriptor too short (expected 53, got 34)
[  395.573030][ T5927] usb 5-1: Product: syz
[  395.577314][ T5927] usb 5-1: Manufacturer: syz
[  395.677147][   T10] usb 2-1: config 2 has an invalid interface number: 221 but max is 0
[  395.685622][ T5927] usb 5-1: SerialNumber: syz
[  395.698195][ T5927] usb 5-1: config 0 descriptor??
[  395.707816][   T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  395.718097][   T10] usb 2-1: config 2 has no interface number 0
[  395.726432][   T10] usb 2-1: config 2 interface 221 has no altsetting 0
[  395.735964][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  395.745302][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.756549][   T10] usb 2-1: SerialNumber: syz
[  395.934837][ T5927] usb 5-1: USB disconnect, device number 61
[  396.033208][ T9719] rdma_rxe: rxe_newlink: failed to add vxcan1
[  397.408390][ T5998] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[  397.484582][   T10] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  397.491947][   T10] usb 2-1: No valid video chain found.
[  397.505441][   T10] usb 2-1: USB disconnect, device number 58
[  398.109774][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.953'.
[  399.659826][   T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  399.838691][ T5927] usb 4-1: USB disconnect, device number 41
[  399.848649][   T10] usb 5-1: Using ep0 maxpacket: 16
[  399.864900][   T10] usb 5-1: config 1 has an invalid interface number: 6 but max is 2
[  399.872958][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  399.885442][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  399.901152][   T10] usb 5-1: config 1 has no interface number 1
[  399.911279][   T10] usb 5-1: too many endpoints for config 1 interface 6 altsetting 40: 173, using maximum allowed: 30
[  399.927625][   T10] usb 5-1: config 1 interface 6 altsetting 40 has an invalid descriptor for endpoint zero, skipping
[  399.928530][   T44] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  399.992892][   T10] usb 5-1: config 1 interface 6 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 173
[  400.170412][ T9739] FAULT_INJECTION: forcing a failure.
[  400.170412][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.187729][   T10] usb 5-1: config 1 interface 6 has no altsetting 0
[  400.190101][   T44] usb 3-1: config 0 has no interfaces?
[  400.195294][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.3.956 Not tainted syzkaller #0 PREEMPT(full) 
[  400.195316][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  400.195324][ T9739] Call Trace:
[  400.195329][ T9739]  <TASK>
[  400.195335][ T9739]  dump_stack_lvl+0x16c/0x1f0
[  400.195358][ T9739]  should_fail_ex+0x512/0x640
[  400.195380][ T9739]  _copy_to_user+0x32/0xd0
[  400.195402][ T9739]  scsi_cdrom_send_packet+0x3a3/0x640
[  400.195428][ T9739]  ? __pfx_scsi_cdrom_send_packet+0x10/0x10
[  400.195461][ T9739]  ? avc_has_extended_perms+0x47c/0x1090
[  400.195488][ T9739]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  400.195510][ T9739]  scsi_ioctl+0x145/0x18b0
[  400.195533][ T9739]  ? __pfx___might_resched+0x10/0x10
[  400.195554][ T9739]  ? __pfx_scsi_ioctl+0x10/0x10
[  400.195580][ T9739]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[  400.195610][ T9739]  sg_ioctl+0xb98/0x2880
[  400.195634][ T9739]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  400.195659][ T9739]  ? __pfx_sg_ioctl+0x10/0x10
[  400.195682][ T9739]  ? hook_file_ioctl_common+0x145/0x410
[  400.195705][ T9739]  ? selinux_file_ioctl+0x180/0x270
[  400.195724][ T9739]  ? selinux_file_ioctl+0xb4/0x270
[  400.195747][ T9739]  ? __pfx_sg_ioctl+0x10/0x10
[  400.195769][ T9739]  __x64_sys_ioctl+0x18b/0x210
[  400.195794][ T9739]  do_syscall_64+0xcd/0x4c0
[  400.195812][ T9739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.195827][ T9739] RIP: 0033:0x7eff2718ebe9
[  400.195841][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.195855][ T9739] RSP: 002b:00007eff28072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  400.195870][ T9739] RAX: ffffffffffffffda RBX: 00007eff273b5fa0 RCX: 00007eff2718ebe9
[  400.195880][ T9739] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003
[  400.195890][ T9739] RBP: 00007eff28072090 R08: 0000000000000000 R09: 0000000000000000
[  400.195899][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.195909][ T9739] R13: 00007eff273b6038 R14: 00007eff273b5fa0 R15: 00007ffd10e50518
[  400.195930][ T9739]  </TASK>
[  400.216649][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  400.571634][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.581560][   T10] usb 5-1: Product: syz
[  400.587978][   T10] usb 5-1: Manufacturer: syz
[  400.729950][   T10] usb 5-1: SerialNumber: syz
[  400.899603][   T44] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  400.950574][   T10] usb 5-1: can't set config #1, error -71
[  400.961196][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.071299][   T44] usb 3-1: config 0 descriptor??
[  401.079994][   T44] usb 3-1: can't set config #0, error -71
[  401.089148][   T10] usb 5-1: USB disconnect, device number 62
[  401.091229][   T44] usb 3-1: USB disconnect, device number 52
[  401.137264][ T9752] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  401.150498][   T30] audit: type=1400 audit(1756350510.061:689): avc:  denied  { setopt } for  pid=9749 comm="syz.2.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  401.171897][ T9752] audit: out of memory in audit_log_start
[  401.658650][ T5998] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  401.674400][   T44] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  401.818574][ T5998] usb 5-1: Using ep0 maxpacket: 32
[  401.867945][ T5998] usb 5-1: unable to get BOS descriptor or descriptor too short
[  401.879635][ T5998] usb 5-1: config index 0 descriptor too short (expected 53, got 34)
[  401.888029][ T5998] usb 5-1: config 2 has an invalid interface number: 221 but max is 0
[  401.896721][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  401.908365][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.918612][ T5998] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  401.929287][   T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  401.948527][ T5998] usb 5-1: config 2 has no interface number 0
[  401.968599][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.986744][ T5998] usb 5-1: config 2 interface 221 has no altsetting 0
[  402.008585][   T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  402.030375][ T5998] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  402.055294][   T44] usb 1-1: config 0 descriptor??
[  402.061663][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.081826][   T44] hub 1-1:0.0: USB hub found
[  402.097213][ T5998] usb 5-1: Product: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比ꮨᵩ壳㿏␆㊨ฆ᳞➛墒䊸茶
[  402.116928][ T5998] usb 5-1: SerialNumber: syz
[  402.253148][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.268656][   T10] usb 3-1: config 0 has no interfaces?
[  402.273736][   T44] hub 1-1:0.0: 2 ports detected
[  402.285536][   T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  402.303980][   T10] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  402.312275][   T10] usb 3-1: Product: syz
[  402.316502][   T10] usb 3-1: Manufacturer: syz
[  402.321434][   T10] usb 3-1: SerialNumber: syz
[  402.333167][   T10] usb 3-1: config 0 descriptor??
[  402.386544][ T5998] usb 5-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比ꮨᵩ壳㿏␆㊨ฆ᳞➛墒䊸茶 (05ac:8501)
[  402.408484][ T5998] usb 5-1: No valid video chain found.
[  402.469142][ T5998] usb 5-1: USB disconnect, device number 63
[  402.579242][ T9758] rdma_rxe: rxe_newlink: failed to add vxcan1
[  403.270917][ T5927] usb 3-1: USB disconnect, device number 53
[  403.325402][   T44] hub 1-1:0.0: hub_hub_status failed (err = -32)
[  403.331886][   T44] hub 1-1:0.0: config failed, can't get hub status (err -32)
[  403.356418][   T44] usbhid 1-1:0.0: can't add hid device: -32
[  403.383521][   T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  403.419359][   T44] usb 1-1: USB disconnect, device number 38
[  403.879926][ T9778] FAULT_INJECTION: forcing a failure.
[  403.879926][ T9778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.909514][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.4.968 Not tainted syzkaller #0 PREEMPT(full) 
[  403.909539][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  403.909549][ T9778] Call Trace:
[  403.909554][ T9778]  <TASK>
[  403.909561][ T9778]  dump_stack_lvl+0x16c/0x1f0
[  403.909584][ T9778]  should_fail_ex+0x512/0x640
[  403.909605][ T9778]  _copy_to_iter+0x463/0x1710
[  403.909634][ T9778]  ? __pfx__copy_to_iter+0x10/0x10
[  403.909653][ T9778]  ? timers_stop+0x124/0x1f0
[  403.909675][ T9778]  ? traverse.part.0.constprop.0+0x2c5/0x640
[  403.909702][ T9778]  seq_read_iter+0x719/0x12c0
[  403.909731][ T9778]  seq_read+0x3a3/0x570
[  403.909747][ T9778]  ? __pfx_seq_read+0x10/0x10
[  403.909764][ T9778]  ? import_ubuf+0x1b6/0x220
[  403.909786][ T9778]  ? __import_iovec+0x1dd/0x650
[  403.909807][ T9778]  ? avc_policy_seqno+0x9/0x20
[  403.909833][ T9778]  ? rw_verify_area+0xcf/0x6c0
[  403.909859][ T9778]  ? __pfx_seq_read+0x10/0x10
[  403.909874][ T9778]  vfs_readv+0x5be/0x8b0
[  403.909894][ T9778]  ? __pfx_vfs_readv+0x10/0x10
[  403.909909][ T9778]  ? find_held_lock+0x2b/0x80
[  403.909946][ T9778]  ? __fget_files+0x20e/0x3c0
[  403.909976][ T9778]  ? do_preadv+0x1a6/0x270
[  403.909990][ T9778]  do_preadv+0x1a6/0x270
[  403.910007][ T9778]  ? __pfx_do_preadv+0x10/0x10
[  403.910020][ T9778]  ? syscall_trace_enter+0x1cb/0x240
[  403.910038][ T9778]  ? rcu_is_watching+0x12/0xc0
[  403.910067][ T9778]  do_syscall_64+0xcd/0x4c0
[  403.910087][ T9778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.910108][ T9778] RIP: 0033:0x7f07e4f8ebe9
[  403.910122][ T9778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.910137][ T9778] RSP: 002b:00007f07e31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  403.910153][ T9778] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8ebe9
[  403.910163][ T9778] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003
[  403.910172][ T9778] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  403.910182][ T9778] R10: 0000000000000045 R11: 0000000000000246 R12: 0000000000000001
[  403.910191][ T9778] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  403.910215][ T9778]  </TASK>
[  404.456988][ T9780] FAULT_INJECTION: forcing a failure.
[  404.456988][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.497268][ T9780] CPU: 0 UID: 0 PID: 9780 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) 
[  404.497292][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  404.497301][ T9780] Call Trace:
[  404.497307][ T9780]  <TASK>
[  404.497314][ T9780]  dump_stack_lvl+0x16c/0x1f0
[  404.497337][ T9780]  should_fail_ex+0x512/0x640
[  404.497361][ T9780]  _copy_from_user+0x2e/0xd0
[  404.497384][ T9780]  copy_msghdr_from_user+0x98/0x160
[  404.497404][ T9780]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  404.497436][ T9780]  ___sys_sendmsg+0xfe/0x1d0
[  404.497455][ T9780]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.497505][ T9780]  __sys_sendmsg+0x16d/0x220
[  404.497524][ T9780]  ? __pfx___sys_sendmsg+0x10/0x10
[  404.497560][ T9780]  do_syscall_64+0xcd/0x4c0
[  404.497583][ T9780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.497600][ T9780] RIP: 0033:0x7f1e5d78ebe9
[  404.497615][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.497631][ T9780] RSP: 002b:00007f1e5e68b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.497649][ T9780] RAX: ffffffffffffffda RBX: 00007f1e5d9b5fa0 RCX: 00007f1e5d78ebe9
[  404.497660][ T9780] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  404.497671][ T9780] RBP: 00007f1e5e68b090 R08: 0000000000000000 R09: 0000000000000000
[  404.497681][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.497692][ T9780] R13: 00007f1e5d9b6038 R14: 00007f1e5d9b5fa0 R15: 00007ffc7c65a818
[  404.497716][ T9780]  </TASK>
[  405.228694][   T44] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  405.398179][   T44] usb 4-1: Using ep0 maxpacket: 16
[  405.509010][   T30] audit: type=1400 audit(1756350514.421:690): avc:  denied  { ioctl } for  pid=9806 comm="syz.4.977" path="socket:[25648]" dev="sockfs" ino=25648 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  405.622878][   T44] usb 4-1: config 0 has no interfaces?
[  405.634012][   T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  405.714772][   T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  405.738508][ T5927] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  405.751640][   T44] usb 4-1: Manufacturer: syz
[  405.789596][   T44] usb 4-1: config 0 descriptor??
[  405.899932][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  405.933695][ T5927] usb 5-1: unable to read config index 0 descriptor/start: -61
[  405.944799][ T5927] usb 5-1: can't read configurations, error -61
[  406.168501][ T5927] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  406.335733][   T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  406.418812][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  406.436257][ T5927] usb 5-1: unable to read config index 0 descriptor/start: -61
[  406.446219][ T5927] usb 5-1: can't read configurations, error -61
[  406.454357][ T5927] usb usb5-port1: attempt power cycle
[  406.508740][   T10] usb 1-1: Using ep0 maxpacket: 32
[  406.718688][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'.
[  407.087175][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  407.097437][   T10] usb 1-1: config index 0 descriptor too short (expected 53, got 34)
[  407.119824][   T10] usb 1-1: config 2 has an invalid interface number: 221 but max is 0
[  407.154801][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  407.167140][   T10] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  407.182347][   T10] usb 1-1: config 2 has no interface number 0
[  407.189354][   T10] usb 1-1: config 2 interface 221 has no altsetting 0
[  407.199649][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  407.208996][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  407.218179][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.238203][   T10] usb 1-1: Product: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比ꮨᵩ
[  407.245960][ T5927] usb 5-1: unable to read config index 0 descriptor/start: -61
[  407.255426][ T5927] usb 5-1: can't read configurations, error -61
[  407.268973][   T10] usb 1-1: SerialNumber: syz
[  407.513664][   T10] usb 1-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比ꮨᵩ (05ac:8501)
[  407.523553][ T5927] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  407.532415][   T10] usb 1-1: No valid video chain found.
[  407.548624][   T10] usb 1-1: USB disconnect, device number 39
[  407.561007][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  407.575796][   T30] audit: type=1400 audit(1756350516.501:691): avc:  denied  { execute } for  pid=9817 comm="syz.1.980" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  407.614095][ T5927] usb 5-1: unable to read config index 0 descriptor/start: -61
[  407.623386][ T5927] usb 5-1: can't read configurations, error -61
[  407.653357][ T5927] usb usb5-port1: unable to enumerate USB device
[  407.664947][   T30] audit: type=1400 audit(1756350516.571:692): avc:  denied  { bind } for  pid=9817 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  408.361097][  T975] usb 4-1: USB disconnect, device number 42
[  408.479214][   T10] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  408.564325][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'.
[  408.828639][ T5934] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  409.220268][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  409.236296][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  409.257505][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.267348][   T10] usb 3-1: config 0 has no interfaces?
[  409.660107][ T5934] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  409.669635][   T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  409.681818][   T10] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  409.692914][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.706177][   T10] usb 3-1: Product: syz
[  409.715254][ T5934] usb 1-1: config 0 descriptor??
[  409.727606][   T10] usb 3-1: Manufacturer: syz
[  409.735485][   T10] usb 3-1: SerialNumber: syz
[  409.740722][ T5934] hub 1-1:0.0: USB hub found
[  409.759756][   T10] usb 3-1: config 0 descriptor??
[  410.081850][ T5934] hub 1-1:0.0: 2 ports detected
[  410.145767][ T5978] usb 3-1: USB disconnect, device number 54
[  410.705385][ T9833] rdma_rxe: rxe_newlink: failed to add vxcan1
[  411.593091][ T5934] hub 1-1:0.0: hub_hub_status failed (err = -32)
[  411.641847][ T5934] hub 1-1:0.0: config failed, can't get hub status (err -32)
[  411.661541][ T5934] usbhid 1-1:0.0: can't add hid device: -32
[  411.667524][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  411.680739][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  411.709694][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'.
[  411.878855][   T44] usb 1-1: USB disconnect, device number 40
[  411.978265][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.991'.
[  412.561590][ T9875] FAULT_INJECTION: forcing a failure.
[  412.561590][ T9875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.576951][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.4.994 Not tainted syzkaller #0 PREEMPT(full) 
[  412.576976][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  412.576986][ T9875] Call Trace:
[  412.576992][ T9875]  <TASK>
[  412.576999][ T9875]  dump_stack_lvl+0x16c/0x1f0
[  412.577023][ T9875]  should_fail_ex+0x512/0x640
[  412.577047][ T9875]  _copy_from_iter+0x29f/0x1720
[  412.577075][ T9875]  ? __pfx__copy_from_iter+0x10/0x10
[  412.577097][ T9875]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  412.577128][ T9875]  copy_page_from_iter+0xde/0x180
[  412.577154][ T9875]  tun_build_skb.constprop.0+0x2e8/0x1500
[  412.577189][ T9875]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  412.577212][ T9875]  ? unwind_get_return_address+0x59/0xa0
[  412.577239][ T9875]  ? find_held_lock+0x2b/0x80
[  412.577277][ T9875]  tun_get_user+0x14ae/0x3ce0
[  412.577317][ T9875]  ? __pfx_tun_get_user+0x10/0x10
[  412.577343][ T9875]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  412.577373][ T9875]  ? find_held_lock+0x2b/0x80
[  412.577394][ T9875]  ? tun_get+0x191/0x370
[  412.577423][ T9875]  tun_chr_write_iter+0xdc/0x210
[  412.577448][ T9875]  vfs_write+0x7d0/0x11d0
[  412.577469][ T9875]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  412.577495][ T9875]  ? __pfx_vfs_write+0x10/0x10
[  412.577511][ T9875]  ? find_held_lock+0x2b/0x80
[  412.577548][ T9875]  ksys_write+0x12a/0x250
[  412.577565][ T9875]  ? __pfx_ksys_write+0x10/0x10
[  412.577591][ T9875]  do_syscall_64+0xcd/0x4c0
[  412.577613][ T9875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.577630][ T9875] RIP: 0033:0x7f07e4f8d69f
[  412.577645][ T9875] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  412.577662][ T9875] RSP: 002b:00007f07e31f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  412.577679][ T9875] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8d69f
[  412.577691][ T9875] RDX: 000000000000004a RSI: 00002000000001c0 RDI: 00000000000000c8
[  412.577701][ T9875] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  412.577712][ T9875] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  412.577722][ T9875] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  412.577747][ T9875]  </TASK>
[  413.275881][   T30] audit: type=1400 audit(1756350522.201:693): avc:  denied  { read append } for  pid=9889 comm="syz.1.1000" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  413.484993][ T9891] siw: device registration error -23
[  413.545993][   T30] audit: type=1400 audit(1756350522.241:694): avc:  denied  { open } for  pid=9889 comm="syz.1.1000" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  413.572096][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.999'.
[  413.582954][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'.
[  413.597978][   T30] audit: type=1400 audit(1756350522.261:695): avc:  denied  { ioctl } for  pid=9889 comm="syz.1.1000" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  414.038478][   T44] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  414.048523][ T5978] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  414.373961][ T5978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.384154][ T5978] usb 1-1: config 0 has no interfaces?
[  414.391907][ T5978] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  414.401230][ T5978] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  414.409952][ T5978] usb 1-1: Product: syz
[  414.414316][ T5978] usb 1-1: Manufacturer: syz
[  414.424640][ T5978] usb 1-1: SerialNumber: syz
[  414.476533][ T5978] usb 1-1: config 0 descriptor??
[  414.556761][ T9907] FAULT_INJECTION: forcing a failure.
[  414.556761][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.558476][   T44] usb 5-1: Using ep0 maxpacket: 32
[  414.583463][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[  414.593869][   T44] usb 5-1: config index 0 descriptor too short (expected 53, got 34)
[  414.608612][   T44] usb 5-1: config 2 has an invalid interface number: 221 but max is 0
[  414.609084][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) 
[  414.609104][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  414.609113][ T9907] Call Trace:
[  414.609119][ T9907]  <TASK>
[  414.609124][ T9907]  dump_stack_lvl+0x16c/0x1f0
[  414.609146][ T9907]  should_fail_ex+0x512/0x640
[  414.609167][ T9907]  _copy_from_iter+0x29f/0x1720
[  414.609193][ T9907]  ? __pfx__copy_from_iter+0x10/0x10
[  414.609212][ T9907]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  414.609240][ T9907]  copy_page_from_iter+0xde/0x180
[  414.609263][ T9907]  tun_build_skb.constprop.0+0x2e8/0x1500
[  414.609293][ T9907]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  414.609313][ T9907]  ? unwind_get_return_address+0x59/0xa0
[  414.609337][ T9907]  ? find_held_lock+0x2b/0x80
[  414.609369][ T9907]  tun_get_user+0x14ae/0x3ce0
[  414.609400][ T9907]  ? __pfx_tun_get_user+0x10/0x10
[  414.609422][ T9907]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  414.609448][ T9907]  ? find_held_lock+0x2b/0x80
[  414.609466][ T9907]  ? tun_get+0x191/0x370
[  414.609490][ T9907]  tun_chr_write_iter+0xdc/0x210
[  414.609513][ T9907]  vfs_write+0x7d0/0x11d0
[  414.609530][ T9907]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  414.609553][ T9907]  ? __pfx_vfs_write+0x10/0x10
[  414.609567][ T9907]  ? find_held_lock+0x2b/0x80
[  414.609599][ T9907]  ksys_write+0x12a/0x250
[  414.609614][ T9907]  ? __pfx_ksys_write+0x10/0x10
[  414.609636][ T9907]  do_syscall_64+0xcd/0x4c0
[  414.609655][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.609670][ T9907] RIP: 0033:0x7f1e5d78d69f
[  414.609683][ T9907] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  414.609698][ T9907] RSP: 002b:00007f1e5e68b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  414.609713][ T9907] RAX: ffffffffffffffda RBX: 00007f1e5d9b5fa0 RCX: 00007f1e5d78d69f
[  414.609723][ T9907] RDX: 0000000000000022 RSI: 00002000000011c0 RDI: 00000000000000c8
[  414.609732][ T9907] RBP: 00007f1e5e68b090 R08: 0000000000000000 R09: 0000000000000000
[  414.609742][ T9907] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001
[  414.609751][ T9907] R13: 00007f1e5d9b6038 R14: 00007f1e5d9b5fa0 R15: 00007ffc7c65a818
[  414.609773][ T9907]  </TASK>
[  414.859529][   T10] usb 1-1: USB disconnect, device number 41
[  414.865733][   T44] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  414.876459][   T44] usb 5-1: config 2 has no interface number 0
[  414.882941][   T44] usb 5-1: config 2 interface 221 has no altsetting 0
[  414.898154][   T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  414.908753][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.916808][   T44] usb 5-1: Product: ꩮ蒑㴮盺䙧ꕠ஥
[  414.928357][   T44] usb 5-1: SerialNumber: syz
[  415.599657][   T44] usb 5-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥ (05ac:8501)
[  415.607806][   T44] usb 5-1: No valid video chain found.
[  415.619894][   T44] usb 5-1: USB disconnect, device number 68
[  415.809223][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1006'.
[  415.897618][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  416.394765][ T9922] FAULT_INJECTION: forcing a failure.
[  416.394765][ T9922] name failslab, interval 1, probability 0, space 0, times 0
[  416.409797][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.3.1009 Not tainted syzkaller #0 PREEMPT(full) 
[  416.409821][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  416.409831][ T9922] Call Trace:
[  416.409836][ T9922]  <TASK>
[  416.409843][ T9922]  dump_stack_lvl+0x16c/0x1f0
[  416.409868][ T9922]  should_fail_ex+0x512/0x640
[  416.409887][ T9922]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  416.409913][ T9922]  should_failslab+0xc2/0x120
[  416.409933][ T9922]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  416.409951][ T9922]  ? io_submit_one+0x122/0x1df0
[  416.409976][ T9922]  io_submit_one+0x122/0x1df0
[  416.409999][ T9922]  ? __lock_acquire+0xb97/0x1ce0
[  416.410028][ T9922]  ? __pfx_io_submit_one+0x10/0x10
[  416.410057][ T9922]  ? __might_fault+0xe3/0x190
[  416.410073][ T9922]  ? __might_fault+0x13b/0x190
[  416.410095][ T9922]  ? __x64_sys_io_submit+0x1a9/0x350
[  416.410115][ T9922]  __x64_sys_io_submit+0x1a9/0x350
[  416.410139][ T9922]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  416.410173][ T9922]  do_syscall_64+0xcd/0x4c0
[  416.410194][ T9922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.410212][ T9922] RIP: 0033:0x7eff2718ebe9
[  416.410231][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.410248][ T9922] RSP: 002b:00007eff28072038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  416.410265][ T9922] RAX: ffffffffffffffda RBX: 00007eff273b5fa0 RCX: 00007eff2718ebe9
[  416.410276][ T9922] RDX: 0000200000000800 RSI: 0000000000000001 RDI: 00007eff28051000
[  416.410287][ T9922] RBP: 00007eff28072090 R08: 0000000000000000 R09: 0000000000000000
[  416.410297][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.410308][ T9922] R13: 00007eff273b6038 R14: 00007eff273b5fa0 R15: 00007ffd10e50518
[  416.410332][ T9922]  </TASK>
[  416.615370][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'.
[  416.940643][ T9913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1007'.
[  416.960764][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  417.024245][   T30] audit: type=1400 audit(1756350525.951:696): avc:  denied  { create } for  pid=9927 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  417.047231][ T9928] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1011'.
[  417.883787][   T30] audit: type=1400 audit(1756350526.021:697): avc:  denied  { getopt } for  pid=9927 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  418.299458][   T30] audit: type=1400 audit(1756350526.021:698): avc:  denied  { ioctl } for  pid=9927 comm="syz.3.1011" path="socket:[26820]" dev="sockfs" ino=26820 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  418.302562][   T30] audit: type=1400 audit(1756350527.231:699): avc:  denied  { listen } for  pid=9927 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  419.738481][   T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  419.870950][ T9960] FAULT_INJECTION: forcing a failure.
[  419.870950][ T9960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.884788][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.0.1022 Not tainted syzkaller #0 PREEMPT(full) 
[  419.884812][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  419.884822][ T9960] Call Trace:
[  419.884828][ T9960]  <TASK>
[  419.884835][ T9960]  dump_stack_lvl+0x16c/0x1f0
[  419.884858][ T9960]  should_fail_ex+0x512/0x640
[  419.884882][ T9960]  _copy_from_iter+0x29f/0x1720
[  419.884910][ T9960]  ? __pfx__copy_from_iter+0x10/0x10
[  419.884939][ T9960]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  419.884971][ T9960]  copy_page_from_iter+0xde/0x180
[  419.884997][ T9960]  tun_build_skb.constprop.0+0x2e8/0x1500
[  419.885029][ T9960]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  419.885052][ T9960]  ? unwind_get_return_address+0x59/0xa0
[  419.885079][ T9960]  ? find_held_lock+0x2b/0x80
[  419.885112][ T9960]  tun_get_user+0x14ae/0x3ce0
[  419.885140][ T9960]  ? __pfx_tun_get_user+0x10/0x10
[  419.885161][ T9960]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  419.885185][ T9960]  ? find_held_lock+0x2b/0x80
[  419.885202][ T9960]  ? tun_get+0x191/0x370
[  419.885224][ T9960]  tun_chr_write_iter+0xdc/0x210
[  419.885246][ T9960]  vfs_write+0x7d0/0x11d0
[  419.885261][ T9960]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  419.885283][ T9960]  ? __pfx_vfs_write+0x10/0x10
[  419.885296][ T9960]  ? find_held_lock+0x2b/0x80
[  419.885326][ T9960]  ksys_write+0x12a/0x250
[  419.885339][ T9960]  ? __pfx_ksys_write+0x10/0x10
[  419.885360][ T9960]  do_syscall_64+0xcd/0x4c0
[  419.885377][ T9960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.885391][ T9960] RIP: 0033:0x7f105b18d69f
[  419.885403][ T9960] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  419.885416][ T9960] RSP: 002b:00007f105bfe0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  419.885429][ T9960] RAX: ffffffffffffffda RBX: 00007f105b3b5fa0 RCX: 00007f105b18d69f
[  419.885438][ T9960] RDX: 000000000000003a RSI: 0000200000000040 RDI: 00000000000000c8
[  419.885447][ T9960] RBP: 00007f105bfe0090 R08: 0000000000000000 R09: 0000000000000000
[  419.885455][ T9960] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001
[  419.885463][ T9960] R13: 00007f105b3b6038 R14: 00007f105b3b5fa0 R15: 00007fffe5782498
[  419.885482][ T9960]  </TASK>
[  419.888521][   T44] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  420.124745][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.140006][   T10] usb 5-1: config 0 has no interfaces?
[  420.168132][   T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  420.187983][   T10] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  420.229560][   T10] usb 5-1: Product: syz
[  420.233745][   T10] usb 5-1: Manufacturer: syz
[  420.248617][   T10] usb 5-1: SerialNumber: syz
[  420.289404][   T10] usb 5-1: config 0 descriptor??
[  420.706877][ T5978] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  420.735969][   T44] usb 3-1: Using ep0 maxpacket: 32
[  420.745300][   T44] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  420.754950][   T44] usb 3-1: unable to read config index 0 descriptor/start: -61
[  420.763340][   T44] usb 3-1: can't read configurations, error -61
[  420.829213][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1025'.
[  421.378479][ T5978] usb 1-1: Using ep0 maxpacket: 32
[  421.385481][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short
[  421.432776][ T5978] usb 1-1: config index 0 descriptor too short (expected 53, got 34)
[  421.464717][ T5978] usb 1-1: config 2 has an invalid interface number: 221 but max is 0
[  421.473354][   T44] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  421.498882][ T5978] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  421.509958][ T5978] usb 1-1: config 2 has no interface number 0
[  421.516221][ T5978] usb 1-1: config 2 interface 221 has no altsetting 0
[  421.526012][ T5978] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  421.538235][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.547097][ T5978] usb 1-1: Product: ꩮ蒑㴮盺䙧ꕠ஥
[  421.553392][ T5978] usb 1-1: SerialNumber: syz
[  421.580094][ T9981] FAULT_INJECTION: forcing a failure.
[  421.580094][ T9981] name failslab, interval 1, probability 0, space 0, times 0
[  421.599388][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.3.1027 Not tainted syzkaller #0 PREEMPT(full) 
[  421.599413][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  421.599423][ T9981] Call Trace:
[  421.599429][ T9981]  <TASK>
[  421.599436][ T9981]  dump_stack_lvl+0x16c/0x1f0
[  421.599460][ T9981]  should_fail_ex+0x512/0x640
[  421.599479][ T9981]  ? fs_reclaim_acquire+0xae/0x150
[  421.599504][ T9981]  ? tomoyo_encode2+0x100/0x3e0
[  421.599528][ T9981]  should_failslab+0xc2/0x120
[  421.599549][ T9981]  __kmalloc_noprof+0xd2/0x510
[  421.599573][ T9981]  tomoyo_encode2+0x100/0x3e0
[  421.599600][ T9981]  tomoyo_encode+0x29/0x50
[  421.599624][ T9981]  tomoyo_realpath_from_path+0x18f/0x6e0
[  421.599652][ T9981]  ? tomoyo_profile+0x47/0x60
[  421.599669][ T9981]  tomoyo_path_number_perm+0x245/0x580
[  421.599690][ T9981]  ? tomoyo_path_number_perm+0x237/0x580
[  421.599714][ T9981]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  421.599736][ T9981]  ? find_held_lock+0x2b/0x80
[  421.599779][ T9981]  ? find_held_lock+0x2b/0x80
[  421.599799][ T9981]  ? hook_file_ioctl_common+0x145/0x410
[  421.599824][ T9981]  ? __fget_files+0x20e/0x3c0
[  421.599848][ T9981]  security_file_ioctl+0x9b/0x240
[  421.599873][ T9981]  __x64_sys_ioctl+0xb7/0x210
[  421.599908][ T9981]  do_syscall_64+0xcd/0x4c0
[  421.599931][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.599948][ T9981] RIP: 0033:0x7eff2718ebe9
[  421.599963][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.599979][ T9981] RSP: 002b:00007eff28051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.599996][ T9981] RAX: ffffffffffffffda RBX: 00007eff273b6090 RCX: 00007eff2718ebe9
[  421.600006][ T9981] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  421.600017][ T9981] RBP: 00007eff28051090 R08: 0000000000000000 R09: 0000000000000000
[  421.600027][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.600037][ T9981] R13: 00007eff273b6128 R14: 00007eff273b6090 R15: 00007ffd10e50518
[  421.600062][ T9981]  </TASK>
[  421.600078][ T9981] ERROR: Out of memory at tomoyo_realpath_from_path.
[  421.657106][   T44] usb 3-1: Using ep0 maxpacket: 32
[  421.825968][   T44] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  421.836000][   T44] usb 3-1: unable to read config index 0 descriptor/start: -61
[  421.843866][   T44] usb 3-1: can't read configurations, error -61
[  421.854166][   T44] usb usb3-port1: attempt power cycle
[  422.046473][ T5978] usb 1-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥ (05ac:8501)
[  422.158631][ T5978] usb 1-1: No valid video chain found.
[  422.175481][ T5926] usb 5-1: USB disconnect, device number 69
[  422.206510][ T5978] usb 1-1: USB disconnect, device number 42
[  422.291147][ T9990] 9pnet_fd: Insufficient options for proto=fd
[  422.298114][ T9990] block nbd3: shutting down sockets
[  422.349446][   T30] audit: type=1400 audit(1756350531.271:700): avc:  denied  { append } for  pid=9991 comm="syz.4.1030" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  422.498668][   T44] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  422.782338][   T44] usb 3-1: device descriptor read/8, error -71
[  422.947647][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'.
[  422.970629][ T2993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.992437][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1032'.
[  423.052862][ T2993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.161729][ T2993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.545656][ T2993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.581093][T10010] siw: device registration error -23
[  423.968510][ T5926] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  424.128692][ T2993] bridge_slave_1: left allmulticast mode
[  424.150545][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1039'.
[  424.159898][ T2993] bridge_slave_1: left promiscuous mode
[  424.167227][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.199453][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  424.218654][ T5926] usb 5-1: Using ep0 maxpacket: 16
[  424.260491][ T5926] usb 5-1: config 0 has no interfaces?
[  424.273869][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  424.283102][ T5926] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  424.395303][ T5926] usb 5-1: Manufacturer: syz
[  424.407347][ T2993] bridge_slave_0: left allmulticast mode
[  424.408745][ T5926] usb 5-1: config 0 descriptor??
[  424.413256][ T2993] bridge_slave_0: left promiscuous mode
[  424.471168][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  424.540854][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.543855][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  424.618937][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  424.729978][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  424.738387][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  424.869918][   T30] audit: type=1400 audit(1756350533.681:701): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  425.359835][   T30] audit: type=1400 audit(1756350534.281:702): avc:  denied  { create } for  pid=10040 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  425.469440][   T30] audit: type=1400 audit(1756350534.341:703): avc:  denied  { ioctl } for  pid=10040 comm="syz.2.1041" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  425.502486][ T2993] team0: Port device geneve0 removed
[  426.629018][   T10] usb 5-1: USB disconnect, device number 70
[  426.712317][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.723324][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[  426.744067][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.756295][ T2993] bond0 (unregistering): (slave team0): Releasing backup interface
[  426.798587][ T2993] bond0 (unregistering): Released all slaves
[  426.829959][T10056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1043'.
[  426.843596][T10031] vxcan1 speed is unknown, defaulting to 1000
[  426.857002][ T5853] Bluetooth: hci2: command tx timeout
[  426.958847][   T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  426.979612][ T5978] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  427.093069][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1046'.
[  427.152588][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  427.185142][ T5978] usb 1-1: Using ep0 maxpacket: 16
[  427.298569][   T10] usb 5-1: Using ep0 maxpacket: 32
[  427.323211][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  427.333403][ T5978] usb 1-1: config 0 has no interfaces?
[  427.343349][   T10] usb 5-1: config index 0 descriptor too short (expected 53, got 34)
[  427.352775][ T5978] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  427.361929][   T10] usb 5-1: config 2 has an invalid interface number: 221 but max is 0
[  427.368492][ T5978] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  427.410567][   T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  427.423094][ T5978] usb 1-1: Manufacturer: syz
[  427.444043][   T10] usb 5-1: config 2 has no interface number 0
[  427.450547][ T5978] usb 1-1: config 0 descriptor??
[  427.509876][   T10] usb 5-1: config 2 interface 221 has no altsetting 0
[  427.538784][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  427.558523][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.572637][   T10] usb 5-1: Product: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比
[  427.588486][   T10] usb 5-1: SerialNumber: syz
[  427.837808][   T10] usb 5-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比 (05ac:8501)
[  428.421176][   T10] usb 5-1: No valid video chain found.
[  428.646278][   T10] usb 5-1: USB disconnect, device number 71
[  428.700041][T10031] chnl_net:caif_netlink_parms(): no params data found
[  428.964454][ T5853] Bluetooth: hci2: command tx timeout
[  429.128634][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'.
[  429.320407][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'.
[  429.374166][ T5978] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  429.431303][T10106] bond0: (slave bond_slave_1): Releasing backup interface
[  429.470930][   T30] audit: type=1400 audit(1756350538.391:704): avc:  denied  { relabelfrom } for  pid=10096 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  429.503338][   T30] audit: type=1400 audit(1756350538.391:705): avc:  denied  { relabelto } for  pid=10096 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  429.595643][ T5978] usb 5-1: config 0 has no interfaces?
[  429.602176][ T5978] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  429.615368][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.626193][ T5978] usb 5-1: config 0 descriptor??
[  429.714306][T10031] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.739723][T10031] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.747117][T10031] bridge_slave_0: entered allmulticast mode
[  429.756086][T10109] siw: device registration error -23
[  429.779064][T10031] bridge_slave_0: entered promiscuous mode
[  429.806962][T10031] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.894640][T10031] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.939442][T10031] bridge_slave_1: entered allmulticast mode
[  429.967976][T10031] bridge_slave_1: entered promiscuous mode
[  430.183972][T10031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.217722][T10031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.399549][ T2993] hsr_slave_0: left promiscuous mode
[  430.417285][ T2993] hsr_slave_1: left promiscuous mode
[  430.441735][ T2993] veth1_macvtap: left promiscuous mode
[  430.447797][ T2993] veth0_macvtap: left promiscuous mode
[  430.455552][   T10] usb 1-1: USB disconnect, device number 43
[  430.472471][ T2993] veth1_vlan: left promiscuous mode
[  430.478369][ T2993] veth0_vlan: left promiscuous mode
[  430.639051][ T5978] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  431.000182][ T5853] Bluetooth: hci2: command tx timeout
[  431.368746][ T5978] usb 3-1: Using ep0 maxpacket: 32
[  431.376045][ T5978] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  431.385290][ T5978] usb 3-1: config 0 has no interface number 0
[  431.394832][ T5978] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  431.404532][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.412789][ T5978] usb 3-1: Product: syz
[  431.417159][ T5978] usb 3-1: Manufacturer: syz
[  431.421912][ T5978] usb 3-1: SerialNumber: syz
[  431.509960][ T5978] usb 3-1: config 0 descriptor??
[  431.544641][ T5978] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  431.741140][ T5978] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  431.763407][ T5978] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  431.971485][ T5998] usb 5-1: USB disconnect, device number 72
[  432.377138][T10148] overlayfs: failed to resolve './file1': -2
[  432.436498][ T2993] team0 (unregistering): Port device team_slave_1 removed
[  432.450790][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  432.451688][ T5934] usb 3-1: USB disconnect, device number 59
[  432.518271][ T5934] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  432.656124][ T5934] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  432.674957][ T5934] quatech2 3-1:0.51: device disconnected
[  432.702179][ T2993] team0 (unregistering): Port device team_slave_0 removed
[  432.858590][ T5978] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  432.906263][ T1157] smc: removing ib device syz2
[  433.009928][ T5978] usb 4-1: Using ep0 maxpacket: 32
[  433.017795][ T5978] usb 4-1: unable to get BOS descriptor or descriptor too short
[  433.027605][ T5978] usb 4-1: config index 0 descriptor too short (expected 53, got 34)
[  433.046170][ T5978] usb 4-1: config 2 has an invalid interface number: 221 but max is 0
[  433.054869][ T5978] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  433.065731][ T5978] usb 4-1: config 2 has no interface number 0
[  433.072757][ T5978] usb 4-1: config 2 interface 221 has no altsetting 0
[  433.083374][ T5978] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  433.092439][ T5853] Bluetooth: hci2: command tx timeout
[  433.108614][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.116676][ T5978] usb 4-1: Product: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比
[  433.145280][ T5978] usb 4-1: SerialNumber: syz
[  433.257961][   T30] audit: type=1400 audit(1756350542.181:706): avc:  denied  { create } for  pid=10156 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  433.364043][T10031] team0: Port device team_slave_0 added
[  433.380066][   T44] vxcan1 speed is unknown, defaulting to 1000
[  433.386299][   T44] syz2: Port: 1 Link DOWN
[  433.397448][T10031] team0: Port device team_slave_1 added
[  433.429857][ T5978] usb 4-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比 (05ac:8501)
[  433.450360][   T30] audit: type=1400 audit(1756350542.231:707): avc:  denied  { connect } for  pid=10156 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  433.649426][ T5978] usb 4-1: No valid video chain found.
[  434.527479][ T5978] usb 4-1: USB disconnect, device number 43
[  434.559584][T10172] netlink: 'syz.3.1064': attribute type 10 has an invalid length.
[  434.567665][   T30] audit: type=1400 audit(1756350543.481:708): avc:  denied  { setopt } for  pid=10170 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  434.615174][T10031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.658572][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.748089][T10031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.877514][T10168] vlan2: entered promiscuous mode
[  434.882821][T10168] macvtap0: entered promiscuous mode
[  434.965728][T10172] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  435.043303][   T30] audit: type=1400 audit(1756350543.971:709): avc:  denied  { read } for  pid=10178 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  435.089533][T10031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.123678][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.150391][   T30] audit: type=1400 audit(1756350544.021:710): avc:  denied  { setopt } for  pid=10178 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  435.171029][T10031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.171230][T10182] kAFS: Can only specify source 'none' with -o dyn
[  435.300189][   T30] audit: type=1400 audit(1756350544.231:711): avc:  denied  { getopt } for  pid=10178 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  435.502896][ T5978] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  435.709034][ T5978] usb 1-1: Using ep0 maxpacket: 16
[  435.763301][T10031] hsr_slave_0: entered promiscuous mode
[  435.804792][ T5978] usb 1-1: config 0 has no interfaces?
[  435.812531][   T30] audit: type=1400 audit(1756350544.731:712): avc:  denied  { read } for  pid=10194 comm="syz.4.1068" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  435.813767][ T5978] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  435.854331][T10031] hsr_slave_1: entered promiscuous mode
[  435.906300][ T5978] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  435.914602][ T5978] usb 1-1: Manufacturer: syz
[  435.964574][ T5978] usb 1-1: config 0 descriptor??
[  436.013184][   T30] audit: type=1400 audit(1756350544.941:713): avc:  denied  { watch } for  pid=10203 comm="syz.4.1071" path="/209/control" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  436.112748][T10202] FAULT_INJECTION: forcing a failure.
[  436.112748][T10202] name failslab, interval 1, probability 0, space 0, times 0
[  436.136221][T10208] FAULT_INJECTION: forcing a failure.
[  436.136221][T10208] name failslab, interval 1, probability 0, space 0, times 0
[  436.168922][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.3.1072 Not tainted syzkaller #0 PREEMPT(full) 
[  436.168947][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  436.168957][T10208] Call Trace:
[  436.168963][T10208]  <TASK>
[  436.168970][T10208]  dump_stack_lvl+0x16c/0x1f0
[  436.168995][T10208]  should_fail_ex+0x512/0x640
[  436.169015][T10208]  ? fs_reclaim_acquire+0xae/0x150
[  436.169040][T10208]  ? tomoyo_encode2+0x100/0x3e0
[  436.169063][T10208]  should_failslab+0xc2/0x120
[  436.169084][T10208]  __kmalloc_noprof+0xd2/0x510
[  436.169107][T10208]  tomoyo_encode2+0x100/0x3e0
[  436.169135][T10208]  tomoyo_encode+0x29/0x50
[  436.169159][T10208]  tomoyo_realpath_from_path+0x18f/0x6e0
[  436.169187][T10208]  ? tomoyo_profile+0x47/0x60
[  436.169207][T10208]  tomoyo_path_number_perm+0x245/0x580
[  436.169228][T10208]  ? tomoyo_path_number_perm+0x237/0x580
[  436.169253][T10208]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  436.169277][T10208]  ? find_held_lock+0x2b/0x80
[  436.169321][T10208]  ? find_held_lock+0x2b/0x80
[  436.169341][T10208]  ? hook_file_ioctl_common+0x145/0x410
[  436.169365][T10208]  ? __fget_files+0x20e/0x3c0
[  436.169389][T10208]  security_file_ioctl+0x9b/0x240
[  436.169415][T10208]  __x64_sys_ioctl+0xb7/0x210
[  436.169443][T10208]  do_syscall_64+0xcd/0x4c0
[  436.169465][T10208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.169482][T10208] RIP: 0033:0x7eff2718ebe9
[  436.169497][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.169513][T10208] RSP: 002b:00007eff28072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  436.169530][T10208] RAX: ffffffffffffffda RBX: 00007eff273b5fa0 RCX: 00007eff2718ebe9
[  436.169542][T10208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  436.169551][T10208] RBP: 00007eff28072090 R08: 0000000000000000 R09: 0000000000000000
[  436.169562][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.169573][T10208] R13: 00007eff273b6038 R14: 00007eff273b5fa0 R15: 00007ffd10e50518
[  436.169597][T10208]  </TASK>
[  436.169613][T10208] ERROR: Out of memory at tomoyo_realpath_from_path.
[  436.439265][T10202] CPU: 0 UID: 0 PID: 10202 Comm: syz.2.1070 Not tainted syzkaller #0 PREEMPT(full) 
[  436.439290][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  436.439300][T10202] Call Trace:
[  436.439306][T10202]  <TASK>
[  436.439312][T10202]  dump_stack_lvl+0x16c/0x1f0
[  436.439337][T10202]  should_fail_ex+0x512/0x640
[  436.439356][T10202]  ? fs_reclaim_acquire+0xae/0x150
[  436.439381][T10202]  ? tomoyo_encode2+0x100/0x3e0
[  436.439404][T10202]  should_failslab+0xc2/0x120
[  436.439425][T10202]  __kmalloc_noprof+0xd2/0x510
[  436.439450][T10202]  tomoyo_encode2+0x100/0x3e0
[  436.439479][T10202]  tomoyo_encode+0x29/0x50
[  436.439503][T10202]  tomoyo_realpath_from_path+0x18f/0x6e0
[  436.439531][T10202]  ? tomoyo_profile+0x47/0x60
[  436.439551][T10202]  tomoyo_path_number_perm+0x245/0x580
[  436.439571][T10202]  ? tomoyo_path_number_perm+0x237/0x580
[  436.439595][T10202]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  436.439619][T10202]  ? find_held_lock+0x2b/0x80
[  436.439664][T10202]  ? find_held_lock+0x2b/0x80
[  436.439684][T10202]  ? hook_file_ioctl_common+0x145/0x410
[  436.439707][T10202]  ? __fget_files+0x20e/0x3c0
[  436.439731][T10202]  security_file_ioctl+0x9b/0x240
[  436.439757][T10202]  __x64_sys_ioctl+0xb7/0x210
[  436.439790][T10202]  do_syscall_64+0xcd/0x4c0
[  436.439812][T10202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.439829][T10202] RIP: 0033:0x7ff89f18ebe9
[  436.439848][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.439864][T10202] RSP: 002b:00007ff8a008c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  436.439881][T10202] RAX: ffffffffffffffda RBX: 00007ff89f3b5fa0 RCX: 00007ff89f18ebe9
[  436.439893][T10202] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  436.439903][T10202] RBP: 00007ff8a008c090 R08: 0000000000000000 R09: 0000000000000000
[  436.439913][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.439924][T10202] R13: 00007ff89f3b6038 R14: 00007ff89f3b5fa0 R15: 00007ffeaef143a8
[  436.439951][T10202]  </TASK>
[  436.439968][T10202] ERROR: Out of memory at tomoyo_realpath_from_path.
[  436.998238][T10221] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1073'.
[  437.012693][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'.
[  437.124892][T10220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28
[  437.738487][   T30] audit: type=1400 audit(1756350546.661:714): avc:  denied  { ioctl } for  pid=10239 comm="syz.3.1077" path="socket:[28689]" dev="sockfs" ino=28689 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  437.929737][ T5978] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  438.088524][ T5978] usb 5-1: Using ep0 maxpacket: 32
[  438.095940][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short
[  438.105508][ T5978] usb 5-1: config 7 has an invalid interface number: 128 but max is 0
[  438.184711][ T5978] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  438.214779][ T5978] usb 5-1: config 7 has no interface number 0
[  438.262747][ T5978] usb 5-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  438.305070][ T5978] usb 5-1: config 7 interface 128 has no altsetting 0
[  438.324696][ T5978] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  438.334825][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.343740][ T5978] usb 5-1: Product: syz
[  438.348058][ T5978] usb 5-1: Manufacturer: syz
[  438.362875][ T5978] usb 5-1: SerialNumber: syz
[  438.831115][  T978] usb 1-1: USB disconnect, device number 44
[  438.980519][ T5978] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  439.001898][T10031] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  439.002660][ T5978] usb 5-1: MIDIStreaming interface descriptor not found
[  439.036014][T10031] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  439.088577][T10031] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  439.159219][ T5978] usb 5-1: USB disconnect, device number 73
[  439.186283][T10031] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  439.569111][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  439.881267][  T975] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  439.903706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.319961][  T975] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  440.328070][  T975] usb 3-1: config 0 has no interface number 0
[  440.349578][  T975] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7
[  440.359967][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.369351][  T975] usb 3-1: Product: syz
[  440.378546][  T975] usb 3-1: Manufacturer: syz
[  440.402585][  T975] usb 3-1: SerialNumber: syz
[  440.417847][  T975] usb 3-1: config 0 descriptor??
[  440.427697][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1084'.
[  440.440789][  T975] ttusb_dec_send_command: command bulk message failed: error -22
[  440.451857][  T975] ttusb-dec 3-1:0.50: probe with driver ttusb-dec failed with error -22
[  440.499668][T10031] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.553962][T10031] 8021q: adding VLAN 0 to HW filter on device team0
[  440.572151][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.579242][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.614988][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.622147][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.638589][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  440.705259][ T5926] usb 3-1: USB disconnect, device number 60
[  440.831282][   T10] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  440.846189][   T10] usb 4-1: config 0 has no interface number 0
[  440.852945][   T10] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  440.873350][   T10] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  440.899325][   T10] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.923086][   T10] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  440.934078][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.935371][T10031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.953372][   T10] usb 4-1: Product: syz
[  440.957540][   T10] usb 4-1: Manufacturer: syz
[  440.972059][   T10] usb 4-1: SerialNumber: syz
[  441.020296][   T10] usb 4-1: config 0 descriptor??
[  441.034884][T10284] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  441.044943][   T10] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  441.082787][T10031] veth0_vlan: entered promiscuous mode
[  441.096201][   T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  441.103784][T10031] veth1_vlan: entered promiscuous mode
[  441.137029][   T10] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  441.233414][T10031] veth0_macvtap: entered promiscuous mode
[  441.266265][T10031] veth1_macvtap: entered promiscuous mode
[  441.280735][   T10] usb 4-1: USB disconnect, device number 44
[  441.312092][   T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  441.388064][   T10] cyberjack 4-1:0.69: device disconnected
[  441.411603][T10031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.460902][T10031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.504554][T10136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.553620][T10136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.603673][T10136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.649298][T10136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.379167][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.388744][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.417070][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.427184][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.477822][   T30] audit: type=1400 audit(1756350551.401:715): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/root/syzkaller.xuMeRj/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  442.583151][   T30] audit: type=1400 audit(1756350551.441:716): avc:  denied  { mount } for  pid=10031 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  442.608869][   T30] audit: type=1400 audit(1756350551.441:717): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/root/syzkaller.xuMeRj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  442.652350][   T30] audit: type=1400 audit(1756350551.441:718): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/root/syzkaller.xuMeRj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  442.685915][   T30] audit: type=1400 audit(1756350551.581:719): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  442.709207][   T30] audit: type=1400 audit(1756350551.581:720): avc:  denied  { mount } for  pid=10031 comm="syz-executor" name="/" dev="gadgetfs" ino=6888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  442.733338][   T30] audit: type=1400 audit(1756350551.581:721): avc:  denied  { mounton } for  pid=10031 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  442.811278][   T30] audit: type=1400 audit(1756350551.711:722): avc:  denied  { map } for  pid=10335 comm="syz.0.1093" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  443.138512][   T30] audit: type=1400 audit(1756350552.061:723): avc:  denied  { write } for  pid=10335 comm="syz.0.1093" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  443.163869][T10341] binder_alloc: 10335: binder_alloc_buf, no vma
[  443.251260][   T30] audit: type=1400 audit(1756350552.091:724): avc:  denied  { call } for  pid=10335 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  444.168502][ T5926] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  444.542334][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.566340][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.585350][ T5926] usb 2-1: config 0 has no interfaces?
[  444.591534][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.615035][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  444.625496][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  444.625523][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  444.625536][ T5853] Workqueue: hci3 hci_rx_work
[  444.625564][ T5853] Call Trace:
[  444.625571][ T5853]  <TASK>
[  444.625578][ T5853]  dump_stack_lvl+0x16c/0x1f0
[  444.625605][ T5853]  sysfs_warn_dup+0x7f/0xa0
[  444.625631][ T5853]  sysfs_create_dir_ns+0x24b/0x2b0
[  444.625655][ T5853]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  444.625675][ T5853]  ? find_held_lock+0x2b/0x80
[  444.625702][ T5853]  ? do_raw_spin_unlock+0x172/0x230
[  444.625723][ T5853]  kobject_add_internal+0x2c4/0x9b0
[  444.625751][ T5853]  kobject_add+0x16e/0x240
[  444.625772][ T5853]  ? __pfx_kobject_add+0x10/0x10
[  444.625797][ T5853]  ? do_raw_spin_unlock+0x172/0x230
[  444.625817][ T5853]  ? kobject_put+0xab/0x5a0
[  444.625846][ T5853]  device_add+0x288/0x1aa0
[  444.625871][ T5853]  ? __pfx_dev_set_name+0x10/0x10
[  444.625896][ T5853]  ? __pfx_device_add+0x10/0x10
[  444.625920][ T5853]  ? mgmt_send_event_skb+0x2fb/0x460
[  444.625956][ T5853]  hci_conn_add_sysfs+0x17e/0x230
[  444.625982][ T5853]  le_conn_complete_evt+0x1075/0x1d70
[  444.626009][ T5853]  ? preempt_count_sub+0xe0/0x160
[  444.626040][ T5853]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  444.626067][ T5853]  ? hci_event_packet+0x459/0x11c0
[  444.626104][ T5853]  hci_le_conn_complete_evt+0x23c/0x370
[  444.626139][ T5853]  hci_le_meta_evt+0x357/0x5e0
[  444.626157][ T5853]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  444.626188][ T5853]  hci_event_packet+0x682/0x11c0
[  444.626214][ T5853]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  444.626233][ T5853]  ? __pfx_hci_event_packet+0x10/0x10
[  444.626262][ T5853]  ? kcov_remote_start+0x3c9/0x6d0
[  444.626280][ T5853]  ? lockdep_hardirqs_on+0x7c/0x110
[  444.626307][ T5853]  hci_rx_work+0x2c5/0x16b0
[  444.626326][ T5853]  ? rcu_is_watching+0x12/0xc0
[  444.626351][ T5853]  process_one_work+0x9cf/0x1b70
[  444.626381][ T5853]  ? __pfx_process_one_work+0x10/0x10
[  444.626408][ T5853]  ? assign_work+0x1a0/0x250
[  444.626430][ T5853]  worker_thread+0x6c8/0xf10
[  444.626462][ T5853]  ? __pfx_worker_thread+0x10/0x10
[  444.626482][ T5853]  kthread+0x3c5/0x780
[  444.626501][ T5853]  ? __pfx_kthread+0x10/0x10
[  444.626521][ T5853]  ? rcu_is_watching+0x12/0xc0
[  444.626543][ T5853]  ? __pfx_kthread+0x10/0x10
[  444.626562][ T5853]  ret_from_fork+0x5d7/0x6f0
[  444.626578][ T5853]  ? __pfx_kthread+0x10/0x10
[  444.626596][ T5853]  ret_from_fork_asm+0x1a/0x30
[  444.626633][ T5853]  </TASK>
[  444.626841][ T5853] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  444.905660][ T5853] Bluetooth: hci3: failed to register connection device
[  444.933301][ T5926] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  444.951414][ T5926] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  444.968453][ T5926] usb 2-1: Product: syz
[  444.978501][ T5926] usb 2-1: Manufacturer: syz
[  444.983102][ T5926] usb 2-1: SerialNumber: syz
[  445.012551][ T5926] usb 2-1: config 0 descriptor??
[  445.715922][ T5934] usb 2-1: USB disconnect, device number 59
[  445.898499][  T975] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  446.520657][  T975] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  446.609310][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.625035][  T975] usb 1-1: config 0 descriptor??
[  446.633042][  T975] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  447.549337][ T5978] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  447.680714][T10423] kernel read not supported for file / (pid: 10423 comm: syz.3.1111)
[  447.709819][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  447.709833][   T30] audit: type=1800 audit(1756350556.641:728): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1111" name=18 dev="mqueue" ino=28659 res=0 errno=0
[  447.738671][   T30] audit: type=1400 audit(1756350556.671:729): avc:  denied  { mounton } for  pid=10422 comm="syz.3.1111" path="/syzcgroup/net/syz3/cgroup.procs" dev="cgroup" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  447.764542][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  447.776706][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.786797][ T5978] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  447.799612][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.820033][ T5978] usb 2-1: config 0 descriptor??
[  447.828958][ T5978] hub 2-1:0.0: USB hub found
[  447.938855][  T978] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  448.061897][ T5978] hub 2-1:0.0: 2 ports detected
[  448.098555][  T978] usb 3-1: Using ep0 maxpacket: 32
[  448.119529][  T978] usb 3-1: unable to get BOS descriptor or descriptor too short
[  448.139957][  T978] usb 3-1: config index 0 descriptor too short (expected 53, got 34)
[  448.154299][  T978] usb 3-1: config 2 has an invalid interface number: 221 but max is 0
[  448.162655][  T978] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  448.178591][  T978] usb 3-1: config 2 has no interface number 0
[  448.185060][  T978] usb 3-1: config 2 interface 221 has no altsetting 0
[  448.204926][  T978] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  448.214162][  T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.225141][  T978] usb 3-1: Product: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比
[  448.234100][  T978] usb 3-1: SerialNumber: syz
[  448.563539][  T978] usb 3-1: Found UVC 0.00 device ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比 (05ac:8501)
[  448.570013][T10440] netlink: 'syz.3.1116': attribute type 5 has an invalid length.
[  448.574598][  T978] usb 3-1: No valid video chain found.
[  448.589832][  T978] usb 3-1: USB disconnect, device number 61
[  448.614236][T10438] block device autoloading is deprecated and will be removed.
[  448.747399][ T5998] usb 1-1: USB disconnect, device number 45
[  448.883326][T10445] vxcan1 speed is unknown, defaulting to 1000
[  448.891866][T10445] vxcan1 speed is unknown, defaulting to 1000
[  448.898952][T10445] vxcan1 speed is unknown, defaulting to 1000
[  448.948481][   T44] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  449.296629][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64
[  449.430075][ T5978] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  449.474421][   T44] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  449.498629][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.506982][   T44] usb 4-1: Product: syz
[  449.511270][   T44] usb 4-1: Manufacturer: syz
[  449.515904][   T44] usb 4-1: SerialNumber: syz
[  449.694980][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'.
[  449.950020][   T44] usb 4-1: config 0 descriptor??
[  449.984465][T10459] siw: device registration error -23
[  450.286340][T10445] infiniband syz2: set active
[  450.292525][T10445] infiniband syz2: added vxcan1
[  450.292592][   T44] vxcan1 speed is unknown, defaulting to 1000
[  450.865035][T10470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1116'.
[  450.931005][T10445] RDS/IB: syz2: added
[  450.935033][T10445] smc: adding ib device syz2 with port count 1
[  450.994607][T10445] smc:    ib device syz2 port 1 has pnetid 
[  451.031902][  T975] vxcan1 speed is unknown, defaulting to 1000
[  451.062302][T10445] vxcan1 speed is unknown, defaulting to 1000
[  451.348889][  T975] usb 3-1: new low-speed USB device number 62 using dummy_hcd
[  451.443296][T10478] FAULT_INJECTION: forcing a failure.
[  451.443296][T10478] name failslab, interval 1, probability 0, space 0, times 0
[  451.456013][   T30] audit: type=1400 audit(1756350560.371:730): avc:  denied  { ioctl } for  pid=10477 comm="syz.4.1124" path="socket:[29755]" dev="sockfs" ino=29755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  451.480916][T10478] CPU: 1 UID: 0 PID: 10478 Comm: syz.4.1124 Not tainted syzkaller #0 PREEMPT(full) 
[  451.480939][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  451.480946][T10478] Call Trace:
[  451.480950][T10478]  <TASK>
[  451.480955][T10478]  dump_stack_lvl+0x16c/0x1f0
[  451.480971][T10478]  should_fail_ex+0x512/0x640
[  451.480985][T10478]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  451.480999][T10478]  should_failslab+0xc2/0x120
[  451.481013][T10478]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  451.481024][T10478]  ? __alloc_skb+0x2b2/0x380
[  451.481038][T10478]  __alloc_skb+0x2b2/0x380
[  451.481049][T10478]  ? __pfx___alloc_skb+0x10/0x10
[  451.481061][T10478]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  451.481077][T10478]  netlink_alloc_large_skb+0x69/0x130
[  451.481092][T10478]  netlink_sendmsg+0x6a1/0xdd0
[  451.481107][T10478]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.481126][T10478]  ____sys_sendmsg+0xa98/0xc70
[  451.481142][T10478]  ? copy_msghdr_from_user+0x10a/0x160
[  451.481154][T10478]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.481176][T10478]  ___sys_sendmsg+0x134/0x1d0
[  451.481189][T10478]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.481217][T10478]  __sys_sendmsg+0x16d/0x220
[  451.481229][T10478]  ? __pfx___sys_sendmsg+0x10/0x10
[  451.481250][T10478]  do_syscall_64+0xcd/0x4c0
[  451.481264][T10478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.481276][T10478] RIP: 0033:0x7f07e4f8ebe9
[  451.481286][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.481297][T10478] RSP: 002b:00007f07e31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.481308][T10478] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8ebe9
[  451.481316][T10478] RDX: 0000000020040040 RSI: 0000200000000040 RDI: 0000000000000004
[  451.481323][T10478] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  451.481329][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.481336][T10478] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  451.481350][T10478]  </TASK>
[  451.959047][  T975] usb 3-1: Invalid ep0 maxpacket: 32
[  452.002593][ T5998] usb 4-1: USB disconnect, device number 45
[  452.076280][T10445] vxcan1 speed is unknown, defaulting to 1000
[  452.148644][  T975] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  452.164286][T10482] netlink: 'syz.3.1126': attribute type 3 has an invalid length.
[  452.172139][T10482] netlink: 'syz.3.1126': attribute type 1 has an invalid length.
[  452.189421][T10482] netlink: 'syz.3.1126': attribute type 2 has an invalid length.
[  452.209656][T10482] netlink: 'syz.3.1126': attribute type 8 has an invalid length.
[  452.222735][T10482] netlink: 'syz.3.1126': attribute type 10 has an invalid length.
[  452.240840][T10482] netlink: 'syz.3.1126': attribute type 11 has an invalid length.
[  452.250487][T10482] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.1126'.
[  452.398602][  T975] usb 3-1: Invalid ep0 maxpacket: 32
[  452.404153][  T975] usb usb3-port1: attempt power cycle
[  452.449683][   T30] audit: type=1400 audit(1756350561.381:731): avc:  denied  { connect } for  pid=10486 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  452.482991][   T30] audit: type=1400 audit(1756350561.401:732): avc:  denied  { read } for  pid=10486 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  452.512857][T10445] vxcan1 speed is unknown, defaulting to 1000
[  452.518949][   T30] audit: type=1400 audit(1756350561.401:733): avc:  denied  { read } for  pid=10486 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  452.538993][   T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  452.636724][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'.
[  452.646136][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  452.748514][  T975] usb 3-1: new low-speed USB device number 64 using dummy_hcd
[  452.781831][   T10] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  452.793728][   T10] usb 5-1: config 0 has no interface number 0
[  452.799988][   T10] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  452.810152][  T975] usb 3-1: Invalid ep0 maxpacket: 32
[  452.828435][   T10] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  452.841335][   T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  452.850576][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.859127][   T10] usb 5-1: Product: syz
[  452.867894][   T10] usb 5-1: Manufacturer: syz
[  452.878794][   T10] usb 5-1: SerialNumber: syz
[  452.901999][   T10] usb 5-1: config 0 descriptor??
[  452.918167][T10484] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  452.929692][   T10] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  452.948474][  T975] usb 3-1: new low-speed USB device number 65 using dummy_hcd
[  452.984945][   T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  453.370280][  T975] usb 3-1: Invalid ep0 maxpacket: 32
[  453.389735][   T10] usb 5-1: USB disconnect, device number 74
[  453.398100][  T975] usb usb3-port1: unable to enumerate USB device
[  453.449021][   T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  453.479079][   T10] cyberjack 5-1:0.69: device disconnected
[  453.517464][T10445] vxcan1 speed is unknown, defaulting to 1000
[  453.831913][T10445] vxcan1 speed is unknown, defaulting to 1000
[  454.208182][T10507] FAULT_INJECTION: forcing a failure.
[  454.208182][T10507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.242591][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.4.1135 Not tainted syzkaller #0 PREEMPT(full) 
[  454.242608][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  454.242619][T10507] Call Trace:
[  454.242623][T10507]  <TASK>
[  454.242627][T10507]  dump_stack_lvl+0x16c/0x1f0
[  454.242650][T10507]  should_fail_ex+0x512/0x640
[  454.242666][T10507]  _copy_from_iter+0x29f/0x1720
[  454.242684][T10507]  ? __pfx__copy_from_iter+0x10/0x10
[  454.242698][T10507]  ? __lock_acquire+0xb97/0x1ce0
[  454.242715][T10507]  ? _parse_integer_limit+0x17f/0x1d0
[  454.242728][T10507]  ? _kstrtoull+0x145/0x200
[  454.242737][T10507]  ? __pfx__kstrtoull+0x10/0x10
[  454.242749][T10507]  tun_get_user+0x26d/0x3ce0
[  454.242772][T10507]  ? __pfx_tun_get_user+0x10/0x10
[  454.242789][T10507]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  454.242807][T10507]  ? find_held_lock+0x2b/0x80
[  454.242821][T10507]  ? tun_get+0x191/0x370
[  454.242838][T10507]  tun_chr_write_iter+0xdc/0x210
[  454.242855][T10507]  vfs_write+0x7d0/0x11d0
[  454.242868][T10507]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  454.242885][T10507]  ? __pfx_vfs_write+0x10/0x10
[  454.242895][T10507]  ? find_held_lock+0x2b/0x80
[  454.242917][T10507]  ksys_write+0x12a/0x250
[  454.242928][T10507]  ? __pfx_ksys_write+0x10/0x10
[  454.242944][T10507]  do_syscall_64+0xcd/0x4c0
[  454.242958][T10507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.242969][T10507] RIP: 0033:0x7f07e4f8ebe9
[  454.242979][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.242990][T10507] RSP: 002b:00007f07e31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  454.243001][T10507] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8ebe9
[  454.243008][T10507] RDX: 000000000000002e RSI: 0000200000000100 RDI: 0000000000000003
[  454.243015][T10507] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  454.243021][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.243028][T10507] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  454.243042][T10507]  </TASK>
[  454.359185][ T5978] usb 2-1: USB disconnect, device number 60
[  454.518514][   T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  454.522858][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'.
[  454.537567][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'.
[  454.629576][T10515] FAULT_INJECTION: forcing a failure.
[  454.629576][T10515] name failslab, interval 1, probability 0, space 0, times 0
[  454.643254][T10515] CPU: 0 UID: 0 PID: 10515 Comm: syz.4.1139 Not tainted syzkaller #0 PREEMPT(full) 
[  454.643277][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  454.643287][T10515] Call Trace:
[  454.643293][T10515]  <TASK>
[  454.643300][T10515]  dump_stack_lvl+0x16c/0x1f0
[  454.643325][T10515]  should_fail_ex+0x512/0x640
[  454.643345][T10515]  ? fs_reclaim_acquire+0xae/0x150
[  454.643371][T10515]  ? tomoyo_encode2+0x100/0x3e0
[  454.643394][T10515]  should_failslab+0xc2/0x120
[  454.643414][T10515]  __kmalloc_noprof+0xd2/0x510
[  454.643439][T10515]  tomoyo_encode2+0x100/0x3e0
[  454.643467][T10515]  tomoyo_encode+0x29/0x50
[  454.643491][T10515]  tomoyo_realpath_from_path+0x18f/0x6e0
[  454.643519][T10515]  ? tomoyo_profile+0x47/0x60
[  454.643540][T10515]  tomoyo_path_number_perm+0x245/0x580
[  454.643562][T10515]  ? tomoyo_path_number_perm+0x237/0x580
[  454.643584][T10515]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  454.643608][T10515]  ? find_held_lock+0x2b/0x80
[  454.643661][T10515]  ? find_held_lock+0x2b/0x80
[  454.643682][T10515]  ? hook_file_ioctl_common+0x145/0x410
[  454.643707][T10515]  ? __fget_files+0x20e/0x3c0
[  454.643731][T10515]  security_file_ioctl+0x9b/0x240
[  454.643758][T10515]  __x64_sys_ioctl+0xb7/0x210
[  454.643788][T10515]  do_syscall_64+0xcd/0x4c0
[  454.643810][T10515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.643829][T10515] RIP: 0033:0x7f07e4f8ebe9
[  454.643844][T10515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.643862][T10515] RSP: 002b:00007f07e31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  454.643879][T10515] RAX: ffffffffffffffda RBX: 00007f07e51b5fa0 RCX: 00007f07e4f8ebe9
[  454.643891][T10515] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  454.643902][T10515] RBP: 00007f07e31f6090 R08: 0000000000000000 R09: 0000000000000000
[  454.643913][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.643924][T10515] R13: 00007f07e51b6038 R14: 00007f07e51b5fa0 R15: 00007fffed7483f8
[  454.643949][T10515]  </TASK>
[  454.643966][T10515] ERROR: Out of memory at tomoyo_realpath_from_path.
[  454.653352][ T5998] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  454.828469][ T5998] usb 3-1: Using ep0 maxpacket: 32
[  454.856388][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  454.866286][ T5998] usb 3-1: config 0 has no interfaces?
[  454.871475][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.893145][ T5998] usb 3-1: New USB device found, idVendor=2dc8, idProduct=aa4a, bcdDevice=b4.3d
[  454.914114][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.915561][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  454.925803][ T5998] usb 3-1: Product: syz
[  454.933640][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.936597][ T5998] usb 3-1: Manufacturer: syz
[  454.948911][   T10] usb 1-1: config 0 descriptor??
[  454.954721][   T10] hub 1-1:0.0: USB hub found
[  454.959948][ T5998] usb 3-1: SerialNumber: syz
[  454.967949][ T5998] usb 3-1: config 0 descriptor??
[  454.978520][ T5978] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  455.148714][ T5978] usb 4-1: Using ep0 maxpacket: 16
[  455.165611][ T5978] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  455.190482][ T5978] usb 4-1: config 0 has no interface number 0
[  455.219520][ T5978] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  455.234587][   T10] hub 1-1:0.0: 2 ports detected
[  455.258683][ T5978] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  455.272032][ T5978] usb 4-1: config 0 interface 41 has no altsetting 0
[  455.385919][ T5978] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  455.492509][T10508] rdma_rxe: rxe_newlink: failed to add vxcan1
[  456.192038][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.208386][ T5978] usb 4-1: Product: syz
[  456.213021][ T5978] usb 4-1: Manufacturer: syz
[  456.219405][   T10] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  456.220032][ T5978] usb 4-1: SerialNumber: syz
[  456.236730][   T10] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  456.237520][ T5978] usb 4-1: config 0 descriptor??
[  456.285912][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.314050][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.363576][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'.
[  456.609020][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.611214][T10540] syz.2.1136 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  456.617637][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  456.652916][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.663097][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  456.730097][   T10] usb 1-1: USB disconnect, device number 46
[  457.528637][ T5853] Bluetooth: hci1: unexpected event 0x20 length: 8 > 7
[  457.540131][ T5978] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  457.832519][T10522] syzkaller1: entered promiscuous mode
[  457.838018][T10522] syzkaller1: entered allmulticast mode
[  458.240313][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.259064][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.781607][   T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  458.839136][ T5934] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  458.911055][ T5978] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  458.931136][ T5978] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  458.938559][   T10] usb 1-1: Using ep0 maxpacket: 8
[  458.947375][ T5978] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  458.949639][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  458.968263][ T5978] usb 4-1: USB disconnect, device number 46
[  458.985179][   T10] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  458.999284][   T10] usb 1-1: config 4 has no interface number 0
[  459.002881][   T44] usb 3-1: USB disconnect, device number 66
[  459.007553][ T5934] usb 5-1: config 5 has an invalid interface number: 187 but max is 0
[  459.029673][   T10] usb 1-1: config 4 interface 30 has no altsetting 0
[  459.036552][ T5934] usb 5-1: config 5 has no interface number 0
[  459.077272][   T10] usb 1-1: string descriptor 0 read error: -22
[  459.088117][ T5934] usb 5-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  459.259684][   T10] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  459.298584][ T5934] usb 5-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  459.317238][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.358007][ T5934] usb 5-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  459.556087][   T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  459.567939][ T5934] usb 5-1: config 5 interface 187 has no altsetting 0
[  459.886766][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  459.919322][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  459.936302][ T5934] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[  459.946267][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.964983][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  460.058221][ T5934] usb 5-1: Product: syz
[  460.071139][ T5934] usb 5-1: Manufacturer: syz
[  460.077925][   T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  460.085752][ T5934] usb 5-1: SerialNumber: syz
[  460.091560][   T10] usb 1-1: media controller created
[  460.184327][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.193327][   T10] dw2102: i2c transfer failed.
[  460.199457][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.205625][   T10] dw2102: i2c transfer failed.
[  460.212014][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.218120][   T10] dw2102: i2c transfer failed.
[  460.392708][   T30] audit: type=1400 audit(1756350569.321:734): avc:  denied  { name_bind } for  pid=10568 comm="syz.4.1153" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  460.462818][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.753765][ T5934] usb 5-1: USB disconnect, device number 75
[  460.762885][   T10] dw2102: i2c transfer failed.
[  460.780976][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.786704][   T10] dw2102: i2c transfer failed.
[  460.791533][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  460.797257][   T10] dw2102: i2c transfer failed.
[  460.810052][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  460.899988][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'.
[  460.914641][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  460.964506][   T30] audit: type=1400 audit(1756350569.891:735): avc:  denied  { create } for  pid=10593 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  461.036303][   T30] audit: type=1400 audit(1756350569.921:736): avc:  denied  { setopt } for  pid=10593 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  461.291083][T10596] vivid-002: =================  START STATUS  =================
[  461.299926][T10596] vivid-002: RDS Tx I/O Mode: Controls
[  461.305748][   T30] audit: type=1400 audit(1756350570.211:737): avc:  denied  { getopt } for  pid=10594 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  461.532518][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  461.538262][   T10] dw2102: command 0x0e transfer failed.
[  461.545708][T10596] vivid-002: RDS Program ID: 32904
[  461.560056][T10596] vivid-002: RDS Program Type: 3
[  461.572213][T10596] vivid-002: RDS PS Name: VIVID-TX
[  461.587403][T10596] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[  461.605019][   T30] audit: type=1400 audit(1756350570.511:738): avc:  denied  { write } for  pid=10593 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  461.625271][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  461.625303][   T10] dw2102: command 0x0e transfer failed.
[  461.626285][T10596] vivid-002: RDS Stereo: true
[  461.652210][T10596] vivid-002: RDS Artificial Head: false
[  461.657764][T10596] vivid-002: RDS Compressed: false
[  461.682097][T10596] vivid-002: RDS Dynamic PTY: false
[  461.687330][T10596] vivid-002: RDS Traffic Announcement: false
[  461.693747][T10596] vivid-002: RDS Traffic Program: true
[  461.699991][T10596] vivid-002: RDS Music: true
[  461.705380][T10596] vivid-002: ==================  END STATUS  ==================
[  461.815289][ T5926] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  461.840990][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'.
[  461.903104][   T30] audit: type=1400 audit(1756350570.831:739): avc:  denied  { setopt } for  pid=10612 comm="syz.0.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  462.040473][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  462.458359][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  462.464348][   T10] dw2102: command 0x0e transfer failed.
[  462.470046][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  462.487947][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  462.495054][   T10] dw2102: command 0x0e transfer failed.
[  462.538316][ T5926] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  462.585425][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  462.605294][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  462.616510][   T10] dw2102: command 0x51 transfer failed.
[  462.718469][ T5978] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  462.972707][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  462.986293][ T5926] usb 3-1: SerialNumber: syz
[  463.008963][   T10] dw2102: i2c probe for address 0x68 failed.
[  463.038662][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  463.162959][ T5978] usb 4-1: Using ep0 maxpacket: 8
[  463.170820][ T5978] usb 4-1: unable to get BOS descriptor or descriptor too short
[  463.181440][ T5978] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  463.189593][ T5978] usb 4-1: config 4 has no interface number 0
[  463.195796][ T5978] usb 4-1: config 4 interface 30 has no altsetting 0
[  463.201701][   T10] dw2102: i2c probe for address 0x69 failed.
[  463.205140][ T5978] usb 4-1: string descriptor 0 read error: -22
[  463.619411][ T5926] usb 3-1: 0:2 : does not exist
[  463.637338][ T5978] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  463.640206][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  463.677672][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.688353][T10633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1169'.
[  464.081645][   T30] audit: type=1400 audit(1756350573.011:740): avc:  denied  { name_bind } for  pid=10635 comm="syz.0.1171" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  464.147318][ T5926] usb 3-1: USB disconnect, device number 67
[  464.159335][ T5978] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  464.181190][   T30] audit: type=1400 audit(1756350573.061:741): avc:  denied  { getopt } for  pid=10635 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  464.225701][ T5978] dw2102: su3000_power_ctrl: 1, initialized 0
[  464.247989][ T5978] dvb-usb: bulk message failed: -22 (2/0)
[  464.285113][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  464.302481][   T10] dw2102: i2c probe for address 0x6a failed.
[  464.369223][   T10] dw2102: probing for demodulator failed. Is the external power switched on?
[  464.369241][T10621] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI
[  464.390019][T10621] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  464.398403][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) 
[  464.407740][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  464.417762][T10621] RIP: 0010:su3000_i2c_transfer+0x610/0xf30
[  464.423651][T10621] Code: e4 bf f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 1a 08 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 eb 07 00 00 48 8b 44 24 10
[  464.443233][T10621] RSP: 0018:ffffc900056ffc40 EFLAGS: 00010246
[  464.449271][T10621] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000d8ac000
[  464.457211][T10621] RDX: 0000000000000000 RSI: ffffffff87fba7d9 RDI: ffff88814c90b5c8
[  464.465161][T10621] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000001a00
[  464.473106][T10621] R10: 0000000000001900 R11: 0000000000000000 R12: ffff888079c5d600
[  464.481058][T10621] R13: 0000000000001900 R14: 0000000000000001 R15: dffffc0000000000
[  464.489007][T10621] FS:  00007eff280726c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000
[  464.497914][T10621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.504473][T10621] CR2: 000000110c3ba460 CR3: 000000007e7f2000 CR4: 00000000003526f0
[  464.512420][T10621] Call Trace:
[  464.515674][T10621]  <TASK>
[  464.518587][T10621]  __i2c_transfer+0x6b6/0x2190
[  464.523343][T10621]  ? lockdep_hardirqs_on+0x7c/0x110
[  464.528518][T10621]  ? __pfx___i2c_transfer+0x10/0x10
[  464.533703][T10621]  ? rt_mutex_slowtrylock+0xc9/0x100
[  464.538972][T10621]  i2c_transfer+0x1da/0x380
[  464.543459][T10621]  i2cdev_ioctl_rdwr+0x373/0x710
[  464.548380][T10621]  i2cdev_ioctl+0x5ff/0x820
[  464.552867][T10621]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  464.557875][T10621]  ? selinux_file_ioctl+0x180/0x270
[  464.563060][T10621]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  464.568065][T10621]  __x64_sys_ioctl+0x18b/0x210
[  464.572812][T10621]  do_syscall_64+0xcd/0x4c0
[  464.577292][T10621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.583160][T10621] RIP: 0033:0x7eff2718ebe9
[  464.587548][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.607132][T10621] RSP: 002b:00007eff28072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  464.615537][T10621] RAX: ffffffffffffffda RBX: 00007eff273b5fa0 RCX: 00007eff2718ebe9
[  464.623483][T10621] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004
[  464.631428][T10621] RBP: 00007eff27211e19 R08: 0000000000000000 R09: 0000000000000000
[  464.639373][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.647320][T10621] R13: 00007eff273b6038 R14: 00007eff273b5fa0 R15: 00007ffd10e50518
[  464.655271][T10621]  </TASK>
[  464.658264][T10621] Modules linked in:
[  464.662551][T10621] ---[ end trace 0000000000000000 ]---
[  464.668013][   T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  464.670449][ T5978] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  464.753161][ T5978] usb 4-1: media controller created
[  464.768568][   T30] audit: type=1400 audit(1756350573.651:742): avc:  denied  { read } for  pid=5204 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  464.808464][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  464.818289][   T10] rc_core: IR keymap rc-tt-1500 not found
[  464.825307][ T5978] dw2102: i2c transfer failed.
[  464.830910][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  464.836901][   T10] Registered IR keymap rc-empty
[  464.842586][ T5978] dw2102: i2c transfer failed.
[  464.847452][   T30] audit: type=1400 audit(1756350573.651:743): avc:  denied  { search } for  pid=5204 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  464.880062][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  464.890224][   T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  464.891317][ T5978] dw2102: i2c transfer failed.
[  465.058071][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  465.065857][ T5978] dw2102: i2c transfer failed.
[  465.065874][T10621] RIP: 0010:su3000_i2c_transfer+0x610/0xf30
[  465.070989][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  465.084497][ T5978] dw2102: i2c transfer failed.
[  465.112598][ T5978] dvb-usb: bulk message failed: -22 (6/0)
[  465.129505][ T5978] dw2102: i2c transfer failed.
[  465.140722][T10621] Code: e4 bf f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 1a 08 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 eb 07 00 00 48 8b 44 24 10
[  465.160655][ T5978] dvb-usb: MAC address: 02:02:02:02:02:02
[  465.181421][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  465.192366][T10621] RSP: 0018:ffffc900056ffc40 EFLAGS: 00010246
[  465.192660][   T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input29
[  465.198864][T10621] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000d8ac000
[  465.224667][   T10] dvb-usb: schedule remote query interval to 250 msecs.
[  465.234295][ T5978] dvb-usb: bulk message failed: -22 (3/0)
[  465.237621][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  465.246229][T10621] RDX: 0000000000000000 RSI: ffffffff87fba7d9 RDI: ffff88814c90b5c8
[  465.249462][   T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  465.263519][ T5978] dw2102: command 0x0e transfer failed.
[  465.267195][   T10] usb 1-1: USB disconnect, device number 47
[  465.269165][T10621] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000001a00
[  465.285514][ T5978] dvb-usb: bulk message failed: -22 (3/0)
[  465.291859][ T5978] dw2102: command 0x0e transfer failed.
[  465.297552][T10621] R10: 0000000000001900 R11: 0000000000000000 R12: ffff888079c5d600
[  465.312666][T10621] R13: 0000000000001900 R14: 0000000000000001 R15: dffffc0000000000
[  465.321795][T10621] FS:  00007eff280726c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000
[  465.334135][T10621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  465.342432][T10621] CR2: 00007fffed746ed8 CR3: 000000007e7f2000 CR4: 00000000003526f0
[  465.351696][T10621] Kernel panic - not syncing: Fatal exception
[  465.357923][T10621] Kernel Offset: disabled
[  465.362225][T10621] Rebooting in 86400 seconds..